LAB 8 ANSWER KEY CONFIGURING A WINDOWS SERVER 2008 MACHINE

Transcription

1 LAB 8 ANSWER KEY CONFIGURING A WINDOWS SERVER 2008 MACHINE This lab contains the following exercises: Exercise 8.1 Exercise 8.2 Exercise 8.3 Installing Active Directory Creating Users and Groups Joining a Windows 7 Machine to the Active Directory Domain Estimated lab time: 90 minutes Exercise 8.1 Overview Completion time Installing Active Directory Contoso has outgrown their workgroup setup. You must now configure your Windows Server 2008 machine to be an Active Directory domain controller. In this exercise you will install the Active Directory Domain Services role and the Active Directory Domain Services Installation Wizard. 30 minutes 1. Turn on the Server## computer and log on using your Student## account and the password P@ssw0rd.

2 Windows Server 2008 Active Directory Configuration 2. When the Initial Configuration Tasks window appears, click Add Roles. The Add Roles Wizard appears, click Next.

3 Configuring a Windows Server 2008 Machine 3. On the Select Server Roles page select the Active Directory Domain Services role and click Next. The Active Directory Domain Services page appears, click Next.

4 Windows Server 2008 Active Directory Configuration

5 Configuring a Windows Server 2008 Machine 4. On the Confirm Installation Selections page click Install. An installation Progress page appears.

6 Windows Server 2008 Active Directory Configuration 5. Following the Installation Progress page, an Installation Results page appears. On the Installation Results page click Close.

7 Configuring a Windows Server 2008 Machine

8 Windows Server 2008 Active Directory Configuration 6. Close the Initial Configuration Tasks window and the Server Manager window appears (if the Server Manager window does not open, open it manually from the Administrative Tools menu).

9 Configuring a Windows Server 2008 Machine 7. In the Server Manager window click Roles and the Roles console will appear. In the Role summary pane click Active Directory Domain Services. The Active Directory Domain Services page appears.

10 Windows Server 2008 Active Directory Configuration 8. On the Active Directory Domain Services page click Run the Active Directory Domain Services Installation Wizard (dcpromo.exe). The Active Directory Domain Services Installation page appears.

11 Configuring a Windows Server 2008 Machine 9. On the Active Directory Domain Services Installation page select Use Advanced Mode Installation and click Next.

12 Windows Server 2008 Active Directory Configuration 10. On the Operating System Compatibility page, click Next.

13 Configuring a Windows Server 2008 Machine 11. On the Choose a Deployment Configuration page, select Create a new domain in a new forest and click Next.

14 Windows Server 2008 Active Directory Configuration Question 1 Why is this message displayed? What can you do to fix it? Answer: The Local Administrator has a blank password. 12. Close all open windows and log off the Server and log in using the Administrator account. A message is displayed stating that The User s password must be changed before logging in for the first time, click OK. Enter P@ssw0rd into both boxes and click the arrow. You will get a message confirming your password has been changed.

15 Configuring a Windows Server 2008 Machine Question 2 Why wasn t this message displayed when you logged in with your Student account? Answer: The Student account was assigned a password during the installation process.

16 Windows Server 2008 Active Directory Configuration

17 Configuring a Windows Server 2008 Machine 13. Close the Initial Configuration Tasks window and the Server Manager window appears (if the Server Manager window does not open, open it manually from the Administrative Tools menu). 14. Repeat steps 7 12 to begin the creation of a new forest. 15. On the Name the Forest Root Domain page, key Domain##.Local and click Next. 16. On the Domain NetBIOS name page leave the default value, click Next.

18 Windows Server 2008 Active Directory Configuration 17. On the Set the Forest Functional Level page, select Windows Server 2008, click Next.

19 Configuring a Windows Server 2008 Machine 18. On the Additional Domain Controller Options page, verify that the DNS server checkbox is selected and click Next.

20 Windows Server 2008 Active Directory Configuration *Note If the following message box appears, even though you have already sent a static address click Yes to continue. 19. A message box appears, warning you that the system cannot locate an existing DNS infrastructure. Because you will be creating a new DNS infrastructure, you can ignore this warning and click Yes.

21 Configuring a Windows Server 2008 Machine 20. On the Location for Database, Log Files, and SYSVOL page, click Next to accept the default settings. 21. On the Directory Services Restore Mode Administrator Password page, key P@ssw0rd in the Password and Confirm Password text boxes and click Next.

22 Windows Server 2008 Active Directory Configuration 22. On the Summary page, click Next and Active Directory installation begins.

23 Configuring a Windows Server 2008 Machine 23. When the installation process is complete click Finish and restart the server.

24 Windows Server 2008 Active Directory Configuration 24. Log on using your Administrator account and the password and open the Server Manager console. Take a screen shot showing the Server Manager console showing that the Domain##.Local is now your domain by pressing Alt+ Prt Scr, and then paste the resulting image into the Lab08_worksheet file in the page provided by pressing Ctrl + V. 25. Leave the computer logged on for the next exercise.

25 Configuring a Windows Server 2008 Machine Exercise 8.2 Overview Completion time Creating Users and Groups Because Contoso Ltd. is now moving to a Client-Server architecture instead of using workgroups, the user and group accounts created in Lab 4 must now be recreated on the server. In this exercise you will use the Active Directory Users and Computers MMC to create users and groups on your Windows Server 2008 machine. Group memberships are as follows: 30 minutes Accounting Director, shift supervisors, administrative assistants Bookkeeping Director, bookkeepers, administrative assistants Admins Director, bookkeepers, IT managers Domain Admins Director, shift supervisors, IT managers 1. Turn on the Server## computer and log on using your Administrator account and the password P@ssw0rd. 2. Click Start > Administrative Tools > Active Directory Users and Computers. The Active Directory Users and Computers console appears. 3. In the Active Directory Users and Computers console expand Domain##.Local

26 Windows Server 2008 Active Directory Configuration 4. Select the Users container and a list of user and group accounts on the server appears.

27 Configuring a Windows Server 2008 Machine 5. Right click the Users container and select New > User. The New Object User dialog box appears. Create the following users. Question 3 Could you use Password as the password for this user? Why or why not? Answer: No, the password Password does not meet Windows complexity requirements.

28 Windows Server 2008 Active Directory Configuration Full Name Account Name Password Position Selected Check Boxes Jay Adams JAdams Shift Supervisor/IT Manager Pilar Ackerman PAckerman Bookkeeper User Must Change Password At Next Logon Adam Barr ABarr Shift Supervisor (Day) User Must Change Password At Next Logon Susan Metters SMetters Director User Must Change Password At Next Logon Heidi Steen HSteen Shift Supervisor (Night) Tai Yee TYee Administrative Assistant User Must Change Password At Next Logon User Must Change Password At Next Logon 6. Right click the Users container and select New > Group. The New Object Group dialog box appears. Create the following groups:

29 Configuring a Windows Server 2008 Machine Group Name Group Type Group Scope Accounting Security Global Bookkeeping Security Global Admins Security Global

30 Windows Server 2008 Active Directory Configuration Question 4 Why did you not have to manually create the Domain Admins group? Answer: It is created automatically during the installation of Active Directory. 7. In the Users container right click the Jay Adams account and select Add to a group. The Select Group dialog box appears. 8. In the Enter the object names to select text box, type Accounting; Admins; Domain Admins. Click Check Names, and then Click OK. An Active Directory Domain Services dialog box appears stating that The Add to Group operation was successfully completed, click OK.

31 Configuring a Windows Server 2008 Machine 9. Repeat steps 7 and 8 using the account information in the table and the membership assignments at the beginning of this exercise to create the appropriate group memberships for all of the users you created. 10. Take a screen shot showing the Active Directory Users and Computers console with all of the users and groups added in this exercise by pressing Alt+ Prt Scr, and then paste the resulting image into the Lab08_worksheet file in the page provided by pressing Ctrl + V. 11. Close all open windows and leave the computer logged on for the next exercise. Exercise 8.3 Overview Joining a Windows 7 Machine to the Active Directory Domain The client computers in the network must now be joined to the domain to reap the full benefits of an Active Directory environment. In this exercise you will join your Windows 7 machine to the Active Directory domain and log in with one of the user accounts created in exercise 8.2

32 Windows Server 2008 Active Directory Configuration Completion time 30 minutes 1. Turn on the Workstation## computer and log on using your Student## account and the password 2. Click Start and then click Control Panel. The Control Panel window appears. 3. Click Network and Internet > Network and Sharing Center. The Network and Sharing Center control panel appears.

33 Configuring a Windows Server 2008 Machine 4. In the Network and Sharing Center control panel select Change Adapter Settings. The Network Connections window appears. 5. Right-click the Local Area Connection icon and, from the context menu, select Properties. The Local Area Connection Properties sheet appears. 6. Clear the Internet Protocol Version 6 (TCP/IPv6) checkbox.

34 Windows Server 2008 Active Directory Configuration 7. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties sheet appears.

35 Configuring a Windows Server 2008 Machine 8. Select the Use the following IP address and the Use the following DNS server addresses radio buttons and enter the following information: IP Address: ##.2 (Where ## is the number assigned by your instructor) Subnet Mask: Preferred DNS Server: ##.1

36 Windows Server 2008 Active Directory Configuration *Note The IP addresses supplied in this setup document and in the lab manual are suggestions. You can use any IP addresses for the computers in your classroom, as long as all of the systems are located on the same subnet. If the classroom network is connected to a school network or the Internet, you can specify the address of the router providing the network connection in the Default Gateway field. Otherwise, leave it blank. 9. Click OK twice to close the two Properties sheets. Close the Network Connections window. 10. Right Click on Computer and Select Properties (you can also use Windows Key + Pause). The Computers Property sheet appears.

37 Configuring a Windows Server 2008 Machine 11. Click the Change Settings Button. The System Properties Dialog Box appears. 12. Click Change. The Computer Name/Domain Name Changes Dialog Box appears.

38 Windows Server 2008 Active Directory Configuration 13. In the Member of section of the Computer Name/Domain Name Changes Dialog Box select the Domain radio button and enter Domain##.Local in the Domain text box. Question 5 Could you have used your local Student## account to join the Domain##.Local domain? Why or why not? Answer: No the local Student## account does not have any authority on the domain.

39 Configuring a Windows Server 2008 Machine 14. Click OK to accept the change. A Windows Security dialog box appears. Enter Administrator in the username text box and P@ssw0rd in the password text box and click OK. *Note If you receive a DNS error at this step check the IP address configurations on both machines. If that does not resolve the issue change the VMWare Player network settings on both machines to Bridged. 15. A message appears welcoming you to the DomainXX.Local domain. Click OK. 16. You will be prompted to restart the machine Click OK. Click OK on the System Properties screen and choose restart now.

40 Windows Server 2008 Active Directory Configuration 17. When the computer has completed restarting, log on using your Administrator account and the password

41 Configuring a Windows Server 2008 Machine *Note In order to log in you may have to click switch user and enter Domain##\Administrator as the username. 18. Right Click on Computer and Select Properties (you can also use Windows Key + Pause). The Computers Property sheet appears.

42 Windows Server 2008 Active Directory Configuration 19. Take a screen shot showing the Computer Properties window displaying that Workstation## is now a member of the Domain##.Local domain by pressing Alt+ Prt Scr, and then paste the resulting image into the Lab08_worksheet file in the page provided by pressing Ctrl + V. 20. Log off both machines.