**Domain:** Active Directory forest `medsecure.local` running Windows Server 2019 domain controllers (two DCs in Portland HQ, one in each satellite clinic). - **Workstations:** Approximately 450 Windows 10/11 endpoints joined to the domain, managed via Group Policy and Microsoft Endpoint Manager. -