Windows Clients Project Completion

Windows Clients Final Project (Total: 40 Marks) Part 1: Domain Controller (DC01) Configuration 1. Virtual Machine Cleanup (Optional): o Remove any existing virtual machines from Hyper-V Manager on your Windows host if necessary to free up storage space. 2. Virtual Switch Creation: o Create two virtual switches in Hyper V Manager: 2.1. Private: For internal network communication. 2.2. External: For external network access (internet). o (If these switches already exist, proceed to the next step.) 3. DC01 Virtual Machine Creation: o Create a Hyper V virtual machine named DC01. o Configure it with at least 2GB of RAM and connect it to the Private virtual switch. o Install Windows Server 2019, 2022, or 2025 Standard Edition (with Desktop Experience). 4. DC01 Initial Configuration: o Set the correct time zone and disable Windows Firewall for all profiles. o Change the computer name to DC01 and reboot. o Rename the Private network interface to "Private" and configure it with:  Static IP address: [login to view URL]  Subnet mask: [login to view URL]  DNS IP address: [login to view URL] 5. Install Active Directory Domain Services (AD DS): o Install AD DS and configure the server as a domain controller for a new forest and domain named [login to view URL] (replace “yourname” with your full name). 6. DHCP Server Configuration: o Install the DHCP Server role and authorize the server in AD. o Configure a new DHCP scope with the following settings:  IP address range: [login to view URL] - [login to view URL]  Subnet mask: [login to view URL]  Router (gateway) IP: (use your router’s IP if required; otherwise, document why it is not needed)  DNS IP address: [login to view URL]  Lease duration: 4 hours 7. Windows Deployment Services (WDS) Configuration: o Install the Windows Deployment Services role. o Configure WDS to deploy [login to view URL] and [login to view URL] from a Windows 10/11/server DVD ISO. o Ensure that computers are not automatically joined to the domain during imaging. 8. Organizational Unit (OU) and User Creation: o In Active Directory Users and Computers on DC01: 8.1. Create the required organizational units (OUs) as indicated in the provided diagram. 8.2. Create two user accounts: - User1: Set a password and uncheck “User must change password at next logon.” - User2: Set a password and uncheck “User must change password at next logon.” 8.3. Create a global security group named Marketing and add User1 and User2 to it. 9. Shared Folder Creation: o On DC01, create a folder named C:\Data. o Share the C:\Data folder with Full Control permissions for the domain administrator and User1. 10. Group Policy Configuration: o In Group Policy Management on DC01, perform the following steps: 10.1. Create a GPO named Marketing Lockdown. 10.2. Link the Marketing Lockdown GPO to the Marketing OU. 10.3. Configure the Marketing Lockdown GPO to prohibit users from accessing the Control Panel. 10.4. Create a GPO named MapDrive to map the shared Data folder (created in step 9) to the users in the Marketing OU and link it to the Marketing OU. 10.5. Modify the Default Domain Policy to enforce complex passwords (minimum 10 characters) and a password change interval of 30 days. 11. DC01 Data Collection: 11.1. Create a folder named C:\PDC on DC01. 11.2. Log in to DC01 as an administrator and open PowerShell. 11.3. Run the following commands, saving each output as a text file in the C:\PDC directory: gpresult /r /z > c:\PDC\[login to view URL] Get-TimeZone > c:\PDC\[login to view URL] Get-NetIPConfiguration > c:\PDC\[login to view URL] Get-DhcpServerv4Scope > c:\PDC\[login to view URL] Get-WdsBootImage > c:\PDC\[login to view URL] Get-WdsInstallImage > c:\PDC\[login to view URL] Get-ADOrganizationalUnit -filter * > c:\PDC\[login to view URL] Get-ADUser -filter * > c:\PDC\[login to view URL] get-gpo -all > c:\PDC\[login to view URL] systeminfo > c:\PDC\[login to view URL] 11.4. Compress all text files in C:\PDC into a ZIP archive named yournameDC01.zip. ________________________________________ Part 2: Workstation (Wkstn01) Configuration Wkstn01 Virtual Machine Creation: a. Create a Hyper V virtual machine named Wkstn01. b. Configure it with at least 2GB of RAM and connect it to the Private virtual switch. c. Install Windows 10/11 Pro. 2. Wkstn01 Initial Configuration: a. Set the correct time zone. b. Rename the Private network interface to Private. c. Change the computer name to Wkstn01 and reboot. d. Configure the Private network interface with a static IP address and DNS settings to join the [login to view URL] domain. 3. Move Computer Account and Users (from DC01): a. In Active Directory Users and Computers on DC01, move the following objects to the Marketing OU: 3.1. The Wkstn01 computer account 3.2. User1 and User2 4. Wkstn01 Local Configuration: a. Log in to Wkstn01 as the domain administrator. b. Create a folder named C:\MyData and share it. c. Remove the Everyone group from both share and NTFS security permissions (leaving existing permissions unchanged). d. Configure the share permissions as follows: i. Domain administrator: Full Control ii. User1: Full Control iii. User2: Read e. Configure the NTFS permissions as follows: i. Domain administrator: Full Control ii. User1: Full Control iii. User2: Read f. Disk Quotas: Configure disk quotas on a specified volume so that users receive a warning at 4 GB of disk space usage and are restricted from using more than 5 GB. g. Create a System Restore checkpoint. h. Create a Windows Firewall exception for DOOM traffic (TCP port 666). i. Add three 30GB virtual hard disks to Wkstn01. j. Create and format the following NTFS volumes: i. Mirrored (RAID 1): Label "Mirror," 20GB. ii. Striped (RAID 0): Label "Striped," 20GB. iii. Spanned: Label "Spanned," 20GB. 5. Wkstn01 GPO Verification: a. Log off Wkstn01 and log back in as either User1 or User2. b. Attempt to access the Control Panel to verify it is blocked. c. Verify that the mapped drive (from the shared Data folder on DC01) is available in File Explorer. 1. Wkstn01 Data Collection: 6.1. Create a folder named C:\PWS on Wkstn01. 6.2. Open PowerShell as administrator and run the following commands, saving each output as a text file in C:\PWS: gpresult /r /z > c:\PWS\[login to view URL] Get-TimeZone > c:\PWS\[login to view URL] Get-NetIPConfiguration > c:\PWS\[login to view URL] net share mydata > c:\PWS\[login to view URL] icacls c:\mydata > c:\PWS\[login to view URL] Get-ComputerRestorePoint > c:\PWS\[login to view URL] Get-NetFirewallRule > c:\PWS\[login to view URL] Get-Volume > c:\PWS\[login to view URL] systeminfo > c:\PWS\[login to view URL] fsutil quota query C: > c:\PWS\[login to view URL] Compress all text files in C:\PWS into a ZIP archive named yournameWkstn01.zip. Additional Network Configurations: o Add the External virtual switch to the Wkstn01 virtual machine. o Add a second network interface to DC01 connected to the External virtual switch.  Note: Ensure that on DC01 (in Server Manager under Local Server), Internet Explorer Enhanced Security Configuration is turned OFF. ________________________________________ Submission Instructions • For DC01: Upload the ZIP archive [login to view URL] (containing all files from C:\PDC) via Brightspace. • For Wkstn01: Upload the ZIP archive [login to view URL] (containing all files from C:\PWS) via Brightspace. • Ensure that both ZIP files are submitted as per your instructor’s guidelines. [login to view URL]: 3 Marks [login to view URL]: 0.5 Marks [login to view URL]: 0.5 Marks [login to view URL]: 4 Marks [login to view URL]: 2 Marks [login to view URL]: 2 Marks [login to view URL]: 3 Marks [login to view URL]: 3 Marks [login to view URL]: 4 Marks [login to view URL]: 2 Marks [login to view URL]: 0.5 Marks [login to view URL]: 0.5 Marks [login to view URL]: 3 Marks [login to view URL]: 3 Marks [login to view URL]: 3 Marks [login to view URL]: 3 Marks [login to view URL]: 3 Marks Part 1: Domain Controller (DC01) – [login to view URL] Total: 20 marks This ZIP should include the following files from the C:\PDC directory: • [login to view URL] (gpresult output) – 2 marks • [login to view URL] (Get-TimeZone output) – 2 marks • [login to view URL] (Get-NetIPConfiguration output) – 2 marks • [login to view URL] (Get-DhcpServerv4Scope output) – 2 marks • [login to view URL] (Get-WdsBootImage output) – 2 marks • [login to view URL] (Get-WdsInstallImage output) – 2 marks • [login to view URL] (Get-ADOrganizationalUnit output) – 3 marks • [login to view URL] (Get-ADUser output) – 3 marks • [login to view URL] (get-gpo -all output) – 2 marks Subtotal for DC01: 20 marks ________________________________________ Part 2: Workstation (Wkstn01) – [login to view URL] Total: 20 marks This ZIP should include the following files from the C:\PWS directory: • [login to view URL] (gpresult output) – 3 marks • [login to view URL] (Get-TimeZone output) – 2 marks • [login to view URL] (Get-NetIPConfiguration output) – 3 marks • [login to view URL] (net share mydata output) – 2 marks • [login to view URL] (icacls output for C:\MyData) – 2 marks • [login to view URL] (Get-ComputerRestorePoint output) – 3 marks • [login to view URL] (Get-NetFirewallRule output) – 2 marks • [login to view URL] (Get-Volume output) – 3 marks Subtotal for Wkstn01: 20 marks

Project ID: 40189758