WIN11-01 restored: secure channel verified True, DC discovery via nltest, domain auth as bglab\administrator. Topology diagram and docs updated; pending callouts removed.

This commit is contained in:
Keith Casko
2026-10-03 08:51:50 -04:00
parent 748f6d7bf9
commit 0c19e24c5e
4 changed files with 68 additions and 41 deletions
+12 -16
View File
@@ -9,13 +9,11 @@
.caption { font-size: 11px; fill: #556372; }
.box { fill: #ffffff; stroke: #1a6fa5; stroke-width: 2; }
.box-dc { fill: #f3f5f8; stroke: #0b1d2e; stroke-width: 2; }
.box-pending { fill: #ffffff; stroke: #c08a2b; stroke-width: 2; stroke-dasharray: 5 3; }
.box-net { fill: #ffffff; stroke: #d0d7df; stroke-width: 1; stroke-dasharray: 4 3; }
.hdr { font-weight: bold; fill: #0b1d2e; }
.role { font-size: 11px; fill: #556372; }
.link { stroke: #1a6fa5; stroke-width: 1.5; fill: none; }
.net-label { font-size: 12px; fill: #155a86; font-weight: bold; }
.pending-tag { font-size: 10px; fill: #c08a2b; font-weight: bold; }
</style>
</defs>
@@ -43,25 +41,23 @@
<text x="440" y="268" class="role" text-anchor="middle">SMB · share: IT (RBAC)</text>
<text x="440" y="286" class="role" text-anchor="middle">192.168.31.20</text>
<rect x="620" y="210" width="240" height="90" class="box"/>
<text x="740" y="232" class="hdr" text-anchor="middle">OPNsense (FreeBSD)</text>
<text x="740" y="250" class="role" text-anchor="middle">WAN · VMnet8 (DHCP)</text>
<text x="740" y="268" class="role" text-anchor="middle">LAN · VMnet2 (192.168.254.1)</text>
<text x="740" y="286" class="role" text-anchor="middle">Firewall / router (lab)</text>
<rect x="570" y="210" width="200" height="90" class="box"/>
<text x="670" y="232" class="hdr" text-anchor="middle">WIN11-01</text>
<text x="670" y="250" class="role" text-anchor="middle">Windows 11 Education</text>
<text x="670" y="268" class="role" text-anchor="middle">Domain client (ad.bytegeist.lab)</text>
<text x="670" y="286" class="role" text-anchor="middle">192.168.31.x (DHCP)</text>
<line class="link" x1="490" y1="136" x2="490" y2="168" marker-end="url(#arrow)"/>
<rect x="60" y="400" width="860" height="150" class="box-net"/>
<text x="78" y="420" class="net-label">VMnet2 — host-only · 192.168.254.0/24 · behind OPNsense LAN</text>
<text x="78" y="420" class="net-label">VMnet2 — host-only · 192.168.254.0/24 · behind OPNsense LAN (planned segment)</text>
<line class="link" x1="740" y1="300" x2="740" y2="398" marker-end="url(#arrow)"/>
<rect x="380" y="440" width="220" height="90" class="box-pending"/>
<text x="490" y="462" class="hdr" text-anchor="middle">WIN11-01</text>
<text x="490" y="480" class="role" text-anchor="middle">Windows 11 Education</text>
<text x="490" y="498" class="role" text-anchor="middle">Domain-joined (ad.bytegeist.lab)</text>
<text x="490" y="516" class="pending-tag" text-anchor="middle">NIC currently bridged → fix in VMware</text>
<rect x="620" y="440" width="240" height="90" class="box"/>
<text x="740" y="462" class="hdr" text-anchor="middle">OPNsense (FreeBSD)</text>
<text x="740" y="480" class="role" text-anchor="middle">WAN · VMnet8 (DHCP)</text>
<text x="740" y="498" class="role" text-anchor="middle">LAN · VMnet2 (192.168.254.1)</text>
<text x="740" y="516" class="role" text-anchor="middle">Firewall / router (lab)</text>
<text x="60" y="590" class="caption">Domain: ad.bytegeist.lab · NetBIOS: BGLAB · Forest/Domain mode: Windows2016 · GC &amp; PDC on DC01 · PDC time → time.windows.com</text>
<text x="60" y="606" class="caption">OUs: ByteGeist/{Servers, Workstations, Groups, Users/{HR, IT, Sales}} · 7 lab users · 7 department groups · diagram reflects verified ipconfig + Get-ADDomain + Get-SmbShare</text>
<text x="60" y="606" class="caption">OUs: ByteGeist/{Servers, Workstations, Groups, Users/{HR, IT, Sales}} · 7 lab users · 7 department groups · diagram reflects verified ipconfig + Get-ADDomain + Get-SmbShare + Test-ComputerSecureChannel</text>
</svg>

Before

Width:  |  Height:  |  Size: 4.3 KiB

After

Width:  |  Height:  |  Size: 4.0 KiB