Scenario 1: Configure Secondary DNS Zone
Objective: Configure a Secondary Zone in Windows Server 2016.

Steps:

Open Server Manager → click Tools → open DNS.
In the DNS Manager, expand your server → Right-click Forward Lookup Zones → click New Zone.
In the New Zone Wizard:
Select Secondary Zone → click Next.
Enter the zone name (must match primary zone) → click Next.
Enter the IP address of the Primary DNS server → click Next.
Click Finish to complete setup.
The Secondary Zone will be created and sync records from the Primary DNS server.
Scenario 2: Configure Mirror Volume (RAID 1)
Objective: Create a mirrored volume of 100 MB.

Steps:

Open Server Manager → Click File and Storage Services → Click Disks.
Ensure you have two unallocated volumes of at least 100 MB.
Right-click one disk → click New Mirrored Volume.
In the wizard:
Select the first and second disk.
Assign drive letter (e.g., E:).
Format with NTFS, label as MirrorVolume.
Click Finish.
Disk Management will sync the volumes (RAID 1 created).
Scenario 3: Restrict Desktop Background and Control Panel Access
Objective: Apply Group Policy to restrict desktop background changes and block Control Panel.

Steps:

Open Group Policy Management → Right-click domain/OU → Create a GPO (name it e.g., XceedRestrictions).
Right-click the GPO → Edit.
To restrict desktop background:
Navigate to: User Configuration > Administrative Templates > Control Panel > Personalization
Enable: Prevent changing desktop background
To restrict Control Panel:
Navigate to: User Configuration > Administrative Templates > Control Panel
Enable: Prohibit access to Control Panel and PC settings
Link the GPO to the appropriate OU.
Use gpupdate /force on client machines or wait for policy refresh.
Scenario 4: Create OU, Users, Group and Add Members
Objective: Create users, OU, security group, and assign members.

Steps:

Open Active Directory Users and Computers.
Right-click domain → New → Organizational Unit.
Name: FinanceOU_YourName
Inside the OU, create 3 users:
David_YourName, Michael_YourName, Jhon_YourName
Right-click the OU → New → Group.
Name: FinanceGRP_YourName
Description: “Finance Group created for lab assessment”
Group scope: Global, Type: Security
Right-click the group → Properties → Members tab.
Click Add → Add the three users as members.
Scenario 5: Shared Folder for Marketing Department
Objective: Create a shared folder accessible from anywhere across the domain.

Steps:

Log in to a file server.
Create a folder at C:\Marketing.
Right-click folder → Properties → Sharing tab → Click Advanced Sharing.
Check Share this folder
Share name: marketing
Click Permissions → Add group/users (e.g., Marketing group) → assign Full Control/Read as needed.
Go to Security tab → Set NTFS permissions similarly.
Test path: \\domain\xceed\marketing from a client PC.
Ensure DNS resolution and network access is working.