Create the following OU structure underneath your domain: $(6$ marks$)$

Create a nested group structure that allows permissions to be easily assigned to: $(3$ marks, $1$ mark for each task$)$

Members of the Sales, Mfg$,$ Engrg, and IT groups $($in your domain$)$

Mfg members in No$.$Amer, So$.$Amer, and Canada $($in your domain$)$

Create a local group called Project$-$Printer within the File$/$Print OU$.$ Next, create a fictitious printer on your host OS that grants Print permission only to members of the Mfg $($forest$-$wide$)$ while using this local group. $(3$ marks$)$

Create $3$ user accounts $($of your choice$)$ within the $6$ OUs that $$should$$ contain user accounts. Each user account should be a member of the appropriate groups from the previous step.

$(6$ marks$)$

Develop a workstation naming convention, and pre$-$stage computer accounts for $2$ workstations within the Workstations OU $($for general$-$purpose workstations$)$ as well as pre$-$stage computer accounts for $2$ workstations within the same $6$ OUs that contain user accounts from the previous step. $(6$ marks$)$

Create and link a new GPO called GPO$-$Mfg to the Mfg OU that: $(9$ marks, one for each task$)$

Locks out users for $2$ hours if they log in $3$ times unsuccessfully within $1$ minute.

Removes Control Panel access.

Ensures that the Print Spooler service is always started.

Specifies that the system event log should be $40$MB in size maximum and that old events will be cleared automatically as necessary.

Sets the background wallpaper $($your choice$).$

Gives Bob the right to log on locally and shut down the computer.

Assigns a software package $($of your choice$)$ to all computers.

Redirects the Desktop and Documents folders for users to a shared folder on server$1.$

Prevents the Windows Calculator program from executing.

Test your GPO by temporarily moving your server$2$ computer account into the Mfg OU$,$ and by logging on to it using a user account within the Mfg OU$.$ Next, ensure that GPO$-$Mfg does not apply to users or computers within the So$.$Amer OU$.(1$ mark$)$

Create a conditional forwarder in DNS to world.com $($IP $=192\mathrm{.}168\mathrm{.}255\mathrm{.}188).(1$ mark$)$ Next, create a $2-$way transitive Realm trust relationship between your forest and world.com. $(1$ mark$)$

Configure your domain with $3$ sites $($Kitchener$,$ London, Toronto$).(1$ mark$)$ Ensure that your DC account resides within the closest site to your physical classroom location. $(1$ mark$)$ Ensure that intersite replication occurs every $90$ minutes between all locations. $(1$ mark$)$

Configure server$1$ as a CA that auto$-$enrolls all users and computers within the domain for generic user and computer certificates and test your results by restarting server$2$ and logging in as Administrator in the domain. In the Certification Authority console on server$1,$ right$-$click Issued Certificates, click Export List and save the list as C:$\backslash$project$\backslash$certificates$.$txt$.(4$ marks$)$

Configure server$1$ as an iSCSI SAN that shares a $50$GB iSCSI virtual disk to server$2.$ Format this virtual disk with NTFS and ensure that server$2$ can access it using X:$\backslash .$ Also ensure that data deduplication is enabled for X:$\backslash .(6$ marks$)$

Take a sample performance baseline for server$1$ and server$2.$ Save these baselines as server$1$baseline.html and server$2$baseline.html in the C:$\backslash$project folder on server$1.(2$ marks$)$

Configure server$1$ as a WSUS server that provides updates to the computers within the domain $($do not download the updates $$ only download the Windows Update Catalog$).(4$ marks$)$

Obtain the projectscript.ps$1$ PowerShell script from your instructor and replace any instances of yourname.com with the actual name of your domain. Also replace any instances of DC$=$yourname,DC$=$com with the actual name of your domain. Next, execute it on server$1$ as Administrator to generate $11$ text files $($file$1.$txt to file$11.$txt$)$ in the C:$\backslash$project folder. Next, compress the C:$\backslash$project folder to a file called yourname.zip and send it to your instructor.

BONUS: Optional $(1$ mark each$)$

Install a Server $2019$ Standard Core virtual machine called server$3($IP $=192\mathrm{.}168\mathrm{.}255\mathrm{.}11,$ DNS$/$gateway $=192\mathrm{.}168\mathrm{.}255\mathrm{.}1),$ join it to your domain, and configure it to host an IIS container. Send a screenshot of the output of docker ps while your container is running for this bonus mark.

Install two additional Server $2019$ Datacenter virtual machines $($server$4$ and server$5)$ with an appropriate IP configuration, joined to your domain. Next, configure server$4$ and server$5$ as a Failover Cluster file server $($you will need to add a $1$GB Q:$\backslash$ volume to your iSCSI Target for the quorum$).$ Send screenshots of both the Roles and Nodes sections within Failover Cluster Manager to your instructor for this bonus mark.