Lab 03-04

Instructions

In this lab you will create some organizational units, groups and users in your AD.

Create a new VM:

1. Add a new Windows 10 virtual machine
   1. Change its network address to be IP=192.168.1.5, subnet=255.255.255.0, DNS=192.168.1.2 and verify that you can access the internet.
   2. Change its name to be cpte230w
   3. Add the new Windows 10 computer to the top Active directory domain.
      1. Right click start, system, advanced settings
      2. Under Computer Name, click "Change..." and add it to your active directory.
      3. In the Windows 10 computer as administrator add the "Domain Users" to the list of users allowed to use remote desktop
         1. Right click start
         2. Select System, Advanced System Settings
         3. Select Remote, Select Users and Add "Domain Users" to the list.
2. Find and install the remote administration tools. (Hint: you can do this through powershell easier than through the GUI)
3. Instal Windows Admin Center
4. Enable remote desktop connections

In your domain controller (Using the RSAT tools or powershell):

1. Create an organizational unit in your child domain named OU_Contractors and add the following items to this OU.

   1. Create a global group called g_contractors

   2. Create a user called contractor and put them in g_contractors group.

2. Create a user mgr in the users folder of your parent domain.

   1. Make mgr the Administrator for the OU_Contractors by using the delegation wizard. Make sure the the user has "Reset user passwords..." and "Modify the membership of a group"

   2. Set the mgr password and document it in the "password" page. Make sure there is no requirement to change the password.

3. Create a new folder on your cpte230a (parent domain controller) and share it. Make the share name contractors.

   1. Set permissions on the share to allow g_contractors to read and write to it.

   2. Set permissions on the share to give the mgr user full control.
4. You will demonstrate mgr's ability by changing the password for "contractor".
   1. You can demonstrate this by logging in to your windows 10 machine and starting the active directory users and computers tool.
   2. Find the contractor user and reset the password.

Documentation

1. Document the OU structures added and Groups added to each domain on the domains page. Do this in a new section called "Organizational Units" and "Groups"
2. Document the Share created and its purpose in a new section called "Shared Resources"

Video Grade Guide