lolpee69 revised this gist . Go to revision
1 file changed, 72 insertions
Lolpoooop(file created)
| @@ -0,0 +1,72 @@ | |||
| 1 | + | Scenario 1: Configure Secondary DNS Zone | |
| 2 | + | Objective: Configure a Secondary Zone in Windows Server 2016. | |
| 3 | + | ||
| 4 | + | Steps: | |
| 5 | + | ||
| 6 | + | Open Server Manager → click Tools → open DNS. | |
| 7 | + | In the DNS Manager, expand your server → Right-click Forward Lookup Zones → click New Zone. | |
| 8 | + | In the New Zone Wizard: | |
| 9 | + | Select Secondary Zone → click Next. | |
| 10 | + | Enter the zone name (must match primary zone) → click Next. | |
| 11 | + | Enter the IP address of the Primary DNS server → click Next. | |
| 12 | + | Click Finish to complete setup. | |
| 13 | + | The Secondary Zone will be created and sync records from the Primary DNS server. | |
| 14 | + | Scenario 2: Configure Mirror Volume (RAID 1) | |
| 15 | + | Objective: Create a mirrored volume of 100 MB. | |
| 16 | + | ||
| 17 | + | Steps: | |
| 18 | + | ||
| 19 | + | Open Server Manager → Click File and Storage Services → Click Disks. | |
| 20 | + | Ensure you have two unallocated volumes of at least 100 MB. | |
| 21 | + | Right-click one disk → click New Mirrored Volume. | |
| 22 | + | In the wizard: | |
| 23 | + | Select the first and second disk. | |
| 24 | + | Assign drive letter (e.g., E:). | |
| 25 | + | Format with NTFS, label as MirrorVolume. | |
| 26 | + | Click Finish. | |
| 27 | + | Disk Management will sync the volumes (RAID 1 created). | |
| 28 | + | Scenario 3: Restrict Desktop Background and Control Panel Access | |
| 29 | + | Objective: Apply Group Policy to restrict desktop background changes and block Control Panel. | |
| 30 | + | ||
| 31 | + | Steps: | |
| 32 | + | ||
| 33 | + | Open Group Policy Management → Right-click domain/OU → Create a GPO (name it e.g., XceedRestrictions). | |
| 34 | + | Right-click the GPO → Edit. | |
| 35 | + | To restrict desktop background: | |
| 36 | + | Navigate to: User Configuration > Administrative Templates > Control Panel > Personalization | |
| 37 | + | Enable: Prevent changing desktop background | |
| 38 | + | To restrict Control Panel: | |
| 39 | + | Navigate to: User Configuration > Administrative Templates > Control Panel | |
| 40 | + | Enable: Prohibit access to Control Panel and PC settings | |
| 41 | + | Link the GPO to the appropriate OU. | |
| 42 | + | Use gpupdate /force on client machines or wait for policy refresh. | |
| 43 | + | Scenario 4: Create OU, Users, Group and Add Members | |
| 44 | + | Objective: Create users, OU, security group, and assign members. | |
| 45 | + | ||
| 46 | + | Steps: | |
| 47 | + | ||
| 48 | + | Open Active Directory Users and Computers. | |
| 49 | + | Right-click domain → New → Organizational Unit. | |
| 50 | + | Name: FinanceOU_YourName | |
| 51 | + | Inside the OU, create 3 users: | |
| 52 | + | David_YourName, Michael_YourName, Jhon_YourName | |
| 53 | + | Right-click the OU → New → Group. | |
| 54 | + | Name: FinanceGRP_YourName | |
| 55 | + | Description: “Finance Group created for lab assessment” | |
| 56 | + | Group scope: Global, Type: Security | |
| 57 | + | Right-click the group → Properties → Members tab. | |
| 58 | + | Click Add → Add the three users as members. | |
| 59 | + | Scenario 5: Shared Folder for Marketing Department | |
| 60 | + | Objective: Create a shared folder accessible from anywhere across the domain. | |
| 61 | + | ||
| 62 | + | Steps: | |
| 63 | + | ||
| 64 | + | Log in to a file server. | |
| 65 | + | Create a folder at C:\Marketing. | |
| 66 | + | Right-click folder → Properties → Sharing tab → Click Advanced Sharing. | |
| 67 | + | Check Share this folder | |
| 68 | + | Share name: marketing | |
| 69 | + | Click Permissions → Add group/users (e.g., Marketing group) → assign Full Control/Read as needed. | |
| 70 | + | Go to Security tab → Set NTFS permissions similarly. | |
| 71 | + | Test path: \\domain\xceed\marketing from a client PC. | |
| 72 | + | Ensure DNS resolution and network access is working. | |
Newer
Older