Differences between revisions 4 and 17 (spanning 13 versions)
⇤ ← Revision 4 as of 2014-10-01 19:29:29 →
Size: 852
Editor: scot
Comment:
← Revision 17 as of 2015-08-18 23:29:37 → ⇥
Size: 1574
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:

== Instructions ==
Line 7: Line 9:
 1. Create an organizational group named OU_Contractors
    a. Create a global group in the OU_Contractors called g_contractors
    a. Create a user called "contractor" and put them in g_contractors group.		  1. Create an organizational unit named {{{OU_Contractors}}}
    a. Create a global group in the {{{OU_Contractors}}} called {{{g_contractors}}}
    a. Create a user called {{{contractor}}} and put them in {{{g_contractors}}} group.
Line 11: Line 13:
    a. Make mgr the Administrator for the OU_Contractors set his password as {{{Hello123Password!}}} Make sure there is no requirement to change the password.
    a. Make mgr a member of the server operators group and give the account remote desktop access.
    a. I will test mgr's ability by changing the password for "contractor"		     a. Make mgr the Administrator for the {{{OU_Contractors}}} by using the delegation wizard.
       1. set his password as {{{Hello123Password!}}} Make sure there is no requirement to change the password.
       1. Make mgr a member of the server operators group and give the account remote desktop access (through system, remote add user).
    a. Start Group Policy - Find the Domain Controllers Folder/OU, right click on the Default Domain Controller Policy, click edit
       1. Navigate to Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assgnments
       1. Add the mgr user to the "Allow Logon through remote desktop services" list.
    a. You will demonstrate mgr's ability by changing the password for "contractor"
Line 17: Line 23:
 1. Create a domain local group called dl_Temporary in the users folder.
    a. Add group to the dl_temporary group. 		  1. Create a domain local group called {{{dl_temporary}}} in the users folder.
    a. Add {{{g_contractors}}} group to the {{{dl_temporary}}} group.
Line 20: Line 26:
== Documentation ==

 1. Document the OU structures added and Groups added to each domain.
 2. Do this in a new page called Lab04 and Create new pages called "Organizational Units" and "Groups"

Lab 04

Instructions

In this lab you will create some organizational groups and users in

In your primary domain:

  1. Create an organizational unit named OU_Contractors

    1. Create a global group in the OU_Contractors called g_contractors

    2. Create a user called contractor and put them in g_contractors group.

  2. Create a user mgr in the users folder.

    1. Make mgr the Administrator for the OU_Contractors by using the delegation wizard.

      1. set his password as Hello123Password! Make sure there is no requirement to change the password.

      2. Make mgr a member of the server operators group and give the account remote desktop access (through system, remote add user).
    2. Start Group Policy - Find the Domain Controllers Folder/OU, right click on the Default Domain Controller Policy, click edit
      1. Navigate to Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assgnments
      2. Add the mgr user to the "Allow Logon through remote desktop services" list.
    3. You will demonstrate mgr's ability by changing the password for "contractor"

In your subdomain:

  1. Create a domain local group called dl_temporary in the users folder.

    1. Add g_contractors group to the dl_temporary group.

Documentation

  1. Document the OU structures added and Groups added to each domain.
  2. Do this in a new page called Lab04 and Create new pages called "Organizational Units" and "Groups"

WindowsAdministration/Lab04DelegationAndShares (last edited 2024-10-03 19:39:01 by scot)