gistfile1.txt
· 2.1 KiB · Text
Raw
Here’s how you can address each of the four Windows Server and Active Directory administrative scenarios mentioned in the images:
---
### **Scenario 1**
**Configure Secondary Zones in Windows Server 2016**
1. Open **DNS Manager** on the secondary server.
2. Right-click **Forward Lookup Zones** > Click **New Zone**.
3. Choose **Secondary Zone**, click **Next**.
4. Type the **Zone Name** (must match the primary zone name).
5. On **Master DNS Servers**, add the IP address of the primary DNS server.
6. Click **Next** > **Finish**.
7. Ensure zone transfers are allowed from the primary server under:
* Right-click primary zone > **Properties** > **Zone Transfers** tab.
---
### **Scenario 2**
**Active Directory Tasks**
1. **Create OU**:
* `FinanceOU_YourName`
Use **Active Directory Users and Computers (ADUC)**
Right-click domain > New > Organizational Unit
2. **Create Users**:
* `David_YourName`, `Michael_YourName`, `Jhon_YourName`
Inside `FinanceOU_YourName`, right-click > New > User
3. **Create Security Group**:
* Group name: `FinanceGRP_YourName`
* Description: "Finance Group created for lab assessment"
Right-click `FinanceOU_YourName` > New > Group > Set scope/type and description
4. **Add Members to Group**:
* Add all 3 users as members
Right-click group > Properties > Members > Add users
---
### **Scenario 3**
**Block Access to Control Panel via GPO**
1. Open **Group Policy Management Console (GPMC)**.
2. Create or edit a GPO linked to the Store users' OU.
3. Navigate to:
`User Configuration` > `Administrative Templates` > `Control Panel`
4. Enable:
* **Prohibit access to Control Panel and PC settings**
5. Apply the GPO to the correct OU.
---
### **Scenario 4**
**Restrict Wallpaper Change for Marketing Users**
1. Open **GPMC**.
2. Create a new GPO named `RestrictWallpaperChange`.
3. Navigate to:
`User Configuration` > `Administrative Templates` > `Control Panel` > `Personalization`
4. Enable:
* **Prevent changing desktop background**
5. Link the GPO to the Marketing OU.
---
Let me know if you want screenshots or `.docx` instructions for submission!
1 | Here’s how you can address each of the four Windows Server and Active Directory administrative scenarios mentioned in the images: |
2 | |
3 | --- |
4 | |
5 | ### **Scenario 1** |
6 | |
7 | **Configure Secondary Zones in Windows Server 2016** |
8 | |
9 | 1. Open **DNS Manager** on the secondary server. |
10 | 2. Right-click **Forward Lookup Zones** > Click **New Zone**. |
11 | 3. Choose **Secondary Zone**, click **Next**. |
12 | 4. Type the **Zone Name** (must match the primary zone name). |
13 | 5. On **Master DNS Servers**, add the IP address of the primary DNS server. |
14 | 6. Click **Next** > **Finish**. |
15 | 7. Ensure zone transfers are allowed from the primary server under: |
16 | |
17 | * Right-click primary zone > **Properties** > **Zone Transfers** tab. |
18 | |
19 | --- |
20 | |
21 | ### **Scenario 2** |
22 | |
23 | **Active Directory Tasks** |
24 | |
25 | 1. **Create OU**: |
26 | |
27 | * `FinanceOU_YourName` |
28 | Use **Active Directory Users and Computers (ADUC)** |
29 | Right-click domain > New > Organizational Unit |
30 | |
31 | 2. **Create Users**: |
32 | |
33 | * `David_YourName`, `Michael_YourName`, `Jhon_YourName` |
34 | Inside `FinanceOU_YourName`, right-click > New > User |
35 | |
36 | 3. **Create Security Group**: |
37 | |
38 | * Group name: `FinanceGRP_YourName` |
39 | * Description: "Finance Group created for lab assessment" |
40 | Right-click `FinanceOU_YourName` > New > Group > Set scope/type and description |
41 | |
42 | 4. **Add Members to Group**: |
43 | |
44 | * Add all 3 users as members |
45 | Right-click group > Properties > Members > Add users |
46 | |
47 | --- |
48 | |
49 | ### **Scenario 3** |
50 | |
51 | **Block Access to Control Panel via GPO** |
52 | |
53 | 1. Open **Group Policy Management Console (GPMC)**. |
54 | 2. Create or edit a GPO linked to the Store users' OU. |
55 | 3. Navigate to: |
56 | `User Configuration` > `Administrative Templates` > `Control Panel` |
57 | 4. Enable: |
58 | |
59 | * **Prohibit access to Control Panel and PC settings** |
60 | 5. Apply the GPO to the correct OU. |
61 | |
62 | --- |
63 | |
64 | ### **Scenario 4** |
65 | |
66 | **Restrict Wallpaper Change for Marketing Users** |
67 | |
68 | 1. Open **GPMC**. |
69 | 2. Create a new GPO named `RestrictWallpaperChange`. |
70 | 3. Navigate to: |
71 | `User Configuration` > `Administrative Templates` > `Control Panel` > `Personalization` |
72 | 4. Enable: |
73 | |
74 | * **Prevent changing desktop background** |
75 | 5. Link the GPO to the Marketing OU. |
76 | |
77 | --- |
78 | |
79 | Let me know if you want screenshots or `.docx` instructions for submission! |
80 |