Skip to main content
Michael P. Goodman

Windows Server · Active Directory · Helpdesk

IT Infrastructure Automation with AI for Windows Server & AD

I automate the repetitive work that consumes IT teams, using PowerShell, Python, and local AI, with human approval in front of every change that matters. The result is fewer errors, faster response, and skilled staff working on projects and not on routine tickets.

28 years of legacy knowledge, applied to modern AI

I started in IT when a server was a box in a closet and a directory was a new idea. My MCSE+I credential dates from the Windows NT era. I have since supported enterprise Windows environments, Active Directory, networking, virtualization, and disaster recovery through every generation that followed.

That history is the reason my automation is safe. AI is excellent at reading logs, classifying tickets, and drafting explanations. It is not a substitute for knowing why a domain controller must never be rebooted casually, or what a stale service account can do. I pair modern models with decades of hands-on operational judgment.

Michael P. Goodman mounting a network rack with a managed switch during an on-site IT install
Michael P. Goodman mounting a wall-mount network rack with a managed switch and structured Ethernet cabling during an on-site installation. The physical layer is where this automation starts.

What I automate

Three areas account for most of the routine load on a small or mid-sized IT team.

Windows Server automation

Scripted checks and reports that tell you about problems before users do.

  • Daily health reports covering disk, services, event logs, and replication status
  • Patch compliance reporting and maintenance-window orchestration
  • Backup job verification and restore-test reminders
  • DNS and DHCP consistency checks
  • AI summaries that turn raw event log noise into a ranked list of issues worth reading

Active Directory automation

Identity lifecycle work that is tedious, error-prone, and security-critical.

  • Stale user, computer, and service account reports with owner follow-up
  • Onboarding and offboarding workflows with an approval step
  • Group membership reviews and privileged-access reporting
  • Password expiry notifications and lockout analysis
  • Group Policy documentation generated from the live configuration

AI-assisted helpdesk

Faster first response and cleaner tickets without removing the human.

  • Ticket classification, priority suggestion, and routing
  • Suggested replies drawn from your own knowledge base using private RAG
  • Ticket and thread summaries for escalations and shift handoffs
  • Guided runbooks for common requests such as resets and access changes
  • Trend reports that show which problems keep coming back

Guardrails: where AI helps and where it must not act alone

Automation inside identity and server infrastructure carries real risk. These rules are built into every project.

  • Read-only first

    New automations report what they would do before they are allowed to do it.

  • Human approval for changes

    Account changes, group changes, and server actions wait for an explicit approval.

  • Least-privilege service accounts

    Each workflow gets its own narrowly scoped identity, never a domain admin credential.

  • Full audit trail

    Every proposal, approval, and action is logged with who, what, and when.

  • Local models for sensitive data

    Ticket text and directory data can be processed on hardware you control, with no public AI service involved.

  • Tested rollback

    Every change has a documented way back before it goes live.

Proof of execution

The same private-AI discipline applies to infrastructure automation. In the Project S.P.H.E.R.E. AI infrastructure case study, I document a complete local stack: Ubuntu GPU nodes, Ollama for local inference, LlamaIndex and Qdrant for private retrieval, and a FastAPI and React interface, all designed so that no public AI API handles the data. That is the engine behind private helpdesk assistants and internal knowledge search.

If you want an assistant that reads your own runbooks and answers your own technicians, the private enterprise RAG service is the companion to this one.

How a pilot works

  1. Week 1

    Audit and select

    I review your environment and pick one high-volume, low-risk workflow with a clear before-and-after.

  2. Weeks 2 to 3

    Build read-only

    The automation runs in report mode so your team can compare its output with reality.

  3. Week 4

    Approve and hand over

    Approved actions are enabled, runbooks are delivered, and we decide what to automate next.

Timelines vary with the size of the environment. The pilot scope is fixed before work begins.

IT infrastructure automation FAQ

What is IT infrastructure automation?

It is the practice of replacing repetitive manual administration, such as account provisioning, server health checks, patch reporting, and ticket routing, with scripted and monitored workflows. Done well, it reduces errors, shortens response times, and gives skilled staff time back for project work.

Is it safe to let AI touch Active Directory?

Only with strict guardrails. My designs start read-only, use dedicated least-privilege service accounts, require human approval before any change is applied, and log every action. AI proposes and explains. A person or a tested script with a narrow scope executes.

Can the AI run without sending our tickets and directory data to the cloud?

Yes. Helpdesk and directory data can be processed by a local language model on your own hardware, so ticket text, usernames, and configuration details never reach a public AI service. See the Project S.P.H.E.R.E. case study for the architecture.

Where should we start?

Start with one high-volume, low-risk workflow, usually stale account reporting or ticket triage. A pilot of that size proves the value, exposes your real data quality, and builds trust in the approach before anything touches production changes.

Do you replace our IT staff?

No. The goal is to remove repetitive work and leave your people with the judgment calls. Every automation I deliver comes with documentation and a runbook so your own team owns it.

Explore the full range of sovereign IT and AI architecture services.

Automate one workflow and see the result

Tell me which routine task costs your team the most hours. I will propose a scoped pilot with clear guardrails and a measurable outcome.