Reference no: EM132816084
Project: Securing a Microsoft Windows Environment
Project Part 1: Active Directory Recommendations
Scenario
Assume you are an entry-level security administrator working for Always Fresh. You have been asked to evaluate the option of adding Active Directory to the company's network.
Tasks
Create a summary report to management that answers the following questions to satisfy the key points of interest regarding the addition of Active Directory to the network:
1. System administrators currently create users on each computer where users need access.In Active Directory, where will system administrators createusers?
2. How will the procedures for making changes to the user accounts, such as password changes,be different in Active Directory?
3. What action should administrators take for the existing workgroup user accounts afterconverting to Active Directory?
4. How will the administrators resolve differences between user accounts defined on different computers? In other words, if user accounts have different settings on different computers,how will Active Directory address that issue?
SECTION 1: Hands-On Demonstration
Part 1. User and Group Administration
23. Make a screen capture showing the members of the Managers group and paste it into your Lab Report file.
Part 2. Resource Management
Make a screen capture showing the updated share permissions for the MGRfile folder and paste it into your lab report.
Make a screen capture showing the updated share permissions for the HRfiles folder and paste it into your lab report.
Make a screen capture showing the updated share permissions for the SFfiles folder and paste it into your lab report.
Part 3. Practical Application
Make a screen capture showing the text file for HRUser01 in the HRfiles folder and paste it into your Lab Report file.
Make a screen capture showing the text file for SFManager in the SFfiles folder and paste it into your Lab Report file.
Make a screen capture showing the text file for SFManager in the MGRfiles folder and paste it into your Lab Report file.
SECTION 2: Applied Learning
Part 1. User and Group Administration
7 Make a screen capture showing the two new users within the Contractors OU and paste it into your Lab Report file.
Part 2. Resource Management
4. Make a screen capture showing the contents of the CoreFiles directory and paste it into the Lab Report file
14. Make a screen capture showing Advanced Security Settings for the yourtown directory and paste it into the Lab Report file.
Part 3. Modify Permissions Using a Script
5. Make a screen capture showing the result of attempting to create a new test file and paste it into the Lab Report file.
7. Repeat steps 2-4 for the ANewuser account and describe the results in the Lab Report file.
10. Repeat step 4 and describe the results in the Lab Report file.
In the Lab Report file, explain why you received the results you did in steps 4, 7, and 10.
SECTION 3: Lab Challenge and Analysis
Analysis and Discussion
Use the Internet to research the SYSTEM account. Why is it necessary to include this account with full control on a directory?
Tools and Commands
Using the icacls utility, document the command that will give the ANewuser account write access to the yourschool folder.
Challenge Exercise
Using your work in this lab as a guide, create a three-level directory structure for your family tree (grandparents, parents, children). You will need to create user accounts for each member of the family (at least 2 in each generation), create groups for each generation, and then secure the folders so that only members of a single generation can write to files within that generation's directory. Make screen captures to document your progress and describe your process.
Attachment:- Active Directory Recommendations.rar