Differences between revisions 27 and 46 (spanning 19 versions)

Lab 04

Instructions

In this lab you will use the organizational units, groups and users in your AD that we created last time to delegate control to managers of their department users. Then we will setup a share for each department and for each user. In your domain controller (Using the RSAT tools or powershell):

Delegate control over users in the OU_Sales Organizational unit to jpatterson so that he can change their password, but nothing else.
1. Right click on the OU, select Delegate control, Add the user.
2. On theTasks to Delegate select only the following:
  1. Reset user passwords and force password change at next logon
  2. Reset inetOrgPerson passwords and force password change at next logon
  3. Read all inetOrgPerson information
Delegate control over users in the OU_Developers Organizational unit to kthompson
1. like the first one...
Delegate control over users in the OU_CSuite Organizational unit to kthompson
1. ...

Create a share for each group Sales, Developers and Managers and make sure the groups have read/write access to the share.
1. On C:\ create a folder called shares, we will use this for all our shares.
2. Create folders in c:\shares named:
  1. sales
  2. developers
  3. managers
  4. home
3. Share and Assign permissions to the sales, developers and managers
  1. Right click on sales, select properties, sharing, Share...
  2. add the sales group and set permission level to "Read/Write" and share.
  3. Select the security tab and make sure that the sales group does not have full control. Remove if that right by clicking on edit, selecting sales and unchecking Full Control.
4. Repeat these steps for developers and managers.
Create shares for users: Follow the directions at https://www.petenetlive.com/KB/Article/0000739 to complete this.

Documentation

Document the Share created and its purpose in a new section called "Shared Resources"

Video Grade Guide

Topics	Points
Video Shows: Server Manager on Windows 10	10
Video Shows: WAC running on Windows 10 with access to server	10
Video Shows: Remote Power Shell session from windows 10 machine to server	10
Video Shows: OU structures and groups created in the instructions	10
Video Shows: A remote desktop login to windows 10 using the mgr user.	10
Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine.	10
Video Shows: the contractor user accessing the file share and adding a new text file	10
Video Shows: the mgr user accessing the file share and deleting the new text file	10
Video talks through the required documentation.	20

WindowsAdministration/Lab04DelegationAndShares (last edited 2024-10-03 19:39:01 by scot)

-  ⇤ ← Revision 27 as of 2016-09-19 22:39:36 → 
  Size: 2071
  Editor: scot
  Comment:
+   ← Revision 46 as of 2022-09-29 18:06:06 → ⇥
  Size: 2918
  Editor: scot
  Comment:
-Deletions are marked like this.
+Additions are marked like this.
 Line 1:
+## page was renamed from WindowsAdministration/Lab04OuGroupLab
-Line 3:
+Line 4:
-In this lab you will create some organizational groups and users in your AD.
+In this lab you will use the organizational units, groups and users in your AD that we created last time to delegate control to managers of their department users. Then we will setup a share for each department and for each user. In your domain controller (Using the RSAT tools or powershell):
-Line 5:
+Line 6:
-Create a new VM:
+. Delegate control over users in the OU_Sales Organizational unit to jpatterson so that he can change their password, but nothing else. 
    a. Right click on the OU, select Delegate control, Add the user.
    a. On theTasks to Delegate select only the following:
       1. Reset user passwords and force password change at next logon
       1. Reset inetOrgPerson passwords and force password change at next logon
       1. Read all inetOrgPerson information
 1. Delegate control over users in the OU_Developers Organizational unit to kthompson
    a. like the first one...
 1. Delegate control over users in the OU_CSuite Organizational unit to kthompson
    a. ...
-Line 7:
+Line 17:
-. Add a new Windows 10 virtual machine
  a. Change its network address to be IP=192.168.1.3, subnet=255.255.255.0, DNS=192.168.1.2 and verify that you can access the internet.
  a. Change its name to be cpte230b
  a. Add the new Windows 10 computer to the Active directory.
     1. Right click start, system, advanced settings
     1. Under Computer Name, click "Change..." and add it to your active directory. 
 1. Find and install the remote administration tools.
+Shares:
-Line 15:
+Line 19:
-In your domain controller:
+. Create a share for each group Sales, Developers and Managers and make sure the groups have read/write access to the share.
    a. On C:\ create a folder called shares, we will use this for all our shares.
    a. Create folders in c:\shares named: 
       1. sales
       1. developers
       1. managers
       1. home
    a. Share and Assign permissions to the sales, developers and managers 
       1. Right click on sales, select properties, sharing, Share...
       1. add the sales group and set permission level to "Read/Write" and share.
       1. Select the security tab and make sure that the sales group does not have full control. Remove if that right by clicking on edit, selecting sales and unchecking Full Control. 
    a. Repeat these steps for developers and managers. 
 2. Create shares for users: Follow the directions at https://www.petenetlive.com/KB/Article/0000739 to complete this.
-Line 17:
+Line 33:
-. Create an organizational unit named {{{OU_Contractors}}}
  a. Create a global group in the {{{OU_Contractors}}} called {{{g_contractors}}}
  a. Create a user called {{{contractor}}} and put them in {{{g_contractors}}} group.
 1. Create a user mgr in the users folder.
  a. Make mgr the Administrator for the {{{OU_Contractors}}} by using the delegation wizard. Make sure the the user has "Reset user passwords..." and "Modify the membership of a group"
  a. Set the mgr password and document it in the "password" page. Make sure there is no requirement to change the password.
 1. You will demonstrate mgr's ability by changing the password for "contractor".
  a. You can demonstrate this by logging in to your windows 10 machine and starting the active directory users and computers tool. 
  a. Find the contractor user and reset the password.
-Line 28:
+Line 35:
-. Document the OU structures added and Groups added to each domain on the domains page.
 1. Do this in a new section called "Organizational Units" and "Groups"
+. Document the Share created and its purpose in a new section called "Shared Resources"
-Line 33:
+Line 40:
-||Video Shows: OU structures and groups created in the instructions ||20 ||
||Video Shows: A remote login event to windows 10 using the mgr user. ||30 ||
||Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. ||30 ||
+||Video Shows: Server Manager on Windows 10 || 10 ||
||Video Shows: WAC running on Windows 10 with access to server || 10 ||
||Video Shows: Remote Power Shell session from windows 10 machine to server || 10 ||
||Video Shows: OU structures and groups created in the instructions ||10 ||
||Video Shows: A remote desktop login to windows 10 using the mgr user. ||10 ||
||Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. ||10 ||
||Video Shows: the contractor user accessing the file share and adding a new text file || 10 ||
||Video Shows: the mgr user accessing the file share and deleting the new text file || 10 ||

Diff for "WindowsAdministration/Lab04DelegationAndShares"

Lab 04

Instructions

Documentation

Video Grade Guide