$2023$H$1$B$3$ hao.shi@vu$.$edu.au NIT$3122$ Lab Assessment $3$ Page $2$

Don$$t design your network until you finish reading the entire requirements carefully.

Scenario

$$

You are a network specialist for PracticeLabs.com. Your company have four $(4)$ servers running Window Server $2016($PLABDC$01,$ PLABDM$01,$ PLABDMCORE$01,$ and PLABSA$01).$ You are required to design and configure a network with active directory according to the following requirements:

$$

The root Domain Controller $($PLABDC$01)$ is located in Melbourne. Three other server computers must act as active directory domain controller for the PracticeLabs.com, to support the high$-$volume usage of your company. Among them, one should be configured as Read Only Domain Controller which does not allow modification of the active directory database. Your company opens one branch in Sydney and takes the child domain name as SYDYourID.PracticeLabs.com where YourID is your VU Student seven$-$digit ID without s$.$ Another branch is located in Brisbane and has its domain child name called BNEYourID.PracticeLabs.com. There is an aadditional testing computer $($PLABWIN$10)$ currently configured as member computer of PracticeLabs.com.

The Lab Assessment $3$ includes the following three tasks:

Task $1$ Active Directory Design $(20\%)$

$$

Use commands date;ipconfig to record the existing configurations, and take screenshots for each virtual machine as well as the top$-$level Hyper$-$V Manager in purple color background.

$$

Design and draw an Active Directory Tree based on the above scenario in your Lab$\_$Assessment$\_3\_$YourName$\_$YourID.docx. Clearly label the machine names, IP$,$ domain names, DNS IP addresses, and OUs.

Task $2$ Active Directory Installation $(25\%)$

$$

Configure the active directory according to the above design.

$$

Capture necessary screenshots to demonstrate the steps taken to configure the network, and provide some explanation for your steps.

$$

After the configuration, take screenshots of Computers and Domain Controllers folder in Active Directory User and Computers of PracticeLabs.com, SYDYourID.PracticeLabs.com and BNEYourID.PracticeLabs.com to verify the existing domain controllers and member computer in the network.

$$

Use commands date;ipconfig to verify the new configurations, and take screenshots for each virtual machine as well as the top$-$level Hyper$-$V Manager in purple color background.

Task $3$ Active Directory Management $(55\%)$

$$ A $$ User Account and Group Management $(15\%)$

o Create Organization Units called AZUREYourID and BLOCKYourID.

o Inside AZUREYourID OU$,$ create a new user using YourName e$.$g$.$ YourFirstName.YourLastName as Domain User who must change password at the first logon$.$

o Inside BLOCKYourID OU$,$ create a new user using YourLecturer e$.$g$.$ LecturerFirstName.LecturerLastName name as Domain Administrator whose password never expiries.

o Take screenshots of the above account creation, AZUREYourID and BLOCKYourID.

o Log on the testing computer to verify the above two users with explanations.

$$ B $$ Software Management $(20\%)$

o Create another new GPO named $$NIT$3122$YourID Software Restrictions$$ which don$$t allow to use Microsoft WORD for AZUREYourID OU in BNEYourID.PracticeLabs.com domain.

o Use YourName to log on the testing computer to verify if Notepad can be opened.

o Then use YourLecturer to logon to verify the setting again.

o Take screenshots of the above procedures and explain the results.

$$ C $$ Application Management $(15\%)$

o Create a new GPO named $$NIT$3122$YourID Computer Restrictions$$ which $$Don$$t allow open Google Chrome$$ for PLABWIN$10$ computer.

o Use YourName to log on the testing computer to verify the setting.

o Switch to YourLecturer to verify the setting again.

o Take screenshots of the above procedures and explain the results.

$$

D $$ GPO results $(5\%)$ Use commands date;gpresult $/$r to take several screenshots of the entire output on screen for YourName and YourLecturer users. Use commands date;ipconfig to take screenshots for the top$-$level Hyper$-$V Mana