|
Size: 2992
Comment:
|
Size: 1939
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| = Lab 03-04 = | ## page was renamed from WindowsAdministration/Lab04OuGroupLab = Lab 04 = |
| Line 3: | Line 4: |
| In this lab you will create some organizational units, groups and users in your AD. | In this lab you will use the organizational units, groups and users in your AD that we created last time to delegate control to managers of their department users. Then we will setup a share for each department and for each user. In your domain controller (Using the RSAT tools or powershell): |
| Line 5: | Line 6: |
| Create a new VM: 1. Add a new Windows 10 virtual machine a. Change its network address to be IP=192.168.1.5, subnet=255.255.255.0, DNS=192.168.1.2 and verify that you can access the internet. a. Change its name to be cpte230w a. Add the new Windows 10 computer to the top Active directory domain. 1. Right click start, system, advanced settings 1. Under Computer Name, click "Change..." and add it to your active directory. 1. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop 1. Right click start 1. Select System, Advanced System Settings 1. Select Remote, Select Users and Add "Domain Users" to the list. 1. Find and install the remote administration tools. In your domain controller: 1. Create an organizational unit in your child domain named {{{OU_Contractors}}} and add the following items to this OU. a. Create a global group called {{{g_contractors}}} a. Create a user called {{{contractor}}} and put them in {{{g_contractors}}} group. 1. Create a user mgr in the users folder of your parent domain. a. Make mgr the Administrator for the {{{OU_Contractors}}} by using the delegation wizard. Make sure the the user has "Reset user passwords..." and "Modify the membership of a group" a. Set the mgr password and document it in the "password" page. Make sure there is no requirement to change the password. 1. Create a new folder on your cpte230a (parent domain controller) and share it. Make the share name {{{contractors}}}. a. Set permissions on the share to allow {{{g_contractors}}} to read and write to it. a. Set permissions on the share to give the mgr user full control. 1. You will demonstrate mgr's ability by changing the password for "contractor". a. You can demonstrate this by logging in to your windows 10 machine and starting the active directory users and computers tool. a. Find the contractor user and reset the password. |
1. Delegate control over users in the OU_Sales Organizational unit to jpatterson so that he can change their password, but nothing else. a. Right click on the OU, select Delegate control, Add the user. a. On theTasks to Delegate select only the following: 1. Reset user passwords and force password change at next logon 1. Reset inetOrgPerson passwords and force password change at next logon 1. Read all inetOrgPerson information 1. Delegate control over users in the OU_Developers Organizational unit to kthompson 1. Delegate control over users in teh OU_CSuite Organizational unit to kthompson |
| Line 35: | Line 16: |
| 1. Document the OU structures added and Groups added to each domain on the domains page. Do this in a new section called "Organizational Units" and "Groups" | |
| Line 40: | Line 21: |
| ||Video Shows: Server Manager on Windows 10 || 10 || ||Video Shows: WAC running on Windows 10 with access to server || 10 || ||Video Shows: Remote Power Shell session from windows 10 machine to server || 10 || |
|
| Line 41: | Line 25: |
| ||Video Shows: A remote login event to windows 10 using the mgr user. ||10 || ||Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. ||20 || ||Video Shows: the contractor user accessing the file share and adding a new text file || 20 || ||Video Shows: the mgr user accessing the file share and deleting the new text file || 20 || |
||Video Shows: A remote desktop login to windows 10 using the mgr user. ||10 || ||Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. ||10 || ||Video Shows: the contractor user accessing the file share and adding a new text file || 10 || ||Video Shows: the mgr user accessing the file share and deleting the new text file || 10 || |
Lab 04
Instructions
In this lab you will use the organizational units, groups and users in your AD that we created last time to delegate control to managers of their department users. Then we will setup a share for each department and for each user. In your domain controller (Using the RSAT tools or powershell):
- Delegate control over users in the OU_Sales Organizational unit to jpatterson so that he can change their password, but nothing else.
- Right click on the OU, select Delegate control, Add the user.
- On theTasks to Delegate select only the following:
- Reset user passwords and force password change at next logon
- Reset inetOrgPerson passwords and force password change at next logon
- Read all inetOrgPerson information
- Delegate control over users in the OU_Developers Organizational unit to kthompson
- Delegate control over users in teh OU_CSuite Organizational unit to kthompson
Documentation
- Document the Share created and its purpose in a new section called "Shared Resources"
Video Grade Guide
Topics |
Points |
Video Shows: Server Manager on Windows 10 |
10 |
Video Shows: WAC running on Windows 10 with access to server |
10 |
Video Shows: Remote Power Shell session from windows 10 machine to server |
10 |
Video Shows: OU structures and groups created in the instructions |
10 |
Video Shows: A remote desktop login to windows 10 using the mgr user. |
10 |
Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. |
10 |
Video Shows: the contractor user accessing the file share and adding a new text file |
10 |
Video Shows: the mgr user accessing the file share and deleting the new text file |
10 |
Video talks through the required documentation. |
20 |