Installing my own Windows Server and Active Directory so I can hack it

In my continued efforts to learn more about the Windows Server environment and in particular Active Directory I have installed 3 nested machines on Azure. Two Win10 machines and Win Server 2019. Once I have Active Dir setup with some users, groups and security rules I am going to attack it with my my VM with Kali installed and try and escalate my privileges from a basic user to admin.