lolpee69 revised this gist . Go to revision
1 file changed, 79 insertions
gistfile1.txt(file created)
| @@ -0,0 +1,79 @@ | |||
| 1 | + | Here’s how you can address each of the four Windows Server and Active Directory administrative scenarios mentioned in the images: | |
| 2 | + | ||
| 3 | + | --- | |
| 4 | + | ||
| 5 | + | ### **Scenario 1** | |
| 6 | + | ||
| 7 | + | **Configure Secondary Zones in Windows Server 2016** | |
| 8 | + | ||
| 9 | + | 1. Open **DNS Manager** on the secondary server. | |
| 10 | + | 2. Right-click **Forward Lookup Zones** > Click **New Zone**. | |
| 11 | + | 3. Choose **Secondary Zone**, click **Next**. | |
| 12 | + | 4. Type the **Zone Name** (must match the primary zone name). | |
| 13 | + | 5. On **Master DNS Servers**, add the IP address of the primary DNS server. | |
| 14 | + | 6. Click **Next** > **Finish**. | |
| 15 | + | 7. Ensure zone transfers are allowed from the primary server under: | |
| 16 | + | ||
| 17 | + | * Right-click primary zone > **Properties** > **Zone Transfers** tab. | |
| 18 | + | ||
| 19 | + | --- | |
| 20 | + | ||
| 21 | + | ### **Scenario 2** | |
| 22 | + | ||
| 23 | + | **Active Directory Tasks** | |
| 24 | + | ||
| 25 | + | 1. **Create OU**: | |
| 26 | + | ||
| 27 | + | * `FinanceOU_YourName` | |
| 28 | + | Use **Active Directory Users and Computers (ADUC)** | |
| 29 | + | Right-click domain > New > Organizational Unit | |
| 30 | + | ||
| 31 | + | 2. **Create Users**: | |
| 32 | + | ||
| 33 | + | * `David_YourName`, `Michael_YourName`, `Jhon_YourName` | |
| 34 | + | Inside `FinanceOU_YourName`, right-click > New > User | |
| 35 | + | ||
| 36 | + | 3. **Create Security Group**: | |
| 37 | + | ||
| 38 | + | * Group name: `FinanceGRP_YourName` | |
| 39 | + | * Description: "Finance Group created for lab assessment" | |
| 40 | + | Right-click `FinanceOU_YourName` > New > Group > Set scope/type and description | |
| 41 | + | ||
| 42 | + | 4. **Add Members to Group**: | |
| 43 | + | ||
| 44 | + | * Add all 3 users as members | |
| 45 | + | Right-click group > Properties > Members > Add users | |
| 46 | + | ||
| 47 | + | --- | |
| 48 | + | ||
| 49 | + | ### **Scenario 3** | |
| 50 | + | ||
| 51 | + | **Block Access to Control Panel via GPO** | |
| 52 | + | ||
| 53 | + | 1. Open **Group Policy Management Console (GPMC)**. | |
| 54 | + | 2. Create or edit a GPO linked to the Store users' OU. | |
| 55 | + | 3. Navigate to: | |
| 56 | + | `User Configuration` > `Administrative Templates` > `Control Panel` | |
| 57 | + | 4. Enable: | |
| 58 | + | ||
| 59 | + | * **Prohibit access to Control Panel and PC settings** | |
| 60 | + | 5. Apply the GPO to the correct OU. | |
| 61 | + | ||
| 62 | + | --- | |
| 63 | + | ||
| 64 | + | ### **Scenario 4** | |
| 65 | + | ||
| 66 | + | **Restrict Wallpaper Change for Marketing Users** | |
| 67 | + | ||
| 68 | + | 1. Open **GPMC**. | |
| 69 | + | 2. Create a new GPO named `RestrictWallpaperChange`. | |
| 70 | + | 3. Navigate to: | |
| 71 | + | `User Configuration` > `Administrative Templates` > `Control Panel` > `Personalization` | |
| 72 | + | 4. Enable: | |
| 73 | + | ||
| 74 | + | * **Prevent changing desktop background** | |
| 75 | + | 5. Link the GPO to the Marketing OU. | |
| 76 | + | ||
| 77 | + | --- | |
| 78 | + | ||
| 79 | + | Let me know if you want screenshots or `.docx` instructions for submission! | |
Newer
Older