Question $1$

X Marks

Study the scenario and complete the question$($s$)$ that follow$($s$)$:

You have been hired as an IT consultant by BlueTec Corp, a small start$-$up organization with around $20$ employees. The company is expanding its operations and needs to implement a robust IT infrastructure to support its growing needs. Your task is to design and implement a Windows Server $2019$ environment that covers key services such as Active Directory, DNS$,$ DHCP$,$ Group Policies, Remote Access, and Windows Certificate Services.

The follow diagram depicts the network connectivity:

You organization uses the following IP address range $192\mathrm{.}168\mathrm{.}0\mathrm{.}0/24$ on its network.

Command Prompts can be used to run commands that give high$-$level access to users and evade other restrictions on the system. So$,$ to ensure system resources' security, it's wise to disable Command Prompt.

Removable media drives are very prone to infection, and they may also contain a virus or malware. If a user plugs an infected drive to a network computer, it can affect the entire network. Similarly, DVDs$,$ CDs and Floppy Drives are prone to infection. It is therefore best to disable all these drives entirely.

When you give users the freedom to install software, they may install unwanted apps that compromise your system. System admins will usually have to routinely do maintenance and cleaning of such systems. To be on the safe side, it's advisable to prevent software installations through Group Policy:

Set the minimum password length to higher limits$.$ For example, for elevated accounts, passwords should be set to at least $10$ characters, and for regular accounts at least $12$ characters. Setting a lower value for minimum password length creates unnecessary risk. The default setting is "zero" characters, so you will have to specify a number

Set Maximum Password Age to Lower Limits: If you set the password expiration age to a lengthy period of time, users will not have to change it very frequently, which means it's more likely a password could get stolen. Shorter password expiration periods are always preferred. Windows' default maximum password age is set to $42$ days. The following screenshot shows the policy setting used for configuring "Maximum Password Age". Perform the following steps:

Include your surname in all your installation names, eg Windows Server $2019-$ Smith instead of just Windows Server $2019.$ This is for the examiner to make sure that you do not use Internet images or images from another student.

As an example the questions refer to SmithlT instead of IT$,$ and so on$.$ Replace Smith with your surname in all occurrence of Smith in the questions.

Source: William, J $(2024)$

$4\mathrm{.}2.$ Deliverable $1$

Deliverable $1$

$45$ Marks

$1\mathrm{.}1$ Demonstrate the installation and configuration of Windows Server $2019$ and $2$ Windows $10$ Client machines on a virtual machine. Provide screenshots and detailed documentation of each step.

$(10$ marks$)$

$1\mathrm{.}2$ Implement an Active Directory Domain Services environment. Create OUs for the $3$ departments, SmithHR, SmithMarketing, SmithIT and Administration, user accounts, and groups. Describe the process and provide screenshots of the configurations. $($domain name $-$

SmithBluetech.com$).$

Refer to the Addendum

$(10$ marks$)$

$1\mathrm{.}3$ Promote this Server to a domain controller

$(5$ marks$)$

$1\mathrm{.}4$ Add all Client computers to this domain.

$(5$ marks$)$

$1\mathrm{.}5$ Add the following user accounts:

$\backslash$table$[[$Name$,$Role,Username,Department$],[\backslash$table$[[$Thabiso$],[$Motsaoledi$]],$Administration,umotsaa,SmithIT$],[\backslash$table$[[$Lerato$],[$Tshabangu$]],$Std User,utshale,SmithIT$],[$James Rodriguez,Std User,urodrja,SmithHR$],[\backslash$table$[[$Gayton$],[$Mackenzie$]],$Std User,umackga,SmithMarketing$]]$

$(3$ marks$)$

$1\mathrm{.}6$ Add the following computer Accounts:

$\backslash$table$[[$PC Name,Department$],[$PC$-$Win$10-01,$SmithIT$],[$PC$-$Win$10-02,$SmithIT$],[$PC$-$Win$10-03,$SmithHR$],[$PC$-$Win$10-04,$SmithHR$],[$PC$-$Win$10-05,$SmithHR$],[$LP$-$Win$10-01,$SmithMarketing$],[$LP$-$Win$10-02,]]$

$(2$ marks$)$

$1\mathrm{.}7$ Install and Configure DNS to resolve domain names to IP addresses within the network.

$(5$ marks$)$

$1\mathrm{.}8$ Set up DNS and DHCP on your server. Create forward and reverse lookup zones and configure a DHCP scope. Document the configurations and testing results. Using the IP address range provided. Create an appropriate scope in your DHCP Server and allocate IP addresses to your client PCs$.$

$(5$ marks$)$

$q,$

End of Deliverable $1$