Windows Active directory

PART 1:

Deploy two VMs from the template for Server 2016 as follows:
• Host names are:
o TEST2DC IP:10.174.y.220, DNS:10.144.6.3
o TEST2MS IP:10.174.y.222, DNS: 10.144.6.3
o 10.174.15.0

Configure the VMs as follows:
• Hostname matches the VM name

Include the following screenshots:
• One for each server showing the results of a command that displays your complete IP configuration, including DNS server.

• One for each server from Server Manager showing only default roles have been installed.
• One showing the DC server successfully resolving www.google.ca.

• One showing the MS server successfully pinging the DC server by IP.


PART 2:

Turn the DC server into an Active Directory domain controller and create an Active Directory domain named INFO8460T2.local

Include the following screenshots:
• One of the "Local Server" screens from the Server Manager showing the domain set to the correct domain name

• One of the results of the lookup command querying your AD domain name. Remember your screenshot needs to show it was taken on your VM.

PART 3:

Join the MS server to the Active Directory domain you just created.

HINT: Remember to make any changes to DNS that are required on that server prior to attempting the join.

Include the following screenshots:
• One of the "Local Server" screens from the Server Manager on the MS server that shows the domain set to the correct domain name
• One from Active Directory Users and Computers showing the MS server in the computer’s container.

• One from the DNS manager utility showing the the content of your Active Directory domain forward lookup zone

PART 4:

Configure the following Organizational Units in Active Directory:

• Vancouver and Chicago under the domain

• Users, Servers and Workstations under both Vancouver and Chicago

Include one screenshot of all created OUs in Active Directory Users and Computers
 

PART 5:

In the Vancouver/Users OU, create the following objects (user naming convention is first initial and last name e.g. jdickson):

• A standard user account for yourself using your <Condor_ID>
• An administrative user account for yourself using administrative account naming best practices discussed in class
• Security groups: IT_Staff, IT_Support

• Configure the following group memberships:
• Make your administrative account a member of the IT_Support group

• Make the IT_Support group a member of the Domain Admins group
• Make your personal account a member of the IT_Staff group
•

Include the following screenshots:

• Two screenshots of each IT_Support, and IT_Staff groups showing members and membership


Part 6:

Explain what was achieved by nesting the IT_Staff group in Domain Admins in PART 5 and why we would do something like that.

Part 7:

On the member server create a share TEST2.
• Share as per best practices

Part 8:

In the share you created in Part 7,.
• Create two directories, DOCUMENTS, WORK
• Allow IT_Support group to have full control of both
• Allow IT_Staff have full control of WORK
• Allow IT_Staff be able to read anything in DOCUMENTS
• Other than system accounts no one else has access to these directories
• Put a file Test.txt in both directories.

Include the following screenshots:

• One screenshot of the Advanced Security Setting tab for each of the Test.txt files
------------------------------------------------------------------------------------------------------------------------------------
You will be connected remotely with my PC and perform the task in my Vspshere, while performing the task you need to paste the screenshots in MS work file. This Task needs to be done today. So please bid accordingly.