DETAILS OF LEARNING OUTCOME

LEARNING OUTCOME 1 Set-up user access

CONTENTS:
1. Create user folder.
2. Configure user access level.
3. Perform security check.
ASSESSMENT CRITERIA:
1. User folder is created in accordance with network operating
system (NOS) features
2. User access level is configured based on NOS features and
established network access policies/end-user requirements.
3. Security check is performed in accordance with established
network access policies/end-user requirements.
CONDITIONS:(Tools, equipment, s/m, references/materials)

The students/trainees must be provided with the following:

1. Cable plan/procedural
2. Manual
3. Race way
4. Cable tester
5. Crimping Tool
6. Wire stripper
7. Mask
8. Impact punch down tool
9. Cable tie
10. Patch panel
11. Modular box
12. Rj45
METHODOLOGIES:
 Lecture-demonstration
 Self-paced instruction
 Group discussion
ASSESSMENT METHODS:
 Hands on
 Direct observation

LEARNING EXPERIENCE
LEARNING OUTCOME 1

Setup User Access.

Learning Activities Special Instructions

Read information sheet 3.1-1 Answer self-check 3.1-1 on creating
on creating user folder in user folder in accordance with job
accordance with job requirements.
requirements.
Compare your answer to the answer
key 3.1-1 on creating user folder in
accordance with job requirements.

Observe demonstration on Take notes on the procedure on

creating user folder in creating user folder in accordance
accordance with job with job requirements.
requirements.
Perform Task Sheet 3.1-1 on The trainer evaluates the
creating user folder in performance using the Performance
accordance with job Criteria Checklist 3.1-1 on creating
requirements. user folder in accordance with job
requirements.
Read information sheet 3.1-2 Answer self-check 3.1-2 on
on configuring user access level configuring user access level in
in accordance with job accordance with job requirements.
requirements.
Compare your answer to the answer
key 3.1-2 on configuring user access
level in accordance with job
requirements.

Observe demonstration on
Take notes on the procedure on
configuring user access level in
configuring user access level in
accordance with job accordance with job requirements.
requirements.
Perform Task Sheet 3.1-2 on The trainer evaluates the
configuring user access level in performance using the Performance
accordance with job Criteria Checklist 3.1-2 on
requirements. configuring user access level in
accordance with job requirements.
Read information sheet 3.1-3 Answer self-check 3.1-3 on
on performing security check in performing security check in
accordance with job accordance with job requirements.
requirements.
Compare your answer to the answer
key 3.1-3 on performing security
check in accordance with job
requirements.

Observe demonstration on
Take notes on the procedure on
performing security check in
performing security check in
accordance with job
accordance with job requirements.
requirements.
Perform Task Sheet 3.1-3 on The trainer evaluates the
performing security check in performance using the Performance
accordance with job Criteria Checklist 3.1-3 on
requirements. performing security check in
accordance with job requirements.

INFORMATION SHEET 3.1-1

Create user folder

LEARNING OBJECTIVE/S:

After reading this information sheet, you must be able to:

1. Identify what is user folder in Windows Server 2008 R2.

2. Identify how to create user folder in Windows Server 2008 R2.
3. Enumerate the procedure to be made in creating user folder in
Windows Server 2008 R2.

User’s folder is basically a folder that holds all the non-

Windows OS related data that a user generates. The User folder will
have 1 folder for each profile /user on the PC.
So when you login to a specific user the data stored by
that user will be displayed to him/her.

This enables the OS to provide you a more ‘Personalized’ experience.

Creating User Folder in Windows Server 2008 R2

1. Create a folder named Users (this can be anywhere on the server

but I will put it in D :\).
2. Right-click on this folder and select Properties.
3. Select the Sharing tab
4. Click Advanced Sharing.

5. Check “Share this folder”.

6. Add a $ sign to the end of the Share name so it says
Users$. (This makes this share invisible when browsing the
network)
7. Click on the Permissions button.

8. Remove the Everyone group.

9. Click Add, and add the following groups: Administrators,
System, and Authenticated Users.
10. For each group (there should be three) give them full
permissions (select allow under full control).
 11. Click OK.

NTFS Permissions:

1. Select the tab Security.

2. Select Advanced button.

3. Select change permissions.
4. Uncheck “Include inheritable permissions from this object’s
parent”.
5. Click on Add when the warning prompt pops up.
6. Select Users and hit remove (Do this for both if you have two
fields with user permissions).
7. Select Add and add the Authenticated Users group.
8. At Apply To: Select: This folder only.
9. For the permissions select allow for: Traverse folder / execute
file, List folder/read data, Read attributes, Read extended
attributes, Read permissions.

10. Click OK, Click OK, and Click OK again.

 11. Now your Security tab should look like the image below.

Share and storage management:

1.  Go to Start > Administrative Tools > Share and storage

management.
2. Select the share you just created: Users$.
3. Right click and select Properties.

4. Click on the Advanced button.

5. Check the check box Enable access-based enumeration.

6. Click OK.
7. Close out the Share and storage management console.

Active Directory:

On Your Domain Controller.

1. Go to Start > Administrative tools > Active directory users and

computers.
2. Navigate to the User you want to add the User folder to.
3. Right click and select properties on the user.
4. Select the profile tab.
 5. Under the section Home folder: Select the Connect radio button.
6. Select the letter U:\
7. In the To: Text area type: \\YOURSERVER\Users$\%username
%(if your server with the share’s name is joe it would be \\JOE\
Users$\%username%)
8. Click OK
9. Close Active Directory Users and Computers.

If you now browse to the Users$ share folder on the server you
created it on. You will notice a folder in it with the user’s username as
the folder name. If you check the permissions for the folder the right
permissions have automatically been applied.
 SELF-CHECK NO. 3.1-1

TRUE OR FALSE: Write the word TRUE in the space provider if the
statements are correct and FALSE if it is not.

______1. User’s folder is a folder that holds all the non-Windows OS

related data that a user generates.
______2. User folder only has 1 folder for each user on the PC.
______3. If you login to a specific user, the data stored by the user will
not be displayed to him/ her.
______4. Adding $ sign to the end of the share name makes this share
invisible when browsing the network.
______5. The 3 groups in setting the Permission to share the folder are
Administrators, Systems and Authenticated Users.
______6. In the Folder Share Permission, there are only 2 groups, the
Administrators and the Authenticated Users.
______7. The Permission for Administrators should be set to Deny all
Permission.
______8. The “Include inheritance Permission” should always be
uncheck from object’s parents.
______9. After creating active directory, the folder Users$ have a new
folder inside it with the user’s username as the folder name.
______10. Folders that are automatically created inside the folder with
a $ sign under Active Directory has the right permission
applied to it automatically.
 ANSWER KEY No. 3.1-1

TRUE OR FALSE
1. True
2. True
3. False
4. True
5. True
6. False
7. False
8. True
9. True
10. True
 TASK SHEET 3.1-1
TITLE OF TASK: Create user folder

PERFORMANCE OBJECTIVE/S:
To identify what is user folder, how to create user folder, the
procedures to be made in creating user folder in Windows Server 2008
R2, and set-up user access in accordance with software
manufacturer’s instructions. Allotted time of 10 minutes.

SUPPLIES/MATERIALS: N/A

EQUIPMENT:
 Personal Computer

STEPS/PROCEDURE:

1. Prepare your Workplace

1. Make sure that you have the necessary

Materials/Peripherals
2. Make sure that the workplace is clean and dry.
3. Computer system and networks are checked/ tested to
ensure safe operations.

2. Start
1. OHS standards and 5S principles are followed according
to enterprise policies.
2. Create a folder named Users at Local Drive D:/.
3. Right click on the folder and select Properties.
4. Select the Sharing Tab.
5. Click Advanced Sharing.
6. Check Share this folder.
7. Add a $ sign at the end of the share name of the folder.
8. Click on the Permission button.
9. Remove the Everyone group.
10. Click Add and add the following groups (Administrator,
 System and Authenticated Users)
11. Click OK.

Permission setup.
1. Select the Security tab.
2. Select Advanced button.
3. Select Change Permission.
4. Uncheck “Include inheritance permission from this
objects parent”.
5. Click Add when warning pops up.
6. Select Users and hit remove (Do this for both if you have
two fields with user permissions).
7. Select Add and add the Authenticated Users group.
8. At Apply To: Select: This folder only.
9. For the permissions select allow for: Traverse folder /
execute file, List folder/read data, Read attributes,
Read extended attributes, Read permissions.
10. Click OK, Click OK, and Click OK again.

Share and storage management:

1.  Go to Start > Administrative Tools > Share and
storage management.
2. Select the share you just created: Users$.
3. Right click and select Properties.
4. Click on the Advanced button.
5. Check the check box Enable access-based enumeration.
6. Click OK.
7. Close out the Share and storage management console.

Assessment Method: Observation using Performance Criteria

checklist

TASK SHEET
 PERFORMANCE CRITERIA CHECKLIST 3.1-1

Trainee’s Name: ___________________________ Date: ________________

CRITERIA YES NO
Did i:
Follow OHS standards and 5S principles according to
enterprise policies.
Create user folder in accordance to Microsoft Server
Operating System End User Licensed Agreement
standards.
Configure the permission setup of user folder in
accordance to Microsoft Server Operating System End
User Licensed Agreement standards.
Configure the share and storage management of user
folder in accordance to Microsoft Server Operating
System End User Licensed Agreement standards.