Update: As of July 11, 2022, the domain-joined devices support in the Evaluation Lab is now GA
Microsoft Defender for Endpoint's Evaluation Lab is an environment that allows security teams to seamlessly test their defense against threats. The lab is designed to eliminate the complexities of device and environment configuration so that you can focus on evaluating the capabilities of the platform, running simulations, and seeing the prevention, detection, and remediation features in action.
We are excited to share that the Evaluation Lab now supports domain-joined devices in Public Preview. This enhancement allows you to set up domain controller devices so that you can run more complex simulations and impactful attack scenarios. You can simulate scenarios that involve domain controllers, lateral movement, and multistage attacks across multiple devices. For more information, see Microsoft Defender for Endpoint evaluation lab | Microsoft Docs.
Here's how to get started:
1. To set up your domain, select Add Device, then select Windows Server 2019, and tick “set as domain controller”
2. Once your domain controller is provisioned, you will be able to create domain-joined devices by clicking Add Device and ticking join to domain.
Note: Only one domain controller can be live at any point in time. Each domain controller device will remain live as long as there is a live device connected to it.
We're looking forward to you trying out the Evaluation Lab updates. Let us know your thoughts and feedback in the comments below or through the feedback tool in the portal!