Active Directory Labs

7/29/2019 Active Directory Labs

1/78

ACTIVE DIRECTORYHAND-ON LAB ([email protected])

Partner Technology Specialist Microsoft Thailand


2/78

Lab Diagram


3/78

Server Name IP Address


4/78

Lab 1 : Promote Domain

Lab 1.1 : Domain contoso.com

Lab 1.2 : Join Windows XP Domain Lab 1.3 : Active

Directory


5/78

Lab 1.1 : Domain

contoso.com

Command Prompt dcpromo


6/78

Lab 1.1 : Domain

contoso.com

Next Next


7/78

Lab 1.1 : Domain

contoso.com Domain Controller for newdomain

Domain in a new forest


8/78

Lab 1.1 : Domain

contoso.com domain Next

Next


9/78

Lab 1.1 : Domain

contoso.com Next

Next


10/78

Lab 1.1 : Domain

contoso.com Install and configure the DNS server

Permissions compatibleonly with Windows 2000 orWindows Server


11/78

Lab 1.1 : Domain

contoso.com Password Next

Next


12/78

Lab 1.1 : Domain

contoso.com Windows 2003

I386 directory DNS Server


13/78

Lab 1.1 : Domain

contoso.com Finish Restart


14/78

Lab 1.1 : Domain

contoso.com Start Logon Active Directory Users and Computers(Start Administrative Tools Active Directory Users and Computers )


15/78

Lab 1.1 : Domain

contoso.com DNS Management(Start Administrative Tools DNS )

Zone contoso.comcontoso.com sub zone myserver


16/78

Lab 1.2 : Join Windows XP Domain

Client Name IP Address


17/78


Change Domain contoso

OK


18/78


User Password Restart

restart Logon User Contoso\Administrator

L b J i Wi d XP


19/78


Active Directory Users and Computers(Start Administrative Tools Active Directory Users and Computers )

Click Computers Client Join Domain


20/78

Lab 2 : Object Active Directory

Lab 2.1 : Organization Unit

Lab 2.2 : User Lab 2.3 : Group

Lab 2.4 : Shared Folders, Printers


21/78


Active Directory Users and Computers(Start Administrative Tools Active Directory Users and Computers )


22/78


Click contoso.com New Organization Unit

Lab 2 1 : Organization


23/78

Lab 2.1 : Organization

Unit OU Sales, Executives Managed Desktop


24/78

Lab 2.2 : UserClick contoso.com New User


25/78

Lab 2.2 : User User OU Sales Executive


26/78

Lab 2.2 : UserClick contoso.com New User


27/78

Lab 2.3 : GroupClick contoso.com New Group


28/78

Lab 2.3 : Group Group

L b G


29/78

Lab 2.3 : GroupClick Group Properties Add Users Group

L b 2 3 G


30/78

Lab 2.3 : Group

tab Members Click Add

User Add Check Names OK

L b 2 3 G


31/78

Lab 2.3 : Group

tab Members Click Add

User Add Check Names OK


32/78

Lab 2.4 : Shared Folder, Printer

Shared Folder C:\Shared click Shared Properties

L b Sh d F ld P i


33/78


Shared Folder C:\Shared click Shared Properties

L b 2 4 Sh d F ld P i


34/78


tab Sharing Share thisfolder tab Security Permission

L b 2 4 Sh d F ld P i t


35/78


Click Add Group

Group



36/78


Click Add Group

Group



37/78


Modify Write Group Add

Lab 2 4 : Shared Folder Printer


38/78


Windows XP log off log on User Sales Team (NEO)

Map Network Drive \\MYSERVER\Shared Shared

Logon User Group Sales Team(Pairoj) File

Lab 3 : Group Policy
http://myserver/Sharedhttp://myserver/Shared


39/78

Lab 3 : Group Policy

Lab 3.1 : Group Policy Computer User

Lab 3.2 : Password Policy DomainPolicy

Lab 3.3 : Group Policy Software Lab 3.4 : Group Policy Management

Console (GPMC) Group Policy in Common Scenario

Lab 3.1 : Group Policy Computer


40/78

p y p

User

Active Directory Users and Computers(Start Administrative Tools Active Directory Users andComputers )



41/78

p y p

User

OU Click Properties



42/78

User

tab Group Policy

Sales Policy Edit



43/78

User

User Configuration Start Menu and Taskbar

Double Click Remove Runmenu fromStart Menu



44/78

User

Enable OK



45/78

User

User Configuration Control Panel

Double Click RemoveProhibitaccess to theControl Panel



46/78

User

Enable OK



47/78

User

Command Prompt gpupdate /force



48/78

User

Windows XP Logon User OU Sales (pairoj)

Run Control Panel

Lab 3.1 : Group Policy Computer U


49/78

User

Logon User OU Sales (NEO)

Run Control Panel



50/78

User

OU manage computer Click Properties



51/78

User

tab Group Policy

Sales Policy Edit



52/78

User

Interactive logon: Do not display last user name



53/78

User

Interactive logon: Message text for users attempting to log on



54/78

User

Interactive logon: Message title for users attempting for logon



55/78

User

Move computer Computer Managed Computer



56/78

User

Windows XP Command Prompt gpupdate /force



57/78

User

Restart Windows XP Logon

Ctrl-Alt-Delete Screen



58/78

User

security template Directory Security Setting , click ImportPolicy

Security Policy Template

Lab 3.2 : Password Policy DefaultDomain Policy


59/78

Domain Policy

Click contoso.com Group Policy Tab Default Domain Policy Edit

Lab 3.2 : Password Policy DefaultDomain Policy


60/78

Domain Policy

Password Policy Computer ConfigurationWindows SettingsAccount Policies Password Policy

Lab 3.3 : Group Policy Software


61/78

Group Policy Managed Desktop



62/78

Software installation , click new Package



63/78

file .msi UNC name

mode deploy assigned



64/78

Package Deploy list Software installation



65/78

Windows XP Command Prompt gpupdate /force



66/78

Restart Windows XP Software

Lab 3.4 : Group Policy Management Console


67/78

GPMC GPMC.MSI Windows 2003 Server Group Policy Management Start Administrative ToolsGroup Policy Management



68/78

OU Sales Group Policy (Sales Policy)



69/78

tab Settings click show Policy setup



70/78

tab Settings click show Policy setup

Group Policy in Common Scenario


71/78

Group Policy Desktop

http://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=en

http://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=enhttp://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=enhttp://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=enhttp://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=enhttp://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=enhttp://www.microsoft.com/downloads/details.aspx?familyid=354B9F45-8AA6-4775-9208-C681A7043292&displaylang=en


72/78

Machine Policy GPOs Lightly Managed

Mobile No differences from Lightly Managed GPO, so no machine GPO exists forMobile

Highly Managed AppStation - No differences from Highly Managed GPO, so no machine GPO exists for

AppStation

Multi-User GPO provided

TaskStation GPO provided

Kiosk GPO provided

User Policy GPOs Lightly Managed

Mobile GPO provided

Highly Managed AppStation - GPO provided

Multi-User GPO provided

TaskStation GPO provided

Kiosk GPO provided



73/78



74/78

Run CreateCommonScenarios.cmd C:\Program Files\Microsoft\GroupPolicy Common Scenarios\Scripts



75/78

Y



76/78



77/78

OU Common Scenarios Group Policy



78/78

move User Computer Group Policy

Documents

Active Directory Labs