Lolpoooop - Opengist

Revision c62de736aca5947f4d559f8bfa7f8216280aa688

Lolpoooop · 2.9 KiB · Text Raw

Scenario 1: Configure Secondary DNS Zone Objective: Configure a Secondary Zone in Windows Server 2016. Steps: Open Server Manager → click Tools → open DNS. In the DNS Manager, expand your server → Right-click Forward Lookup Zones → click New Zone. In the New Zone Wizard: Select Secondary Zone → click Next. Enter the zone name (must match primary zone) → click Next. Enter the IP address of the Primary DNS server → click Next. Click Finish to complete setup. The Secondary Zone will be created and sync records from the Primary DNS server. Scenario 2: Configure Mirror Volume (RAID 1) Objective: Create a mirrored volume of 100 MB. Steps: Open Server Manager → Click File and Storage Services → Click Disks. Ensure you have two unallocated volumes of at least 100 MB. Right-click one disk → click New Mirrored Volume. In the wizard: Select the first and second disk. Assign drive letter (e.g., E:). Format with NTFS, label as MirrorVolume. Click Finish. Disk Management will sync the volumes (RAID 1 created). Scenario 3: Restrict Desktop Background and Control Panel Access Objective: Apply Group Policy to restrict desktop background changes and block Control Panel. Steps: Open Group Policy Management → Right-click domain/OU → Create a GPO (name it e.g., XceedRestrictions). Right-click the GPO → Edit. To restrict desktop background: Navigate to: User Configuration > Administrative Templates > Control Panel > Personalization Enable: Prevent changing desktop background To restrict Control Panel: Navigate to: User Configuration > Administrative Templates > Control Panel Enable: Prohibit access to Control Panel and PC settings Link the GPO to the appropriate OU. Use gpupdate /force on client machines or wait for policy refresh. Scenario 4: Create OU, Users, Group and Add Members Objective: Create users, OU, security group, and assign members. Steps: Open Active Directory Users and Computers. Right-click domain → New → Organizational Unit. Name: FinanceOU_YourName Inside the OU, create 3 users: David_YourName, Michael_YourName, Jhon_YourName Right-click the OU → New → Group. Name: FinanceGRP_YourName Description: “Finance Group created for lab assessment” Group scope: Global, Type: Security Right-click the group → Properties → Members tab. Click Add → Add the three users as members. Scenario 5: Shared Folder for Marketing Department Objective: Create a shared folder accessible from anywhere across the domain. Steps: Log in to a file server. Create a folder at C:\Marketing. Right-click folder → Properties → Sharing tab → Click Advanced Sharing. Check Share this folder Share name: marketing Click Permissions → Add group/users (e.g., Marketing group) → assign Full Control/Read as needed. Go to Security tab → Set NTFS permissions similarly. Test path: \\domain\xceed\marketing from a client PC. Ensure DNS resolution and network access is working.

1	Scenario 1: Configure Secondary DNS Zone
2	Objective: Configure a Secondary Zone in Windows Server 2016.
3
4	Steps:
5
6	Open Server Manager → click Tools → open DNS.
7	In the DNS Manager, expand your server → Right-click Forward Lookup Zones → click New Zone.
8	In the New Zone Wizard:
9	Select Secondary Zone → click Next.
10	Enter the zone name (must match primary zone) → click Next.
11	Enter the IP address of the Primary DNS server → click Next.
12	Click Finish to complete setup.
13	The Secondary Zone will be created and sync records from the Primary DNS server.
14	Scenario 2: Configure Mirror Volume (RAID 1)
15	Objective: Create a mirrored volume of 100 MB.
16
17	Steps:
18
19	Open Server Manager → Click File and Storage Services → Click Disks.
20	Ensure you have two unallocated volumes of at least 100 MB.
21	Right-click one disk → click New Mirrored Volume.
22	In the wizard:
23	Select the first and second disk.
24	Assign drive letter (e.g., E:).
25	Format with NTFS, label as MirrorVolume.
26	Click Finish.
27	Disk Management will sync the volumes (RAID 1 created).
28	Scenario 3: Restrict Desktop Background and Control Panel Access
29	Objective: Apply Group Policy to restrict desktop background changes and block Control Panel.
30
31	Steps:
32
33	Open Group Policy Management → Right-click domain/OU → Create a GPO (name it e.g., XceedRestrictions).
34	Right-click the GPO → Edit.
35	To restrict desktop background:
36	Navigate to: User Configuration > Administrative Templates > Control Panel > Personalization
37	Enable: Prevent changing desktop background
38	To restrict Control Panel:
39	Navigate to: User Configuration > Administrative Templates > Control Panel
40	Enable: Prohibit access to Control Panel and PC settings
41	Link the GPO to the appropriate OU.
42	Use gpupdate /force on client machines or wait for policy refresh.
43	Scenario 4: Create OU, Users, Group and Add Members
44	Objective: Create users, OU, security group, and assign members.
45
46	Steps:
47
48	Open Active Directory Users and Computers.
49	Right-click domain → New → Organizational Unit.
50	Name: FinanceOU_YourName
51	Inside the OU, create 3 users:
52	David_YourName, Michael_YourName, Jhon_YourName
53	Right-click the OU → New → Group.
54	Name: FinanceGRP_YourName
55	Description: “Finance Group created for lab assessment”
56	Group scope: Global, Type: Security
57	Right-click the group → Properties → Members tab.
58	Click Add → Add the three users as members.
59	Scenario 5: Shared Folder for Marketing Department
60	Objective: Create a shared folder accessible from anywhere across the domain.
61
62	Steps:
63
64	Log in to a file server.
65	Create a folder at C:\Marketing.
66	Right-click folder → Properties → Sharing tab → Click Advanced Sharing.
67	Check Share this folder
68	Share name: marketing
69	Click Permissions → Add group/users (e.g., Marketing group) → assign Full Control/Read as needed.
70	Go to Security tab → Set NTFS permissions similarly.
71	Test path: \\domain\xceed\marketing from a client PC.
72	Ensure DNS resolution and network access is working.
73