Team Case Project 1

Instructions-Summary

Case Scenario

You are a network administrator for ABC Insurance Company. The organization has a multidomain forest. The forest root is abcinsurance.com. There are also two child domains named west.abcinsurance.com and east.abcinsurance.com. The company has approximately 10,000 users, 10,000 client workstations, and 150 servers.

All domains are Windows Server 2016 domains. The forest root domain has 10 domain controllers. Five of those domain controllers are configured as DNS servers and two are configured as global catalog servers. The West domain has three domain controllers. Two of those domain controllers are configured as DNS servers. One of those domain controllers is configured as a global catalog server. The East domain has two Windows Server 2016 domain controllers and three Windows 2012 R2 domain controllers.

The forest root domain is located in College Station, Texas. The East domain is located in Gainesville, Florida. The West domain is located in San Diego, California. An Active Directory site is configured for each of these locations. The site for College Station is named Main_Site. The Gainesville site is named East_Site. The San Diego site is named West_Site.

You are one of several network administrators assigned to handle the forest root domain and College Station site. Your manager, Joe Somebody, has called a meeting of all network and desktop administrators, and he wants to address several issues.

Joe says four internal auditors are in the forest root domain. Two internal auditors are in each of the child domains. Each set of internal auditors has been placed in a global group within each domain. These groups are named IA_Main, IA_East, and IA_West after their respective locations. Joe wants all of the members of these groups to be able to access a common set of resources in the Main domain, while still segregating the auditors ability to access other resources in domains other than their own. Team Task # 1: Describe the recommended way to configure the groups to allow the desired functionality.

The network administrators from the West domain want to know why everyone always recommends placing global groups into universal groups, instead of placing the users directly into the universal groups. Team Task # 2: Is the proper practice? Why or why not?

Joe approves a plan to hire assistants for each domain to create and manage user accounts. Team Task # 3: Describe how you can give the assistants the immediate ability to help in this way, without making them domain administrators.