Here’s how you can address each of the four Windows Server and Active Directory administrative scenarios mentioned in the images:

---

### **Scenario 1**

**Configure Secondary Zones in Windows Server 2016**

1. Open **DNS Manager** on the secondary server.
2. Right-click **Forward Lookup Zones** > Click **New Zone**.
3. Choose **Secondary Zone**, click **Next**.
4. Type the **Zone Name** (must match the primary zone name).
5. On **Master DNS Servers**, add the IP address of the primary DNS server.
6. Click **Next** > **Finish**.
7. Ensure zone transfers are allowed from the primary server under:

   * Right-click primary zone > **Properties** > **Zone Transfers** tab.

---

### **Scenario 2**

**Active Directory Tasks**

1. **Create OU**:

   * `FinanceOU_YourName`
     Use **Active Directory Users and Computers (ADUC)**
     Right-click domain > New > Organizational Unit

2. **Create Users**:

   * `David_YourName`, `Michael_YourName`, `Jhon_YourName`
     Inside `FinanceOU_YourName`, right-click > New > User

3. **Create Security Group**:

   * Group name: `FinanceGRP_YourName`
   * Description: "Finance Group created for lab assessment"
     Right-click `FinanceOU_YourName` > New > Group > Set scope/type and description

4. **Add Members to Group**:

   * Add all 3 users as members
     Right-click group > Properties > Members > Add users

---

### **Scenario 3**

**Block Access to Control Panel via GPO**

1. Open **Group Policy Management Console (GPMC)**.
2. Create or edit a GPO linked to the Store users' OU.
3. Navigate to:
   `User Configuration` > `Administrative Templates` > `Control Panel`
4. Enable:

   * **Prohibit access to Control Panel and PC settings**
5. Apply the GPO to the correct OU.

---

### **Scenario 4**

**Restrict Wallpaper Change for Marketing Users**

1. Open **GPMC**.
2. Create a new GPO named `RestrictWallpaperChange`.
3. Navigate to:
   `User Configuration` > `Administrative Templates` > `Control Panel` > `Personalization`
4. Enable:

   * **Prevent changing desktop background**
5. Link the GPO to the Marketing OU.

---

Let me know if you want screenshots or `.docx` instructions for submission!