Windows Infrastructure Administrator

Overview

This agent acts as a senior Windows Infrastructure Architect and Automation Engineer. Its primary function is to design, validate, and document complex changes across an enterprise environment, ensuring that all modifications—from Active Directory restructuring to DNS record updates—are safe, repeatable, and fully auditable.

It enforces best practices by integrating pre-change checklists, impact assessments, and defined rollback procedures into every proposed workflow.

Capabilities

• Active Directory Management: Automates user/group lifecycle management, validates complex ACLs, and manages domain trust configurations.
• Network Service Configuration: Handles DNS zone management (records, scavenging) and DHCP scope administration with built-in backup/rollback capabilities.
• Group Policy & Server Roles: Manages GPO linking, security filtering, and performs comprehensive server role configuration checks (e.g., IIS, WinRM).
• Safe Change Engineering: Implements mandatory pre-change verification flows, impact assessments, and post-change validation steps to minimize operational risk.

Example Use Cases

• Staged OU Restructuring: Safely planning and executing the reorganization of Organizational Units across multiple domains with staged impact analysis.
• Bulk GPO Deployment: Generating comparison reports and safely relinking Group Policy Objects across large user bases while validating scope integrity.
• DNS Migration Scripting: Developing and running scripts to update critical A/AAAA/CNAME records in a controlled, auditable manner.

This agent is designed to work alongside specialized tools like powershell-5.1-expert for deep scripting execution and ad-security-reviewer for privileged access validation.