0.Requirements

First: Infrastructure Setup

1. Create the Domain (Domain Controller):

   • Domain Name: AAAS.LOCAL

   • Server Name: PDC-SRV

   • IP Address: 192.168.56.20

2. Configure the Client Machine:

   • Computer Name: PC-01

   • IP Address: 192.168.56.50

   • Join the machine to the domain.

---

Second: User and Group Management (AD Users & Computers)

1. Create Organizational Units (OUs): Create separate OUs for (HR, Sales, IT).

2. Create Groups: Create a group for each department (HR-Group, Sales-Group, IT-Group).

3. Create and Assign Users:

   • HR Department: Create User1_HR_Admin and User2_HR, and add them to the HR group.

   • Sales Department: Create User1_Sales and add it to the Sales group.

   • IT Department: Create User1_IT and add it to the IT group.

---

Third: Security and Password Policies (Password & Account Policies)

1. Password Policy:

   • Change password every 90 days.

   • Minimum length: 4 digits.

   • Disable password complexity.

   • Enforce password history of the last 2 passwords.

2. Account Lockout Policy:

   • Lock the account for 60 minutes after 5 failed attempts.

---

Fourth: Group Policy Objects (GPO)

1. Restrictions and Control:

• Programs and Features: Hide it from Control Panel for HR and Sales users.

• Context Menu: Remove "Properties" from the "This PC" menu.

• Command Line & Run: Disable CMD and Run for HR and Sales users.

• Task Manager: Remove it for all domain users (Force Remove), with an exception for the IT team.

2. Storage and Network Management:

• External Storage: Disable USB and flash drives for HR users, with an exception for the HR manager (User1_HR_Admin).

• Windows Firewall: Allow Ping traffic for all devices via GPO.

3. Deployment & Local Admin:

• Desktop URL: Create a desktop shortcut for HR users pointing to:
  http://hrapp.test.local

• Local Admin (Group): Add the IT-Group as local administrators on domain machines.

• Local Admin (User): Create a local user named itadmin on all domain machines using GPO.