Lab 1: Implementing Access Controls with Windows Active Directory

SECTION 1: Hands-On Demonstration

Part 1. Group Policy

1. (4 points) the updated policy settings for the new PasswordGPO (screen capture):

Part 2. User and Group Administration

1. (4 points) members of the Managers group (screen capture):

2. (4 points) members of the HumanResources group (screen capture):

3. (4 points) members of the ShopFloor group (screen capture):

Part 3. Resource Management

1. (4 points) updated share permissions for the MGRfiles folder (screen capture):

2. (4 points) updated share permissions for the HRfiles folder (screen capture):

3. (4 points) updated share permissions for the SFfiles folder (screen capture):

Part 4. Practical Application

1. (4 points) accesstest text file for HRUser01 (screen capture):

2. (4 points) accesstest text file for SFManager (screen capture):

SECTION 2: Applied Learning

Part 1. User and Group Administration

1. (4 points) the two new users within the Contractors OU (screen capture):

Part 2. Group Policy

1. (4 points) the new Password Policy for the yourname_PasswordGPO (screen capture):

2. (4 points) the new Account Lockout Policy for the yourname_PasswordGPO (screen capture):

Part 3. Resource Management

1. (4 points) the contents of the CoreFiles directory (screen capture):

2. (4 points) the updated Security permissions for the yourtown directory (screen capture):

Part 4. Practical Application

1. (4 points) the result of Part 4, Step 3 (screen capture):

2. (5 points) description of the results of Part 4 for the ANewuser account;

3. (5 points) explanation of the results of Part 4 for the ANewuser account;

SECTION 3: Lab Challenge and Analysis

Skip this Section, you dont have to work on this one.

Analysis and Discussion

1. Use the Internet to research the SYSTEM account. Why is it necessary to include this account with full control on a directory?

Tools and Commands

1. Using the icacls utility, document the command that will give the ANewuser account write access to the yourschool folder.

Challenge Exercise

2. Using your work in this lab as a guide, create a three-level directory structure for your family tree (grandparents, parents, children). You will need to create user accounts for each member of the family (at least 2 in each generation), create groups for each generation, and then secure the folders so that only members of a single generation can write to files within that generations directory. Make screen captures to document your progress and describe your process.