KII5037-Network Solutions

Assesment Description

This assessment is a practical task and it requires you to complete the installation and configuration of Server 2012 R2 and Server 2016 as per as the design specification in Assessment 1. In order to fully evaluate the benefits of a domain controller in Windows 2012 R2 and server 2016, you will be asked to configure the domain controller with the needs of Small Business Intranet, in terms of application software, usability and security.

Q1: Install system software

By completing you can demonstrate your ability to install an operating system which meets the specifications of a business. In this task you will install a server and a client operating system on separate computers. This task should take approximately 2 hours to complete.

You need to do:

• Install the Windows Server operating system, on a PC or Virtual Machine, recommended by your facilitator and related services that follow the specifications you identified in Task 1.

• Use another PC or Virtual Machine to install Windows 10 operating system and related services for a client machine.

• Apply static IP address on both the server and client machines so that they can reliably establish communication as identified Task 1. Also rename your server and client machines following appropriate naming convention as outlined in Task 1, and restart if required. KII5037 Network Solutions Assessment 2 Kingsford International Institute |CRICOS: 03689D RTO: 45363| April 2019 v3.0 6

• Load all required server roles such as Active Directory Domain Services, DNS, etc. that this server machine should run. Configure domain settings as identified in Assessment 1.

• Test the domain installation by logging on as “administrator” level user on the client computer and join the server’s domain.

• The system performance tool needs to be loaded and the event viewer to evaluate the status of the server’s hardware. Any problems identified here should be discussed with your supervising facilitator.

Q2: Active Directory – corporate structure

This task allows you to demonstrate your ability to create an organisational structure to meet the needs of a business. This task should take approximately 45 minutes to complete.

What you need to do:

• Create an Active Directory structure for the Small Business Intranet Company. Each department must be represented through individual organizational units. The organisational units should reflect the company structure accurately.

• Move the user accounts (manually created or imported using a script in task 7) into each of the relevant organizational units (OUs).

• Install the ‘manager’ of each department as the manager of each relevant organisational unit.

Q3: Active Directory –create and configure user accounts

This task demonstrates your ability to complete basic configurations in Active Directory on the Windows 2012 R2 server. This task should take approximately 60 minutes to complete. You are to: KII5037 Network Solutions Assessment 2 Kingsford International Institute |CRICOS: 03689D RTO: 45363| April 2019 v3.0 7

• Create a new Organisational Unit (OU) in Active Directory called ‘test unit’. Also, create a ‘test user’ account within this OU.

• For the test unit OU, create a “group policy object (GPO)” with appropriate end user account security policies (as found in the IT Operational Plan).

• Configure and test that the user has appropriate password/account properties, a home directory accessible through a drive letter and a roaming user profile.

• Implement a welcome message (using basic login script or GPO settings) which all meet the requirements in the IT Operational Plan.

Q4: Importing BULK users – create corporate users

This task allows you to demonstrate your ability to create multiple user accounts. This task should take approximately 45 minutes to complete.

What you need to do:

• To create all user accounts based on each department found in the staff list on the Small Business Intranet site. One account should be for the manager of the department and the others should be for employees in the department.

• Repeat the previous step for each of the other departments in Small Business Intranet. You may either do this manually or use the batch user import utilities or a custom script of your choice.

• Implement ‘Home directory’ and ‘Roaming profile’ as part of their user configuration.

Q5: Security Groups - Setting up NTFS permissions

This task allows you to demonstrate your ability to create appropriate security groups for user accounts. This task should take approximately 30 minutes to complete.

What you need to do:

• Create a security group (local or global as required) for each department and allocate membership to all users appropriately.

• Allocate full permissions for each department’s directories to the relevant groups.

• Access the client machine now to check if user permissions were correctly applied. It is strongly recommended that you work on one security group at a time, testing security settings by logging on as a user from each group.

• Test each user’s access to the server’s directory structure and identify areas where security permissions require modification.

• Modify the permissions for the local security groups created earlier to ensure that the administrator can access all profile directories, but cannot access home directories.

Q6: Group Policy Objects - Configuration to user accounts

This task demonstrates your ability to complete configurations in Active Directory on machine running Windows Server 2012 R2. This task should take approximately 60

minutes to complete. You are to create separate Group Policy Objects (GPO), one dedicated to each organizational unit (OU). Each GPO must implement the following features for the associated department:

• Loads a shortcut to the ‘User Documentation’ developed in task 5.

• Loads a dedicated wallpaper for each department (any wallpaper may be downloaded from the internet for each OU for this purpose).

• Deploys a dedicated IP based shared network printer to each department

• Automatically maps a ‘network drive’ accessible via a drive letter for each department with reference to the directory structure as implemented in task

Q7: Active Directory resources – Deploying network printers

This task demonstrates your ability to recommend, install and configure hardware solutions that meet business requirements. This task should take approximately 45 minutes to complete. You have recommended the purchase of a network printer in Assessment 1 Q5. You are now required to install the network printer by performing the following: What you need to do:

• Download the driver for the printer from the manufacturer’s website and transfer it to the server for installation purposes.

• Create a series of printer queues, one for each department, all using the downloaded driver. Each printer must be allocated a dedicated IP address before deployment.

• Configure each queue to be managed by the members of the relevant OU allowing them to view the queues and delete their jobs.

• Test the queues by logging in as a user and printing to the queue, deleting print jobs, pausing and resuming the queue.

Q8: System Backup – Schedules and procedures

This task allows you to demonstrate your ability to complete a backup of the server data directories of the server. This task should take approximately 45 minutes to complete. What you need to do:

• Apply the System Backup planning you completed in Assessment 1 Q8 and set up a backup regular backup system.

• Add a separate hard drive or partition that will be used to perform system backup. You may use the built-in Windows Server Backup tools and features for scheduling and performing system backup.

• Create a working backup of the Domain Controller’s data areas and test its functionality by restoring server data once the initial backup is completed

Q9. Performance optimization – system and network monitoring

This task allows you to demonstrate your management and monitoring skills using the facilities supplied by the operating system. You are to load Microsoft Network Monitor, Performance Monitor and Disk Management on the domain controller. These components are accessed through Microsoft Management Console (MMC). Demonstrate the features of:

• Network Monitor: Capture network traffic and view captured traffic logs. This includes identifying external network traffic, packet types (including broadcast packets), as well as the source/destination devices for those packets.

• Disk Management: Identify what dynamic disks are and their advantages. Show how to convert a standard disk into a dynamic disk.

• Performance Monitor: Create logs to record the performance of the CPU, disk utilisation and network card utilisation

Q10: Software deployment – implementation

This task allows you to demonstrate your ability to deploy software over a network with minimal disruption to clients. This task should take approximately 60 minutes to complete.

You are to:

• Create a backup of the server to use in case of any deployment failure.

• Using the test unit OU and test user account in your Active Directory structure from Assessment Task 1 deploy the application packages according to your chosen procedure. Test the installation by logging in as the test user.

• While installing, record the time taken, network traffic generated and server CPU utilisation during the installation process for the test user.

• Using the resource information gathered from the single user installation, determine the system’s capacity to deploy this software with minimal impact upon other users. This information can then be used to estimate the network resource requirements of rolling out this software to the company’s employees.

• Produce a memo recommending a software deployment schedule for the entir company for both the client operating installation and application software deployment. It should state any bandwidth, server utilisation and time implications.