Windows Active Directory lab (Domain Controller + member servers + workstations) - Simulated MedSecure domain with realistic users, groups, and policies