Scribd
Upload
26 views13 pages

Windows Server 2012

Uploaded by

Wasim Mulani
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
26 views13 pages

Windows Server 2012

Uploaded by

Wasim Mulani
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 13

Task 5.

1
Creating Organizational Units
1- Login to the SVE-DC-A computer, which has the Server manager.

2- Select tools >Active Directory Users and Computers. The Active Directory Users and
Computers console appears.
3- Expand adatum.com node and Right click the adatum.com node from the context menu
click new >Organizational unit. The new Object- Organizational wizard appear.

4- In name text type Rome.

5- The wizard creates the Rome OU object.in Server Manager click Tools > Active
Directory Administrative Center. The Active Directory Center appears.
6- In left pane, select the adatum (local) node and, in the right pane under Tasks, select New
> Organizational unit. The Create Organizational Unit dialog box appears

7- In the Name Text Box, type London and Click OK. The new OU appears in the center
pane.
8- In bottom Open PowerShell and Type New-ADOrganizationalUnit-Name Paric and
Enter.

Question1- What must you do to assign the same Group Policy settings to the system in all three
of the OUs you just created?
Answer- To assign the same Group Policy settings to the systems in all three Organizational
Units (OUs), you need to create a Group Policy Object (GPO) with the desired settings and link
it to each of the OUs you created using the Group Policy Management Console (GPMC) or
PowerShell's Group Policy cmdlets. This ensures that the policies defined in the GPO are applied
uniformly across all systems within the respective OUs, providing consistent configuration and
management.
9- In Active Directory User and Computers console press F5 to refresh the console until the
pair OU appears.

End of Lab.

Task 5.2
Creating Domain Local Groups
1- On the SVR-DC-A Computer, in the Active Directory and Computer console, select
the Rome OU you created previously.
2- Right Click Rome OU and, From the context menu, click New >Group. The New
Object Group dialog box appears.

3- In the Group name text box, type Rome backup.


Question 2: What must you do to enable the member of the Rome Backup group to
perform backup operation in local system?
Answer: To enable members of the Rome Backup group to perform backup
operations on the local system, add the group to the Backup Operators built-in group
in the local system's security settings. This grants necessary privileges for performing
backup tasks without granting excessive permissions.

4- Repeat steps to create a domain local group called Printing.

5-

Question 3: What must you do to enable the members of the Rome Printing group to
manage the queued print jobs on selected printers?
Answers: To enable members of the Rome Printing group to manage queued print
jobs on selected printers, grant them permissions to manage printer queues. This can
be achieved by assigning the appropriate permissions, such as "Manage Documents,"
on the targeted printers within the printer's security settings.

End Lab.

Task 5.3
Create Global Groups
1- On the SVR-DC-A computer, in the Active Directory Administrative Center console,
expand the adatum (local) node in the left pane and select the Rome OU you created in
Task 5.1

2- In the right pane select New>Group. The Created Group dialog box appears.
3- In the Group name text box type Backup Managers.

4- Under the Group scope, select Global and Click OK. The new group appears in the Rome
OU.
5- Repeat steps 2 to 4 to create group called Print Manager in Rome OU.
6- Repeat steps 2 to 4 to create a global group called Rome Manager I Rome OU.

7- End Lab.
Lab Challenge Nesting Groups
To complete this challenge, you must nest the groups you created previously in this lab so that
the members of the Print Managers group will receive the privileges assigned to the Rome
Printing group, and the Backup Managers group will receive the privileges assigned to the Rome
Backup group.
1- Open the "Active Directory Users and Computers" console.
2- In the console tree, navigate to the location where your groups are located. This could be
under the "Users" container or a specific Organizational Unit (OU) where your groups
reside.

3- Type in the name of the "Rome Printing" group and click "Check Names" to verify.

4- Click "OK" to add the group.


End of Lab.
Task 5.4
Delegating Administration

1- On the SVR-DC-A computer, in the Active Directory Users and Computers console, right
click the Rome OU and, from the context menu, select Delegate Control. The Delegation
of Control Wizard appears.

2- Click Next. the Users or Group page appears. Enter the object name Rome Manager and
Click OK.

3- Click Next the Task to Delegate page appears.


4- In the Delegate Wizard Check the following from list and click next.
5- Click Finish.
End Lab.
Conclusion:
Through these tasks, the lab effectively demonstrates the foundational steps in Active
Directory management, including creating organizational units, groups, and delegating
administrative tasks. By following these procedures, administrators can establish a
structured and secure network environment, ensuring efficient resource allocation and
access control.
References:
1- Allen, R., & Lowe-Norris, A. (2003). Active directory. " O'Reilly Media, Inc.".
2- Dias, J. (2002). A guide to microsoft active directory (ad) design (No. UCRL-MA-
148650). Lawrence Livermore National Lab.(LLNL), Livermore, CA (United States).
3- Kouti, S., & Seitsonen, M. (2002). Inside Active Directory: A system administrator's
guide. Addison-Wesley Professional.

You might also like