$1.$ Create a nested group structure that allows permissions to be easily assigned to: $(3$ marks, $1$ mark for each task$)$

a$.$ Members of the Sales, Mfg$,$ Engrg, and IT groups $($in your domain$)$

b$.$ Mfg members in No$.$Amer, So$.$Amer, and Canada $($in your domain$)$

c$.$ Members of the Sales, Mfg$,$ Engrg, and IT groups $($in your entire forest$)$

$2.$ Create a local group called Project$-$Printer within the File$/$Print OU$.$ Next, create a fictitious printer on your host OS that grants Print permission only to members of the Mfg $($forest$-$wide$)$ while using this local group. $(3$ marks$)$

$3.$ Create $3$ user accounts $($of your choice$)$ within the $6$ OUs that $$should$$ contain user accounts. Each user account should be a member of the appropriate groups from the previous step.

$(6$ marks$)$

$4.$ Develop a workstation naming convention, and pre$-$stage computer accounts for $2$ workstations within the Workstations OU $($for general$-$purpose workstations$)$ as well as pre$-$stage computer accounts for $2$ workstations within the same $6$ OUs that contain user accounts from the previous step. $(6$ marks$)$

$5.$ Create and link a new GPO called GPO$-$Mfg to the Mfg OU that: $(9$ marks, one for each task$)$

a$.$ Locks out users for $2$ hours if they log in $3$ times unsuccessfully within $1$ minute.

b$.$ Removes Control Panel access.

c$.$ Ensures that the Print Spooler service is always started.

d$.$ Specifies that the system event log should be $40$MB in size maximum and that old events will be cleared automatically as necessary.

e$.$ Sets the background wallpaper $($your choice$).$

f$.$ Gives Bob the right to log on locally and shut down the computer.

g$.$ Assigns a software package $($of your choice$)$ to all computers.

h$.$ Redirects the Desktop and Documents folders for users to a shared folder on server$1.$

i$.$ Prevents the Windows Calculator program from executing.

$6.$ Test your GPO by temporarily moving your server$2$ computer account into the Mfg OU$,$ and by logging on to it using a user account within the Mfg OU$.$ Next, ensure that GPO$-$Mfg does not apply to users or computers within the So$.$Amer OU$.(1$ mark$)$

$7.$ Create a conditional forwarder in DNS to world.com $($IP $=192\mathrm{.}168\mathrm{.}255\mathrm{.}188).(1$ mark$)$ Next, create a $2-$way transitive Realm trust relationship between your forest and world.com. $(1$ mark$)$

$8.$ Configure server$1$ as a CA that auto$-$enrolls all users and computers within the domain for generic user and computer certificates and test your results by restarting server$2$ and logging in as Administrator in the domain. In the Certification Authority console on server$1,$ right$-$click Issued Certificates, click Export List and save the list as C:$\backslash$project$\backslash$certificates$.$txt$.(4$ marks$)$

Install Docker on your WindowsServer$1$ virtual machine. Create and configure $2$ IIS containers with custom website content $$Container$1$ Website$$ and $$Container $2$ website$.(10$ marks$)$

$9.$ Take a sample performance baseline for server$1$ and server$2.$ Save these baselines as server$1$baseline.html and server$2$baseline.html in the C:$\backslash$project folder on server$1.(4$ marks$)$

$10.$ Configure server$1$ as a WSUS server that provides updates to the computers within the domain $($do not download the updates $$ only download the Windows Update Catalog$).(6$ marks$)$

Take the snapshots of all completed tasks and paste them under each completed task of the project word document file. Upload the document file to the Assignments folder of the Brightspace module.