0.Requirements
1. Infrastructure Setup
-
Create a Domain Controller:
-
Domain Name:
FINAL.LOCAL -
Server Name:
PDC -
IP Address:
192.168.56.10/24 -
Default Gateway:
192.168.56.1
-
-
Configure an Additional Domain Controller:
-
Server Name:
ADC -
IP Address:
192.168.56.11 -
Install as Additional Domain Controller (ADC)
-
2. Organizational Structure
-
Create Organizational Units (OUs) for departments:
-
HR
-
Sales
-
Development
-
IT
-
-
For each department:
-
Create Users
-
Create Security Groups
-
Add users to their respective groups
-
3. Security Policies (GPO)
Password Policy:
-
Maximum password age: 60 days
-
Minimum password length: 6 characters
-
Enforce password complexity
-
Password history: remember last 3 passwords
Account Lockout Policy:
-
Lock account after 4 failed attempts
-
Lockout duration: 1 hour
4. Remote Access Configuration
-
Enable Remote Desktop for all domain computers via GPO
-
Enable Remote Assistance
- Assign IT Group as helpers
5. User Restrictions (GPO)
-
Disable:
-
External storage (USB)
-
Task Manager
-
Control Panel
-
6. DHCP Configuration
-
Create DHCP Scope:
-
Range:
192.168.56.40 โ 192.168.56.230 -
Subnet Mask:
/24
-
-
Exclusion Range:
192.168.56.80 โ 192.168.56.85
-
Lease Duration:
- 10 days
-
Configure DHCP Failover with:
- Partner Server:
ADC
- Partner Server:
7. DNS & Load Balancing
-
Configure DNS Load Balancing:
-
Record:
www.final.local -
IP Addresses:
-
192.168.56.10 -
192.168.56.11
-
-
8. Web Server (IIS) & High Availability
-
Deployment: Installed IIS (Internet Information Services) on both:
- PDC (Primary Domain Controller)
-
ADC (Additional Domain Controller - GUI Mode)
-
Verification: Verified that the default IIS page is accessible via the Load Balanced URL:
http://www.final.local. -
Customization (Optional but recommended): Modified the
iisstart.htmfile on each server to display the server name (e.g., "Welcome to PDC" / "Welcome to ADC") to confirm DNS Round Robin is functioning correctly during testing.
9. File Server & Permissions
Shared Folder (Dev & HR):
-
Permissions:
-
Allow: Create, Edit
-
Deny: Delete
-
-
Restrictions:
-
Prevent uploading:
-
Audio files
-
Video files
-
Executable files (.exe)
-
-
10. Network Drives
-
Map Network Drive for:
-
Dev Department
-
HR Department
-
-
Create Public Shared Folder:
-
Accessible by all domain users
-
Permissions: Edit
-
Quota Limit: 2 GB per user
-
11. Printer Management
-
Add shared printer for all domain users:
-
Black & White only
-
Available Time:
- From 9:00 AM โ 4:00 PM
-
12. Active Directory Features
- Enable Active Directory Recycle Bin
13. Virtualization Infrastructure
-
Service: Install & Configure Hyper-V Role on PDC.
-
Component: Create Core_VM (Template) to demonstrate system readiness for hosting virtual services.
- Status: Operational (Local Host Only).
๐พ 14. Backup Configuration
-
Configure Full Server Backup:
-
Schedule: Daily at 11:00 PM
-
Backup Destination:
ADC
-
๐ฅ๏ธ 15. Client Configuration
-
Join a client machine to:
FINAL.LOCALdomain