NIT3122: Enterprise Network Management

Scenario A

You are a network specialist for ActiveDirectoryxx.com (where xx is the number of your assigned account student-xx to login to VSphere Client). You company have 4 servers running window server 2012 (Root-DC, Com-A, Com-B and Com-C). You are given a subnet 50.50.xx.0(the value of xx is the same as above), mask 255.255.255.0. You are required to design and configure a network with active directory according to the following requirement: Two server computers must act as active directory domain controller for the ActiveDirectoryxx.com, to support the high volume of user for your company. Among them, one should be configured as Read Only Domain Controller which does not allow modification of the active directory database. The root Domain Controller is located in Melbourne. Your company opens one branch in Sydney and takes the child domain name as Syd.ActiveDirectoryxx.com. Another computer should be configured as a member computer of the root domain.Note: You can use the VMware provided in the Labs on campus or setting up your own VWware on your PC for this assignment.If you choose to use the Labs’ computers, before attempting the assignment tasks, you should take a Snapshot of the VMware DC, SYD-A, SYD-B and SYD-Core for backup.If you choose to use your own PC, you are responsible for installation and maintenance of your own systems.

Task 1: Computer Preparation

If you use your own PC:

Install fresh window server 2012 R2 on your VMware platform.

Name computers as Root-DC, Com-A, Com-B and Com-C

Use ipconfig /all command in Windows Powershell and take screenshots show the names of your computers have been configured properly.

If you use the VMware in computer labs: 1

Take snapshots of your VMware for backup.
Remove all Active Directory Installation from all computers.
Name computers as Root-DC, Com-A, Com-B and Com-C

Use ipconfig /all command in Windows Powershell and take screenshots show the names of your computers have been configured properly, and computers are not in any domain.

Task 2: Active Directory Design and Initial Setup

Design and draw the network topology based on the above requirement. Clearly label the server computer names, assigned IP addresses, assigned domains, and DNS IP addresses.

Set up the computers IP address and DNS IP address according to the proposed design.
Use commands ipconfig /all to verify the configurations and ping to verify connection between computers, take screenshots of the computer information and pings.

Task 3 : Active Directory Installation

Configure the active directory following the proposed design.

Capture necessary screenshots to demonstrate the steps taken to configure the network, and provide some explanation for your steps.

After completed the configuration, take screenshot of Computers and Domain Controllers folder in Active Directory User and Computers of the root domain controller to verify the existing domain controllers and member computer in the network.

Task 4: Active Directory Management

A – Group Management:

Create a security group named Melbourne_Group. Create a new group Managed Service Account named Sydney. Configure the group Managed Service Account to be used by computers that are members of the Melbourne_Group. B – User Account Management:

Create a new user named ADTest_User, and request user must change password at the first logon. Log on using a member computer to verify the setting is working. (Take screenshots of the account creation and log in process)

Try to logon to the root domain controller using ADTest_User account. Why can’t you login? Perform necessary configuration to enable ADTest_User to be able to login onto the root domain controller.

C – Policies Applications:

Use Group Policy preferences to automatically delete the contents of the c:\Windows\Temp folder each time user ADTest_User signs on to a computer. Create some text files in the Temp folder, then log off and log in again using ADTest_User to verify the policy has been applied.