Differences between revisions 12 and 29 (spanning 17 versions)
⇤ ← Revision 12 as of 2014-10-02 12:15:19 →
Size: 917
Editor: csadmin
Comment:
← Revision 29 as of 2016-09-30 14:26:34 → ⇥
Size: 2368
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 2: Line 2:
== Instructions ==
In this lab you will create some organizational groups and users in your AD.
Line 3: Line 5:
In this lab you will create some organizational groups and users in Create a new VM:
Line 5: Line 7:
In your primary domain:  1. Add a new Windows 10 virtual machine
  a. Change its network address to be IP=192.168.1.3, subnet=255.255.255.0, DNS=192.168.1.2 and verify that you can access the internet.
  a. Change its name to be cpte230b
  a. Add the new Windows 10 computer to the Active directory.
     1. Right click start, system, advanced settings
     1. Under Computer Name, click "Change..." and add it to your active directory.
     1. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
        1. Right click start
        1. Select System, Advanced System Settings
        1. Select Remote, Select Users and Add "Domain Users" to the list.
 1. Find and install the remote administration tools.
Line 7: Line 19:
 1. Create an organizational group named {{{OU_Contractors}}}
    a. Create a global group in the {{{OU_Contractors}}} called {{{g_contractors}}}
    a. Create a user called {{{contractor}}} and put them in {{{g_contractors}}} group.		 In your domain controller:

 1. Create an organizational unit named {{{OU_Contractors}}} and add the following items to this OU.
  a. Create a global group called {{{g_contractors}}}
  a. Create a user called {{{contractor}}} and put them in {{{g_contractors}}} group.
Line 11: Line 25:
    a. Make mgr the Administrator for the {{{OU_Contractors}}} set his password as {{{Hello123Password!}}} Make sure there is no requirement to change the password.
    a. Make mgr a member of the server operators group and give the account remote desktop access.
    a. I will test mgr's ability by changing the password for "contractor"		   a. Make mgr the Administrator for the {{{OU_Contractors}}} by using the delegation wizard. Make sure the the user has "Reset user passwords..." and "Modify the membership of a group"
  a. Set the mgr password and document it in the "password" page. Make sure there is no requirement to change the password.
 1. You will demonstrate mgr's ability by changing the password for "contractor".
  a. You can demonstrate this by logging in to your windows 10 machine and starting the active directory users and computers tool.
  a. Find the contractor user and reset the password.
Line 15: Line 31:
In your subdomain: == Documentation ==
 1. Document the OU structures added and Groups added to each domain on the domains page.
 1. Do this in a new section called "Organizational Units" and "Groups"
Line 17: Line 35:
 1. Create a domain local group called {{{dl_temporary}}} in the users folder.
    a. Add {{{g_contractors}}} group to the {{{dl_temporary}}} group.
    		 == Video Grade Guide ==
||'''Topics''' ||'''Points''' ||
||Video Shows: OU structures and groups created in the instructions ||20 ||
||Video Shows: A remote login event to windows 10 using the mgr user. ||30 ||
||Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. ||30 ||
||Video talks through the required documentation. ||20 ||

Lab 04

Instructions

In this lab you will create some organizational groups and users in your AD.

Create a new VM:

  1. Add a new Windows 10 virtual machine
    1. Change its network address to be IP=192.168.1.3, subnet=255.255.255.0, DNS=192.168.1.2 and verify that you can access the internet.
    2. Change its name to be cpte230b
    3. Add the new Windows 10 computer to the Active directory.
      1. Right click start, system, advanced settings
      2. Under Computer Name, click "Change..." and add it to your active directory.
      3. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
        1. Right click start
        2. Select System, Advanced System Settings
        3. Select Remote, Select Users and Add "Domain Users" to the list.
  2. Find and install the remote administration tools.

In your domain controller:

  1. Create an organizational unit named OU_Contractors and add the following items to this OU.

    1. Create a global group called g_contractors

    2. Create a user called contractor and put them in g_contractors group.

  2. Create a user mgr in the users folder.

    1. Make mgr the Administrator for the OU_Contractors by using the delegation wizard. Make sure the the user has "Reset user passwords..." and "Modify the membership of a group"

    2. Set the mgr password and document it in the "password" page. Make sure there is no requirement to change the password.
  3. You will demonstrate mgr's ability by changing the password for "contractor".
    1. You can demonstrate this by logging in to your windows 10 machine and starting the active directory users and computers tool.
    2. Find the contractor user and reset the password.

Documentation

  1. Document the OU structures added and Groups added to each domain on the domains page.
  2. Do this in a new section called "Organizational Units" and "Groups"

Video Grade Guide

Topics

Points

Video Shows: OU structures and groups created in the instructions

20

Video Shows: A remote login event to windows 10 using the mgr user.

30

Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine.

30

Video talks through the required documentation.

20

WindowsAdministration/Lab04DelegationAndShares (last edited 2024-10-03 19:39:01 by scot)