Student Name: Weight: $20\%$

Student ID: Marks: $/74$

Group Project

Due $4/16/2024,14$:$59.$ Not $23$:$59!$ Not Friday!

Introduction

In this project, you will build and configure a server network using skills gained throughout the course. You will demonstrate your knowledge of server configurations and protocols by designing and implementing a network that involves managing multiple interconnected services and features.

Case Scenario

Source: Pixabay.com, StartUpStockPhotos, Image #$593296$

You have been contacted by a local company, DreamNetwork Inc., to assist them with building their network infrastructure. The company$$s headquarters are in Calgary, but they are expanding their network into Vancouver. They have asked you to provide a proof of concept $($PoC$)$ of the network you plan to build prior to implementation.

You and two partners $($group of $3)$ will build and configure the network using virtual network technology based on the below requirements.

Requirements

$$ The network includes essential services and features available to Windows and Linux users.

$$ The network follows a logical domain name for DreamNetwork Inc. An appropriate naming convention is used for all servers and workstations.

$$ Servers are configured with static IP addressing, while all workstations get dynamic addresses from the DHCP server.

$$ At least one service is configured on a RHEL$/$AlmaLinux$/$Rocky Linux VM$.$

$$ The Linux server VM$($s$)$ must join the Active Directory Domain.

$$ At least one Windows and one Linux client machine are configured for testing purposes.

$$ Windows and Linux Workstations are added to the domain.

$$ All servers at all sites can be remotely administered from your desktop computer. You can NOT use VMware Workstation console to access Linux servers.

$$ A file server at each location is configured with a shared folder set up for each department. Each share needs to be published to Active Directory to aid users in searching for resources.

$$ LAN segments in VMWare Workstation, each with a unique subnet, are used to demonstrate multiple sites. The $3$rd octet of your LAN segments is the last two digits of your SAIT ID$.$ If you SAIT ID is $000123456,$ then your LAN segments can be $10.$x$\mathrm{.}56\mathrm{.}0/24$ and $172\mathrm{.}16\mathrm{.}56\mathrm{.}0/24$

$$ Users are able to search for and access files across all locations using the DNS server.

$$ All users provided by your instructor are added to the domain. Each user has their own private and secure home drive $($h:$/)$ and are able to access their private data regardless of the site. Home folders are limited to $50$ MB in size and are not allowed to save any MP$3$ files.

$$ Users have full control over any documents they create, can modify access to files in their department and have read access to other departments but accounting department. Only accountants may have access to their share.

$$ Network drives are mapped to the shares created for users.

$$ For security purposes, DreamNetwork Inc. requires that you disable the default domain administrator account. Your account will be elevated to a domain administrator in its place.

Note: Be very careful and think logically about your procedure. Take a screenshot prior to disabling the administrator account in case this doesn$$t work.

$$ The IT staff at the Vancouver site will be able to RDP into the DC in Vancouver site only, while the Calgary team has RDP access to both sites.

$$ All users will receive an appropriate login banner message to welcome them to the company.

$$ There is a password policy for all users.

$$ Calgary users are not able to access the registry utility.

$$ Vancouver users have a custom desktop image of your choosing and are not able to modify display settings.

$$ The sales team does not have the ability to launch task manager or the run command.

$$ Successful and failed login events are logged on all servers.

$$ A firewall rule admits ICMPv$4$ traffic from your company and client PCs but blocks all other traffic.

Procedure

$1.$ Complete the network policies worksheet provided in the appendix. This document must be fully completed and approved prior to implementation. It will be your guide, and the final environment must match all decisions in this document.

$2.$ Schedule a group meeting with your instructor to present your network policies worksheet for approval. If you fail to attend the group project worksheet meeting scheduled for $3/26/2024$ and work on unapproved project, your grade will be reduced by $50\%.$

$3.$ After approval, implement your solution using your network policies worksheet as a guide.

$4.$ Every student MUST implement Linux Server, AD$,$ RDP$(52$ marks$).$

$5.$ If you failed to implement NFS$/$Samba and$/$or DNS in your Linux project, you MUST implement SMB and$/$or DNS in Linux in addition to your assigned work to earn $8$ marks of procedure $6.$

$6.$ DHCP$,$ DNS$,$ Policies and Firewall, and File sharing have $24$ marks in total, each student should select $8$ marks of evaluation items. The assessment of Infrastructure Setup $(14$ marks$)$ w provide commands and detailed steps for doing this