Hi, I'm Hector Enriquez Orellana.

Windows Server, Active Directory and Network Services Lab

Built an Azure-based Windows domain environment with AD DS, a domain controller, OUs, users, security groups, DNS records, Remote Desktop access, and file share permissions.

• Promoted Windows Server 2022 to a domain controller and configured a new forest with domain-joined client access.
• Created and tested DNS A records and CNAME records, observed DNS cache behavior, and used ipconfig /flushdns during troubleshooting.
• Configured file shares, NTFS/share permissions, security groups, access control, and Group Policy concepts for IT support practice.

smart_displayVideo walkthrough tutorial

DNS Traffic Analysis Lab

Documented a repeatable DNS troubleshooting workflow for help desk and systems support, isolating name resolution failures from broader network problems, then proving the fix with live packet capture by following a single query end to end, from client to resolver and back.

• Worked the resolution path top-down: confirmed the client's DNS server and connection-specific suffix with ipconfig /all, tested reachability with ping, and queried records directly with nslookup.
• Cleared stale cache entries using ipconfig /flushdns and re-tested, separating local caching problems from authoritative resolution failures.
• Captured live DNS queries and responses in Wireshark, reading source, destination, queried domain, record type, and returned IP to pinpoint exactly where resolution broke down.
• Mapped common symptoms such as NXDOMAIN, query timeouts, and wrong IP answers to likely root causes and next steps, then wrote support-style documentation so a Tier 1 technician can repeat the workflow and escalate with evidence.

Google Workspace Admin & MFA Hardening

Administering the Google Workspace environment for our web studio from the Google Admin console, with a focus on hardening identity security. I enforce multi-factor authentication with the Google Authenticator app and apply security best practices to protect company accounts and data. This is hands-on systems administration experience I am actively building.

• Enforced multi-factor authentication (MFA) for all users and required it for privileged and admin accounts.
• Standardized on the Google Authenticator app, with FIDO2 security keys as a strong second option, and moved away from weak factors like SMS and voice call.
• Tuned re-authentication frequency and access controls for sensitive accounts instead of trusting devices indefinitely.
• Managed user accounts, groups, and organizational units, plus onboarding and offboarding for the team.
• Maintained domain and email settings, including DNS and MX records for the studio's domain.

IT Devices and Software Tracker

Designed a relational inventory system for a consulting-company scenario to track employees, laptops, assigned devices, software packages, and software installations. Built as a database systems project, it centralizes the device, software, user, and asset details that IT teams usually spread across multiple systems and spreadsheets, so asset visibility and reporting stay accurate.

• Built MySQL tables for employees, laptop inventory, software catalog, device assignments, and software tracker relationships, with keys that link each device and install back to a user.
• Organized the build into separate SQL scripts for table creation, data insertion, table display, and validation test queries, so the database is repeatable and easy to rebuild.
• Wrote SQL queries to identify hardware assigned to users, installed software by device, popular computer models, and top installed software packages.
• Connected MySQL to Python using SQLAlchemy and Pandas, then visualized query results with Matplotlib.
• Used a Jupyter notebook to read the live MySQL data with Pandas and answer operational questions about device assignments, installed software, and asset status.
• Documented the full design in a database systems project report covering the schema, the queries, and the reporting findings.

View Repository

Azure Networking and Packet Analysis

Built a small cloud environment in Azure to capture and analyze live network traffic between virtual machines, then used Network Security Group rules to control that traffic and confirm the changes with packet capture.

• Deployed Windows 10 and Ubuntu virtual machines into a shared Resource Group and placed them on the same Virtual Network and subnet so they could communicate directly.
• Connected to the Windows VM over Remote Desktop, installed Wireshark, and captured ICMP, SSH, DHCP, DNS, and RDP traffic by filtering for one protocol at a time.
• Blocked inbound ICMP on the Ubuntu VM's Network Security Group during a live ping, watched the replies stop in Wireshark, then re-enabled the rule and confirmed traffic resumed in real time.
• Used PowerShell to drive activity (ping, SSH, ipconfig /renew, and nslookup) and matched each action to the packets it generated, including why RDP streams traffic continuously while other protocols only appear on demand.
• Cleaned up the environment by closing the Remote Desktop session and deleting the Resource Group to avoid leaving resources running.