| Size: 2448 Comment:  | Size: 2408 Comment:  | 
| Deletions are marked like this. | Additions are marked like this. | 
| Line 5: | Line 5: | 
| 1. Create an organizational unit in your child domain named {{{OU_Contractors}}} and add the following items to this OU. | 1. Create an organizational unit in your domain named {{{OU_Contractors}}} and add the following items to this OU. | 
| Line 8: | Line 8: | 
| 1. Create a user mgr in the users folder of your parent domain. | 1. Create a user mgr in the users folder of your domain. | 
| Line 11: | Line 11: | 
| 1. Create a new folder on your cpte230a (parent domain controller) and share it. Make the share name {{{contractors}}}. | 1. Create a new folder on your cpte230a and share it. Make the share name {{{contractors}}}. | 
Lab 03-04
Instructions
In this lab you will create some organizational units, groups and users in your AD. In your domain controller (Using the RSAT tools or powershell):
- Create an organizational unit in your domain named OU_Contractors and add the following items to this OU. - Create a global group called g_contractors 
- Create a user called contractor and put them in g_contractors group. 
 
- Create a user mgr in the users folder of your domain. - Make mgr the Administrator for the OU_Contractors by using the delegation wizard. Make sure the the user has "Reset user passwords..." and "Modify the membership of a group" 
- Set the mgr password and document it in the "password" page. Make sure there is no requirement to change the password.
 
- Create a new folder on your cpte230a and share it. Make the share name contractors. - Set permissions on the share to allow g_contractors to read and write to it. 
- Set permissions on the share to give the mgr user full control.
 
- You will demonstrate mgr's ability by changing the password for "contractor". - You can demonstrate this by logging in to your windows 10 machine and starting the active directory users and computers tool.
- Find the contractor user and reset the password.
 
Documentation
- Document the OU structures added and Groups added to each domain on the domains page. Do this in a new section called "Organizational Units" and "Groups"
- Document the Share created and its purpose in a new section called "Shared Resources"
Video Grade Guide
| Topics | Points | 
| Video Shows: Server Manager on Windows 10 | 10 | 
| Video Shows: WAC running on Windows 10 with access to server | 10 | 
| Video Shows: Remote Power Shell session from windows 10 machine to server | 10 | 
| Video Shows: OU structures and groups created in the instructions | 10 | 
| Video Shows: A remote desktop login to windows 10 using the mgr user. | 10 | 
| Video Shows: the mgr user changing the password for the contractor user on the windows 10 machine. | 10 | 
| Video Shows: the contractor user accessing the file share and adding a new text file | 10 | 
| Video Shows: the mgr user accessing the file share and deleting the new text file | 10 | 
| Video talks through the required documentation. | 20 | 
