VMware and Windows Server 2025 - Hybrid AD Environment - Intune
This homelab demonstrates how to build and expand a VMware-based Windows domain environment with Active Directory, virtual and physical clients, Group Policy, backup and recovery, printer deployment, and remote power management.
Because the project is too large for a single article, I divided it into smaller PDF documents. Each document covers one milestone of the setup and contains the practical steps needed to reproduce it.
I will later add to this project and expand on it with Azure, MS365 and more. That will be updated here.
0 – ARES ESXi and Veeam Preparation
Preparing the physical ARES computer for VMware ESXi, creating a Veeam backup, and making sure the existing Windows installation can be restored safely as aVM.
0 ARES_ESXi_Veeam_Preparation_Tutorial.pdf
1 – Restore the Windows VM on ESXi
Creating a virtual machine on ESXi and restoring the previous Windows system from the Veeam backup.
1 ARES_ESXi_Windows_VM_Restore
2 – Set Up the vSwitch, Port Groups, and DC01
Creating the VMware virtual networks and installing Windows Server 2025 as the first domain controller.
2 set up vswitch portgroup and DC01 server 2025
3 – Set Up a Windows 11 Client and Join the Domain
Creating a Windows 11 virtual machine, configuring its network settings, and joining it to the Active Directory domain.
3 Set Up W11 Client and Join the Domain.pdf
4 – ESXi Power Management
Saving energy at home: Configuring automatic VM shutdown, safely shutting down the ESXi host, and starting it remotely with Wake-on-LAN.
4 Power_Management_Documentation.pdf
5 – Organizational Units, Users, Groups, and Group Policy
Creating a basic Active Directory structure and managing users, groups, organizational units, and Group Policy settings.
5 OU Users Groups and Group Policy.pdf
6 – Join a Physical PC to the Domain
Connecting a physical Windows computer to the lab network and joining it to the Active Directory domain.
6 Join a physical PC to the Domain.pdf
7 – Deploy a Printer through Group Policy
Connecting the existing CUPS printer to the Windows domain clients and deploying it automatically through Group Policy.
7 Add a Printer to all Machines in AD via GPO.pdf
8 - WSUS Patch Management
Installing a WSUS server and integrating a Pilot, Workstation and Server group basic separation and GPOs for updating my hosts.
9 - Facilitating Intune
Adding devices including an iPad, adding apps, compliance policies and an update ring.
10 - The Hybrid Environment
Build and compare a cloud-native Windows endpoint and an existing AD-based hybrid endpoint in the same tenant.