Cluster: Proxmox VE 8.2 Identity: 2x WS 2025 DCs Transit: pfSense 10G
🟢 REPRODUCTION TESTBED // DUAL WS 2025 DOMAIN CONTROLLERS

Systems & Reliability Engineering.

Tested in a live Windows Server & Proxmox VE environment on dedicated Dell OptiPlex hardware. Production-grade PowerShell toolsets, Active Directory automation, and segmented pfSense virtualization runbooks. Built with strict Pester unit testing to eliminate manual toil and configuration drift.

BARE-METAL TESTBED SPECIFICATION
CORP.KARANTH.OVH
HYPERVISOR
Proxmox VE 8.2 Dell OptiPlex SFF • 8C Intel • 64GB DDR4 • ZFS Mirror Pool
DIRECTORY
Active Directory DS (DFL 2025) Dual WS 2025 DCs • DC01 (PDC) + DC02 (Repl) • AES-256 Kerberos
NETWORKING
pfSense CE 2.7.2 Edge 802.1Q VLAN 10 (AD Prod) / VLAN 20 (Lab DMZ) • Strict Inter-VLAN ACLs
AUTOMATION
Pester v5.5 AST Test Gate 128 Assertions • Zero Aliases • PSScriptAnalyzer Strict Enforcement
noc@karanth-lab ~/telemetry –:–:– IST 3/3 UP

get nodes corp.karanth.ovh

NAMEROLEADDRESSOSUPTIMECPUSTATUS

ad health dcdiag · repadmin

FSMO · DC01
SCHDNMPDCRIDINF
5/5 roles held
KDC · TGS
0.42 ms p50
p95 0.71 ms · :88 ok
Highest USN
248,190
+0 /min
Replication
0 fails
last sync 12s ago

kerberos tgs latency window 60s · 1s res

p50p50–p95SLO

ports dc01 · AD core set

last probe: —

        
pester 5.5 · 128/128 passed dfl 2025 src: simulated
Host Chassis Sensors // Dell OptiPlex 7070 SFF PVE-01 · PROXMOX VE 8.2 · SMBUS 1s
Core Temp14% LOAD
38°C i7-8700 6C
DDR4 RAM64GB ECC
42.6G / 64G
ZFS PoolONLINE
1.2T / 3.8T
UptimeHEALTHY
17d 08h K6.8.8
§01 The 7 Core Topic Pillars
Comprehensive index covering all 182 published engineering runbooks
01 · IDENTITY & AUTH 83 POSTS

Active Directory Core

13-Part Master Series, Kerberos protocol flows, FSMO role transfers, AD CS Certificate Authorities, Schema attributes, and DFSR replication.

13-Part Series Kerberos FSMO Roles AD CS / PKI
Open AD Index →
02 · WINDOWS SERVER 47 POSTS

Windows Server Infrastructure

Windows Server 2025/2022 administration, Hyper-V virtual switches, Storage Replica, RDS Session Hosts, Windows Containers, and NIC Teaming LBFO.

Hyper-V Storage Replica RDS Hosts LBFO Teaming
Open Windows Index →
03 · ON-CALL & SRE 40 POSTS

Incident Troubleshooting

Battle-tested post-mortems indexed by exact Event ID: Event 13508 (DFSR), Event 1000 (ADWS), Event 4402 (NPS), Event 13 (CAPI2), and LSASS memory leaks.

Event 13508 Event 1000 Event 4402 LSASS Dumps
Search Error Index →
04 · VIRTUALIZATION & LAB 32 POSTS

Proxmox VE & Homelab

15-Part Homelab Build Series, ZFS storage tuning, Proxmox Resource Limits & ballooning, PCI Passthrough, and automated PBS backup restores.

15-Part Series Proxmox VE ZFS Pools PBS Backups
Open Homelab Index →
05 · AGENTIC & AI OPS 21 POSTS

AI Tools & Autonomous Ops

10-Part Claude Code Master Series, 9-Part Codex CLI Automation Series, Model Context Protocol (MCP) workflows, and agentic DevOps pipelines.

Claude Code (10P) Codex CLI (9P) MCP Tools Prompt Ops
Open AI Tools Index →
06 · CLI & AUTOMATION 18 POSTS

PowerShell Engineering

Production-grade module design, ADOpsKit automation, Pester v5.5 unit test matrices, PSScriptAnalyzer compliance, WinRM remoting, and splatting.

ADOpsKit Pester v5.5 PSSA Rules WinRM/JEA
Open PowerShell Index →
07 · DEVOPS & IAC 14 POSTS

Terraform & Infrastructure as Code

13-Part Terraform Master Series covering declarative HCL, remote state locking, Proxmox VM provisioning, modular topologies, and CI/CD pipelines.

13-Part Series HCL Syntax Remote State Proxmox Provider
Open DevOps Index →
§03 Enterprise Tools & Utilities
Interactive Port Calculators, Forensic Query Builders & Automation Toolkits
Networking & Security Live Utility

Active Directory & Infrastructure Firewall Matrix

Interactive port calculator and firewall rule generator covering AD Core replication, PKI (AD CS), SCCM/WSUS, Prometheus, and Enterprise Backups with exportable PowerShell scripts.

Launch Firewall Matrix →
Threat Hunting & Forensics Live Utility

AD & Windows Security Event Query Builder

Production Event Viewer XML XPath generator, Get-WinEvent PowerShell parser, and SubStatus error code decoders for Account Lockouts (4740), DCSync (4662), and Kerberoasting (4769).

Launch Event Builder →
⭐ GITHUB REPOSITORY · TEST-DRIVEN POWERSHELL TOOLSET

ADOpsKit & ADSetupKit: Active Directory Automation

The Problem: Manual domain controller promotion and GPO baseline provisioning took 45+ minutes and suffered from silent configuration drift across environments.

The Solution: Idempotent, zero-prompt PowerShell toolkits automating forest provisioning, stale account cleanups, Kerberos delegation audits, and domain telemetry.

Engineering Rigor: 100% PSScriptAnalyzer compliance with an automated Pester v5.5 unit/integration test suite executing in CI.

PS> git clone https://github.com/Karanth1992/powershell-scripts.git
Language Stack PowerShell 7+ / Windows PS 5.1
Target Infrastructure Active Directory & Windows Server
License & Source MIT Open Source on GitHub
Looking for all enterprise calculators, generators, and upcoming roadmaps? Explore All Tools →
§04 About the Author & Field Manual
Enterprise Infrastructure Engineer & Homelab Architect
SK
SysAdmin 10+ Yrs WS2025 / PVE 8

K Shankar R Karanth

Enterprise Infrastructure Engineer & Technical Author

Architecting resilient Windows Server environments, Active Directory topologies, high-availability Proxmox clusters, and automated DevOps workflows. Every guide on karanth.ovh is battle-tested in a live production-grade homelab to provide zero-fluff, actionable technical resolutions.

182 Published Runbooks
7 Core Pillars
100% Lab Tested