Create Quest on Demand Migration Lab – Part1 Build a Zero-Trust, Two-Tenant Playground

    function New-LabVM {
    <#
    .SYNOPSIS
      Creates a Generation 2 Hyper-V VM with sane defaults (VHDX, memory, CPU, firmware, ISO, TPM).
    .EXAMPLE
      New-LabVM -Name CONTOSO-DC01 -SwitchName vLAN-Contoso -ISOPath D:\ISOs\WS2022.iso -MemoryStartupGB 2 -VHDSizeGB 60 -VCPU 1
    #>

    [CmdletBinding()]
    param(
        [Parameter(Mandatory)][string]$Name,
        [Parameter(Mandatory)][string]$SwitchName,

        [string]$VMRoot = "C:\Hyper-V\VMs",
        [string]$VHDRoot = "C:\Hyper-V\VHDs",

        [int]$Generation = 2,
        [int]$VCPU = 2,

        [int]$MemoryStartupGB = 2,
        [switch]$UseDynamicMemory,
        [int]$MemoryMinGB = 2,
        [int]$MemoryMaxGB = 8,

        [int]$VHDSizeGB = 60,

        [string]$ISOPath,                               # optional
        [ValidateSet("MicrosoftWindows","MicrosoftUEFICertificateAuthority")]
        [string]$SecureBootTemplate = "MicrosoftWindows",
        [switch]$DisableSecureBoot,

        [switch]$EnableTPM,
        [switch]$StartVM
    )

    # --- Pre-flight ---
    if (-not (Get-Module -ListAvailable -Name Hyper-V)) {
        throw "Hyper-V module not found. Install the Hyper-V role & tools."
    }
    if (-not (Get-VMSwitch -Name $SwitchName -ErrorAction SilentlyContinue)) {
        throw "VMSwitch '$SwitchName' not found."
    }
    if ($ISOPath -and -not (Test-Path $ISOPath)) {
        throw "ISO not found at $ISOPath"
    }

    $vmPath  = Join-Path $VMRoot $Name
    $vhdPath = Join-Path $VHDRoot "$Name.vhdx"

    New-Item -ItemType Directory -Path $vmPath  -Force | Out-Null
    New-Item -ItemType Directory -Path $VHDRoot -Force | Out-Null

    # --- Create VM + VHDX ---
    $vm = New-VM -Name $Name -Generation $Generation `
                 -MemoryStartupBytes ($MemoryStartupGB * 1GB) `
                 -SwitchName $SwitchName `
                 -Path $vmPath `
                 -NewVHDPath $vhdPath -NewVHDSizeBytes ($VHDSizeGB * 1GB)

    # CPU
    Set-VM -Name $Name -ProcessorCount $VCPU

    # Memory
    if ($UseDynamicMemory) {
        Set-VMMemory -VMName $Name -DynamicMemoryEnabled $true `
                     -MinimumBytes ($MemoryMinGB * 1GB) `
                     -StartupBytes ($MemoryStartupGB * 1GB) `
                     -MaximumBytes ($MemoryMaxGB * 1GB)
    }

    # Firmware / Secure Boot
    if ($DisableSecureBoot) {
        Set-VMFirmware -VMName $Name -EnableSecureBoot Off
    } else {
        Set-VMFirmware -VMName $Name -EnableSecureBoot On -SecureBootTemplate $SecureBootTemplate
    }

    # Optional TPM (for Win11 etc.)
    if ($EnableTPM) {
        Set-VMKeyProtector -VMName $Name -NewLocalKeyProtector
        Enable-VMTPM -VMName $Name
    }

    # Optional ISO + boot order (DVD first)
    if ($ISOPath) {
        $dvd = Get-VMDvdDrive -VMName $Name -ErrorAction SilentlyContinue
        if (-not $dvd) { $dvd = Add-VMDvdDrive -VMName $Name -Path $ISOPath }
        else           { Set-VMDvdDrive -VMName $Name -Path $ISOPath | Out-Null }
        $hdd = Get-VMHardDiskDrive -VMName $Name | Where-Object { $_.Path -like "*.vhd*" }
        Set-VMFirmware -VMName $Name -BootOrder $dvd,$hdd
    }

    if ($StartVM) { Start-VM -Name $Name }

    # Return a quick summary
    [PSCustomObject]@{
        Name   = $Name
        Switch = $SwitchName
        VCPU   = $VCPU
        Memory = "{0} GB{1}" -f $MemoryStartupGB, ($(if($UseDynamicMemory){" (dyn ${MemoryMinGB}-${MemoryMaxGB} GB)"}))
        VHD    = $vhdPath
        ISO    = $ISOPath
        TPM    = [bool]$EnableTPM
        SecureBoot = $(if($DisableSecureBoot){"Off"} else {$SecureBootTemplate})
    }
}