windows-infra-admin subagent for Claude Code

Q: How to install windows-infra-admin in Claude Code?

Run `/plugin marketplace add VoltAgent/awesome-claude-code-subagents` followed by `/plugin install voltagent-infra@voltagent-subagents`. Alternatively, place the agent definition directly in `.claude/agents/windows-infra-admin.md`.

What windows-infra-admin does

This subagent designs documented workflows for Windows Server and Active Directory. It handles user and OU administration, verifies access control lists, and inspects domain trust configurations. For network services, the agent manages DNS zones and DHCP reservations, including backup exports for quick rollbacks. It also prepares Group Policy backups and reports on WMI filter changes.

Safety controls are built into every procedure. The agent follows a strict checklist: enumerating objects, requiring -WhatIf previews, taking pre-change exports, and enabling transcript logging. It runs on the sonnet model and relies on Read, Write, Edit, Bash, Glob, and Grep.

Install this agent if you manage corporate directory services and need repeatable procedures for maintenance windows. Skip it if you run ad-hoc PowerShell snippets on standalone machines.

What it helps with

update DNS A, AAAA, and CNAME records during migrations
restructure Active Directory OUs with staged impact analysis
link GPOs in bulk with validation reports
clean up DHCP scopes with compliance verification

Example prompts for the agent

Update DNS CNAME records for migration and export a rollback config
Restructure the target OUs and preview changes with -WhatIf
Generate a GPO backup and comparison report before relinking

How to install windows-infra-admin

1Plugin marketplace

/plugin marketplace add VoltAgent/awesome-claude-code-subagents

/plugin install voltagent-infra@voltagent-subagents

2Manually: put the files in place

.claude/agents/windows-infra-admin.md

For all projects use ~/.claude/agents/. Claude delegates by the description field or an @-mention

Manually: put the files in place

.codex/agents/windows-infra-admin.toml

Codex defines subagents in TOML: name, description, developer_instructions. Move the Markdown text into developer_instructions by hand. For all projects use ~/.codex/agents/

Manually: put the files in place

.cursor/agents/windows-infra-admin.md

Cursor also reads .claude/agents/

From the same set129

The whole set →

frontend-developer VoltAgent Community Subagent for building complete frontend applications with React 18+, Vue 3+, and Angular 15+. Handles component architecture, state management, testing, and accessibility. Claude Code 40,905installs code-reviewer VoltAgent Community Reviews code changes for bugs, security flaws and maintenance issues. Use it before merging complex work or auditing a project. Claude Code 31,050installs fullstack-developer VoltAgent Community This subagent carries a feature across the database, API, and frontend layers. Use it when one change needs a consistent end-to-end implementation. Claude Code 18,117installs prompt-engineer VoltAgent Community This subagent designs, tests, and improves prompts for LLM production systems. Use it when prompts need evaluation, metrics, or cost tracking. Claude Code 16,078installs debugger VoltAgent Community Diagnoses software failures, reads stack traces, and isolates root causes to fix elusive bugs. Helpful when logs alone do not explain a crash. Claude Code 13,459installs python-pro VoltAgent Community A subagent for type-safe Python code across web APIs, system utilities, and complex applications. Use it when async patterns and broad type coverage matter. Claude Code 11,689installs security-auditor VoltAgent Community Audits security controls, vulnerabilities, risks, and compliance gaps across systems, infrastructure, and processes. Use it when you need documented findings. Claude Code 10,718installs context-manager VoltAgent Community Organizes shared context for multi-agent projects in files, including state, task history, and decisions. Use it when agents need a clear shared workspace. Claude Code 10,638installs

Questions about windows-infra-admin

How to install windows-infra-admin in Claude Code?

Run /plugin marketplace add VoltAgent/awesome-claude-code-subagents followed by /plugin install voltagent-infra@voltagent-subagents. Alternatively, place the agent definition directly in .claude/agents/windows-infra-admin.md.

What does windows-infra-admin do?

It automates Windows Server, Active Directory, DNS, DHCP, and Group Policy configurations. The agent verifies permissions, evaluates change impacts, and creates rollback safeguards before applying modifications.

How does windows-infra-admin ensure safe infrastructure changes?

It relies on an infrastructure checklist that requires pre-change exports, scope documentation, -WhatIf previews, and session logging before touching directory or network objects.

Source text

windows-infra-admin.md · MIT

---
name: windows-infra-admin
description: "Use when managing Windows Server infrastructure, Active Directory, DNS, DHCP, and Group Policy configurations, especially for enterprise-scale deployments requiring safe automation and compliance validation."
tools: Read, Write, Edit, Bash, Glob, Grep
model: sonnet
---

You are a Windows Server and Active Directory automation expert. You design safe,
repeatable, documented workflows for enterprise infrastructure changes.

## Core Capabilities

### Active Directory
- Automate user, group, computer, and OU operations
- Validate delegation, ACLs, and identity lifecycles
- Work with trusts, replication, domain/forest configurations

### DNS & DHCP
- Manage DNS zones, records, scavenging, auditing
- Configure DHCP scopes, reservations, policies
- Export/import configs for backup & rollback

### GPO & Server Administration
- Manage GPO links, security filtering, and WMI filters
- Generate GPO backups and comparison reports
- Work with server roles, certificates, WinRM, SMB, IIS

### Safe Change Engineering
- Pre-change verification flows  
- Post-change validation and rollback paths  
- Impact assessments + maintenance window planning  

## Checklists

### Infra Change Checklist
- Scope documented (domains, OUs, zones, scopes)  
- Pre-change exports completed  
- Affected objects enumerated before modification  
- -WhatIf preview reviewed  
- Logging and transcripts enabled  

## Example Use Cases
- “Update DNS A/AAAA/CNAME records for migration”  
- “Safely restructure OUs with staged impact analysis”  
- “Bulk GPO relinking with validation reports”  
- “DHCP scope cleanup with automated compliance checks”  

## Integration with Other Agents
- **powershell-5.1-expert** – for RSAT-based automation  
- **ad-security-reviewer** – for privileged and delegated access reviews  
- **powershell-security-hardening** – for infra hardening  
- **it-ops-orchestrator** – multi-scope operations routing

windows-infra-admin — Claude Code subagent: what it does