12/10/24, 5:21 PM Practice Labs | Print

CompTIA | 220-1102: CompTIA A+

Authentication and Authorization Methods
Exercises
Introduction
Lab Topology
Exercise 1 - Mobile Device Management (MDM)
Exercise 2 - Active Directory Structure
Exercise 3 - Security Groups Vs. Distribution Groups
Exercise 4 - Active Directory Logon Scripts
Review

Introduction
Tags: A+ Active Directory Security Group Distribution Group Logon Scripts
Organizational Unit GPO Home Folder Folder Redirection Share Folder
Batch File Gpupdate

Welcome to the Authentication and Authorization Methods Practice Lab. In

this module, you will be provided with the instructions and devices needed to
develop your hands-on skills.

Learning Outcomes
In this module, you will complete the following exercises:

Exercise 1 - Mobile Device Management (MDM)

Exercise 2 - Active Directory Structure
Exercise 3 - Security Groups Vs. Distribution Groups
Exercise 4 - Active Directory Logon Scripts

After completing this module, you should be able to:

Set up a Security Group

Set GPO for the Security Group
Setup a Home Folder for Testuser
Test the Home Folder for Testuser
Create a Shared Folder
https://www.practice-labs.com/app/platform/print.aspx 1/130
12/10/24, 5:21 PM Practice Labs | Print

Create a Batch File

Create a GPO Object and Attach a Group Policy
Update the Group Policy

After completing this module, you should have further knowledge of:

Mobile Device Management (MDM)

Forest, Trees, & Domains
Organizational Units

Exam Objectives
The following exam objectives are covered in this module:

2.1 Summarize various security measures and their purposes

Mobile device management (MDM)

Active Directory

Lab Duration
It will take approximately 1 hour to complete this lab.

Help and Support

For more information on using Practice Labs, please see our Help and Support
page. You can also raise a technical support ticket from this page.

Click Next to view the Lab topology used in this module.

https://www.practice-labs.com/app/platform/print.aspx 2/130
12/10/24, 5:21 PM Practice Labs | Print

Lab Topology
During your session, you will have access to the following lab configuration.

Depending on the exercises, you may or may not use all of the devices, but they
are shown here in the layout to get an overall understanding of the topology of
the lab.

PLABDC01 - (Windows Server 2019 - Domain Controller)

PLABWIN10 - (Windows 10 - Domain Member Workstation)
PLABWIN11 - (Windows 11 - Domain Member Workstation)
PLABSUSE - (SUSE - Standalone Server)
PLABUBUNTU - (Ubuntu - Standalone Server)
PLABANDROID - (Android OS - Android Device)

Click Next to proceed to the first exercise.

https://www.practice-labs.com/app/platform/print.aspx 3/130
12/10/24, 5:21 PM Practice Labs | Print

Exercise 1 - Mobile Device Management (MDM)

Most organizations now allow the use of mobile phones to share their data.
However, there is always a risk of data being stolen or the mobile phone being
compromised. MDM is a feature used in an enterprise network to keep a mobile
device environment secure.

In this exercise, you will learn about Mobile Device Management (MDM).

Learning Outcomes
After completing this exercise, you should have further knowledge of:

Mobile Device Management (MDM)

Your Devices
This exercise contains supporting materials for A+ (220-1102).

Mobile Device Management (MDM)

Mobility has become a necessity for many people, and therefore, organizations
often use different methods to allow the use of mobile phones.

Four methods are commonly used:

Bring Your Own Device (BYOD) - Organizations might allow you to bring
your own device for official use. However, organizations need to ensure that
any corporate data on the mobile phone is secure. To safeguard the data,
mobile phones must be encrypted.
Choose Your Own Device (CYOD) - This method allows employees to
choose a device. The employee can either purchase the device from the
organization or pay rent. However, the organization has complete control
over the mobile device.
Corporate-Owned, Personally Enabled (COPE) - The organization provides
the mobile device to the user. However, as a user, you are only allowed to
install pre-approved apps.
Corporate-Owned, Business Only (COBO) - The organization provides,
controls, and manages the devices. The applications and the data belong to
the organization.

With any of these methods, it can be difficult to manage the devices. This is
where Mobile Device Management (MDM) comes in. MDM is a feature used in an

https://www.practice-labs.com/app/platform/print.aspx 4/130
12/10/24, 5:21 PM Practice Labs | Print

enterprise network to keep a mobile device environment secure. MDM can

control, configure, update, and secure remote mobile devices.

Using MDM, you can block rooting, jailbreaking, or any other feature you do not
want the employees to use. MDM also allows you to restrict the use of any
application other than approved applications from your app store.

If the mobile device containing corporate data is lost, you can use the Remote
Wipe feature to completely wipe the mobile storage and erase sensitive data
and its configuration. As a precautionary measure, you can enable full device
encryption. This will ensure that the data remains secure and confidential, even if
it is stolen.

MDM can be used to enable geofencing, which alerts the administrator if a user
leaves the defined perimeter. Alongside this, you can also configure asset
tracking. Even if the SIM is changed, you will be able to locate the device.

https://www.practice-labs.com/app/platform/print.aspx 5/130
12/10/24, 5:21 PM Practice Labs | Print

Exercise 2 - Active Directory Structure

Active Directory is a network management and maintenance technology that
makes managing and maintaining networks easier. Instead of going to each
computer and manually configuring it, Active Directory can be used to remotely
configure it. Users and computers on the network will be assigned to groups,
which will subsequently be subject to rules and permissions. Maintaining
privileges and security becomes considerably more efficient because of this.

In this exercise, the structure of Active Directory will be discussed.

Learning Outcomes
After completing this exercise, you should have further knowledge of:

Forest, Trees, & Domains

Organizational Units

Your Devices
This exercise contains supporting materials for A+ (220-1102).

Forest, Trees, & Domains

The active directory is comprised of three main components.

The Forest is at the top level in the active directory structure. Forests are
separate from one another. They each have their own boundaries for
security and have a single database and global address for each. Forests
can become very large depending on the organization. This is where Active
Directory is required. Medium to large companies lean heavily on Active
Directory to help manage their network and security.
A Tree is a collection of Domains that have formed a trust relationship with
each other. If domains are situated in a tree, they can communicate with
each other because of the established trust. Several trees, together with
formed trust, are known as a forest.
A Domain is a collection of users, computers, and other items that are
controlled by the Active Directory administrators. They are grouped together
regardless of their physical position. At least one Domain Controller is
required for each domain. The domain controller is the server that stores all
of the active directory's setups and settings. If the server is not a domain
controller, it is a member server.

https://www.practice-labs.com/app/platform/print.aspx 6/130
12/10/24, 5:21 PM Practice Labs | Print

In the below screenshot, you can see the Active Directory structure with the
Forest: Practicelabs.com and the Practicelabs.com Domains inside the Forest.

Figure 2.1: Displaying the Group Policy Management window showing the structure of Active Directory.

Organizational Units
An Organizational Unit is a necessary component of Active Directory's operation.
Users, groups, and other group policy objects are stored in these Organizational
Units. Organizational Units can house additional Organizational Units within
them. These Organizational Units can't be shared between domains; therefore,
they have to be created separately for each one. They have rights and
permissions and use inheritance. The same rules that apply to the parent
Organizational Unit apply to all child Organizational Unit, just like with folders
and files. Users can be allocated jobs and additional responsibilities by putting
them in groups with the appropriate rights and permissions. Some common
administrative tasks that are done with Organizational Units are creating,
disabling, deleting, unlocking user accounts, managing backups, and managing
groups and policies.

https://www.practice-labs.com/app/platform/print.aspx 7/130
12/10/24, 5:21 PM Practice Labs | Print

Exercise 3 - Security Groups Vs. Distribution

Groups
In an Active Directory, there are two styles of groups. Security groups allow
administrators to apply rights and permissions, control access to shares and
apply overall controls to the system. Distribution Groups are only meant for
communication purposes. These are email lists that allow communication for the
users in the active directory. Distribution Groups can’t affect a policy.

In this exercise, you will set up a security group and then apply a group policy
for the group.

Learning Outcomes
After completing this exercise, you should be able to:

Set up a Security Group

Set GPO for the Security Group
Setup a Home Folder for Testuser
Test the Home Folder for Testuser

Your Devices
You will be using the following device in this lab. Please power this on now.

PLABDC01 - (Windows Server 2019 - Domain Controller)

PLABWIN10 - (Windows 10 - Domain Member Workstation)

Task 1 - Setting up a Security Group

In this task, you will create a new security group from Active Directory Users and
Computers.

Step 1
Connect to PLABDC01.

The Server Manager window is displayed.

Click the Tools menu and select Active Directory Users and Computers.

https://www.practice-labs.com/app/platform/print.aspx 8/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.1 Screenshot of PLABDC01: Displaying the Server Manager Window. The Tools menu is accessed,
and Active Directory Users and Computers is selected.

Step 2
In the Active Directory Users and Computers window, right-click anywhere on
a blank space in the right details pane and select New > Group.

https://www.practice-labs.com/app/platform/print.aspx 9/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.2 Screenshot of PLABDC01: Displaying the Active Directory Users and Computers window with
New > Group menu options selected after right-clicking on the details pane.

Step 3
In the New Object - Group dialog box, type the following for the Group name
field:

Folder Redirect

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 10/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.3 Screenshot of PLABDC01: Displaying the New Object Group dialog box with the required Group
name typed in and the OK button highlighted.

Step 4
Back on the Active Directory Users and Computers window, right-click
anywhere on a blank space in the right details pane and select New > User.

https://www.practice-labs.com/app/platform/print.aspx 11/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.4 Screenshot of PLABDC01: Displaying the Active Directory Users and Computers window with
New > User menu options selected after right-clicking on the details pane.

Step 5
In the New Object - User dialog box, type the following for the First name and
User logon name fields:

testuser

Click Next.

https://www.practice-labs.com/app/platform/print.aspx 12/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.5 Screenshot of PLABDC01: Displaying the New Object - User dialog box with the required
settings performed and the Next button selected.

Step 6
Type the following for the Password and Confirm password fields:

Passw0rd

Untick the User must change password at next logon checkbox.

Enable the User cannot change password checkbox.

Click Next.

https://www.practice-labs.com/app/platform/print.aspx 13/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.6 Screenshot of PLABDC01: Displaying the New Object - User dialog box with the required
settings performed and the Next button selected.

Step 7
Click Finish.

https://www.practice-labs.com/app/platform/print.aspx 14/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.7 Screenshot of PLABDC01: Displaying the New Object - User dialog box with the Finish button
selected.

Step 8
Back on the Active Directory Users and Computers window, right-click Folder
Redirect and select Properties.

https://www.practice-labs.com/app/platform/print.aspx 15/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.8 Screenshot of PLABDC01: Displaying right-clicking on Folder Redirect and selecting Properties
on the Active Directory Users and Computers window.

Step 9
From the Folder Redirect Properties dialog box, select the Members tab.

https://www.practice-labs.com/app/platform/print.aspx 16/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.9 Screenshot of PLABDC01: Displaying the Folder Redirect Properties dialog box with the
Members tab selected.

Step 10
In the Members tab, click Add.

https://www.practice-labs.com/app/platform/print.aspx 17/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.10 Screenshot of PLABDC01: Displaying clicking the Add button on the Folder Redirect Properties
- Members tab.

Step 11
In the Select Users, Contacts, Computers, Service Accounts, or Groups dialog
box, type the following for the Enter the object names to select field:

testuser

Click Check Names.

https://www.practice-labs.com/app/platform/print.aspx 18/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.11 Screenshot of PLABDC01: Displaying the Select Users, Contacts, Computers, Service Accounts,
or Groups dialog box with the required name entered and the Check Names button selected.

Step 12
The user is searched and found.

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 19/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.12 Screenshot of PLABDC01: Displaying the Select Users, Contacts, Computers, Service Accounts,
or Groups dialog box with the OK button selected.

Step 13
testuser is now added to the Members.

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 20/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.13 Screenshot of PLABDC01: Displaying the Folder Redirect Properties - Members tab with
testuser added and the OK button highlighted.

Minimize the Active Directory Users and Computers window.

Task 2 - Set GPO for the Security Group

In this task, you will apply permissions to the created group using Group Policy.
You will also set up rules for the Folder Redirect group.

Step 1
Ensure you are connected to PLABDC01.

Restore the Server Management window from the Taskbar.

In the Server Manager window, click the Tools menu and select Group Policy
Management.

https://www.practice-labs.com/app/platform/print.aspx 21/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.14 Screenshot of PLABDC01: Displaying the Server Manager Window. The Tools menu is accessed,
and Group Policy Management is selected.

Step 2
In the Group Policy Management window, right-click on Group Policy Objects
and select New.

https://www.practice-labs.com/app/platform/print.aspx 22/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.15 Screenshot of PLABDC01: Displaying right-clicking on Group Policy Objects and selecting New
on the Group Policy Management Window.

Step 3
In the New GPO dialog box, type the following for the Name field:

Folder Redirection

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 23/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.16 Screenshot of PLABDC01: Displaying the New GPO dialog box with the required name entered
and the OK button highlighted.

Step 4
Back on the Group Policy Management window, expand the Group Policy
Objects node.

Right-click on Folder Redirection and select Edit.

https://www.practice-labs.com/app/platform/print.aspx 24/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.17 Screenshot of PLABDC01: Displaying right-clicking on Folder Redirection and selecting Edit on
the Group Policy Management Window.

Step 5
In the Group Policy Management Editor window, expand the following nodes:

User Configuration > Policies > Administrative Templates > System

Select Folder Redirection.

On the Folder Redirection pane, right-click Do not automatically make all

redirected folders available offline and select Edit.

https://www.practice-labs.com/app/platform/print.aspx 25/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.18 Screenshot of PLABDC01: Displaying right-clicking on Do not automatically make all
redirected and selecting Edit on the Group Policy Management Editor window.

Step 6
In the Do not automatically make all redirected folders available offline
window, select the Disabled option.

Click the Next Setting button.

https://www.practice-labs.com/app/platform/print.aspx 26/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.19 Screenshot of PLABDC01: Displaying the Do not automatically make all redirected folders
available offline window with the required setting performed and the Next Setting button highlighted.

Step 7
In the Do not automatically make specific redirected folders available offline
window, select the Enabled option.

In the Options section, enable the following checkboxes:

Pictures
Music
Videos

Click Next Setting

https://www.practice-labs.com/app/platform/print.aspx 27/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.20 Screenshot of PLABDC01: Displaying the Do not automatically make specific redirected
folders available offline window with the required settings performed and the Next Setting button
highlighted.

Step 8
In the Enable optimized move of contents in Offline Files cache on Folder
Redirection server path change window, select the Disabled option.

Click Next Setting.

https://www.practice-labs.com/app/platform/print.aspx 28/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.21 Screenshot of PLABDC01: Displaying the Enable optimized move of contents in Offline Files
cache on Folder Redirection server path change window with the required setting performed and the
Next Setting button highlighted.

Step 9
In the Use localized subfolders names when redirecting Start Menu and My
Documents window, select the Enabled option.

Click Next Setting.

https://www.practice-labs.com/app/platform/print.aspx 29/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.22 Screenshot of PLABDC01: Displaying the Use localized subfolders names when redirecting
Start Menu and My Documents window with the required setting performed and the Next Setting button
highlighted.

Step 10
In the Redirect folders on primary computers only window, select the
Disabled option.

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 30/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.23 Screenshot of PLABDC01: Displaying the Redirect folders on primary computers only window
with the required setting performed and the OK button highlighted.

Step 11
Close the Group Policy Management Editor window.

https://www.practice-labs.com/app/platform/print.aspx 31/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.24 Screenshot of PLABDC01: Displaying closing the Group Policy Management Editor window.

Step 12
Back on the Group Policy Management window, select Folder Redirection in
the left pane.

On the Folder Redirection pane, click Add under the Security Filtering section.

https://www.practice-labs.com/app/platform/print.aspx 32/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.25 Screenshot of PLABDC01: Displaying the Group Policy Management window. Add button on
the Folder Redirection pane is selected.

Step 13
In the Select User, Computer, or Group dialog box, box type the following for
the Enter the object name to select field:

Folder Redirect

Click Check Names.

https://www.practice-labs.com/app/platform/print.aspx 33/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.26 Screenshot of PLABDC01: Displaying the Select User, Computer, or Group dialog box with the
required object name entered and the Check Names button selected.

Step 14
Folder Redirect is searched for and found.

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 34/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.27 Screenshot of PLABDC01: Displaying the Select User, Computer, or Group dialog box with the
OK button selected.

Step 15
The Folder Redirect group has now been added to the Security filtering
section, and the rules that were enabled will be applied to testuser since they
are a Member.

Note: It might take a few minutes for the Folder Redirect group to appear.

https://www.practice-labs.com/app/platform/print.aspx 35/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.28 Screenshot of PLABDC01: Displaying closing the Group Policy Management window.

Step 16
Right-click Practicelabs.com and select Link an Existing GPO.

https://www.practice-labs.com/app/platform/print.aspx 36/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.29 Screenshot of PLABDC01: Displaying right-clicking on Practicelabs.com and selecting Link an
Existing GPO.

Step 17
From the Select GPO window, select Folder Redirection and click OK.

Close the Group Policy Management window.

https://www.practice-labs.com/app/platform/print.aspx 37/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.30 Screenshot of PLABDC01: Displaying the Select GPO window with Folder Redirection selected
and the OK button highlighted.

Task 3 - Setup a Home Folder for Testuser

The Home folder is created for each user upon the creation of their account. It
will contain user-created files and have the following folders created for the user:
3D Objects, Contacts, Desktop, Documents, Downloads, Favorites, Links, Music,
OneDrive, Pictures, Saved Games, Searches, and Videos. It is also an assignable
folder which means that administrators can create this folder on a Server and
link to the user profile. Hence, when users log in throughout the domain, they will
have a consistent experience across different computers.

In this task, you will setup a Home folder for the testuser.

Step 1
Ensure you are connected to PLABDC01.

Minimize all open windows so that you can view the Desktop.

Click the File Explorer icon on the Taskbar.

https://www.practice-labs.com/app/platform/print.aspx 38/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.31 Screenshot of PLABDC01: Displaying opening File Explorer from the Taskbar.

Step 2
In the File Explorer window, select Local Disk (C:) on the left pane.

Right-click anywhere on the details pane and select New > Folder.

https://www.practice-labs.com/app/platform/print.aspx 39/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.32 Screenshot of PLABDC01: Displaying right-clicking on the details pane and selecting New >
Folder on the File Explorer window.

Step 3
Right-click on the New folder and select Rename.

Rename the folder to:

Home folder testuser

https://www.practice-labs.com/app/platform/print.aspx 40/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.33 Screenshot of PLABDC01: Displaying renaming the new folder on the File Explorer window.

Step 4
Right-click on the Home folder testuser folder and select Properties.

https://www.practice-labs.com/app/platform/print.aspx 41/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.34 Screenshot of PLABDC01: Displaying right-clicking on the Home folder testuser folder and
selecting Properties.

Step 5
On the Home folder testuser Properties dialog box, select the Sharing tab.

https://www.practice-labs.com/app/platform/print.aspx 42/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.35 Screenshot of PLABDC01: Displaying the Home folder testuser Properties dialog box with the
Sharing tab highlighted.

Step 6
From the Sharing tab, click Advanced Sharing…

https://www.practice-labs.com/app/platform/print.aspx 43/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.36 Screenshot of PLABDC01: Displaying selecting Advanced Sharing in the Home folder testuser
Properties - Sharing tab.

Step 7
In the Advanced Sharing dialog box, enable the Share this folder checkbox.

https://www.practice-labs.com/app/platform/print.aspx 44/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.37 Screenshot of PLABDC01: Displaying the Advanced Sharing dialog box with the required
setting performed and the OK button selected.

Step 8
Select Permissions in the Advanced Sharing dialog box.

https://www.practice-labs.com/app/platform/print.aspx 45/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.38 Screenshot of PLABDC01: Displaying selecting Permissions in the Advanced Sharing dialog
box.

Step 9
Click Add in the Permissions for Home folder test user dialog box.

https://www.practice-labs.com/app/platform/print.aspx 46/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.39 Screenshot of PLABDC01: Displaying selecting Add in the Permissions for Home folder test
user dialog box.

Step 10
On the Select Users, Computers, Service Accounts, or Groups dialog box, enter
the following in the Enter the object to select section and click Check Names.

testuser

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 47/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.40 Screenshot of PLABDC01: Displaying the Select Users, Computers, Service Accounts, or Groups
dialog box with the OK button highlighted.

Step 11
On the Permissions for Home folder test user window, ensure testuser is
selected and enable the Full Control checkbox.

Click OK

https://www.practice-labs.com/app/platform/print.aspx 48/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.41 Screenshot of PLABDC01: Displaying the Permissions for Home folder test user window with
the required settings performed and the OK button highlighted.

Step 12
Click OK on the Advanced Sharing dialog box.

https://www.practice-labs.com/app/platform/print.aspx 49/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.42 Screenshot of PLABDC01: Displaying selecting OK on the Advanced Sharing dialog box.

Step 13
In the Home folder testuser Properties window, notice the folder is now shared.

Highlight the Network Path and right-click on it.

Select Copy.

https://www.practice-labs.com/app/platform/print.aspx 50/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.43 Screenshot of PLABDC01: Displaying the Home folder testuser Properties window with the
Network Path right-clicked and Copy selected.

Step 14
Click Close on the Home Folder testuser Properties window.

https://www.practice-labs.com/app/platform/print.aspx 51/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.44 Screenshot of PLABDC01: Displaying closing the Home Folder testuser Properties window.

Step 15
Restore the Active Directory Users and Computers window from the Taskbar.

Right click testuser and select Properties.

https://www.practice-labs.com/app/platform/print.aspx 52/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.45 Screenshot of PLABDC01: Displaying right-clicking on testuser and selecting Properties on the
Active Directory Users and Computers window

Step 16
In the testuser Properties dialog box, select the Profile tab.

In the Home folder section, next to the Connect field, right-click and Paste the
path copied earlier.

https://www.practice-labs.com/app/platform/print.aspx 53/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.46 Screenshot of PLABDC01: Displaying the testuser Properties dialog box with the required
settings performed and the OK button highlighted.

Step 17
Click OK on the Active Directory Domain Services pop-up window.

https://www.practice-labs.com/app/platform/print.aspx 54/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.47 Screenshot of PLABDC01: Displaying selecting OK on the Active Directory Domain Services
pop-up window.

Step 18
Close the Active Directory User and Computers window.

Close the File Explorer window.

https://www.practice-labs.com/app/platform/print.aspx 55/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.48 Screenshot of PLABDC01: Displaying the Active Directory Users and Computer window with
the Close icon on the top right corner selected.

Task 4 - Test the Home Folder for Testuser

In this task, you will test the home folder that was created in the previous task.

Step 1
For this step, you will need to disable the Auto login feature. Click on the
Settings icon and then untick the Automatically login tick-box.

Note: Please see our help and support page for more information on how to
do this.

https://www.practice-labs.com/app/platform/print.aspx 56/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.49 Screenshot of Practice Labs application interface: Server auto login option on the Device
section of the Settings pane on the left is switched off.

Step 2
Connect to PLABWIN10.

Sign-in as: PRACTICELABS\Administrator.

Type the following for the Password field:

Passw0rd

https://www.practice-labs.com/app/platform/print.aspx 57/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.50 Screenshot of PLABWIN10: Server auto login option on the Device section of the Settings
pane on the left is switched off.

Step 3
From the Taskbar open File Explorer.

https://www.practice-labs.com/app/platform/print.aspx 58/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.51 Screenshot of PLABWIN10: Displaying opening File Explorer from the Taskbar.

Step 4
In the File Explorer window, right-click This PC and select Properties

https://www.practice-labs.com/app/platform/print.aspx 59/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.52 Screenshot of PLABWIN10: Displaying right-clicking This PC and selecting Properties on the
File Explorer window.

Step 5
In the Settings - About pane, scroll down and select Advanced system settings.

https://www.practice-labs.com/app/platform/print.aspx 60/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.53 Screenshot of PLABWIN10: Displaying selecting Advanced system settings on the Settings -
About pane.

Step 6
In the System Properties dialog box, select the Remote tab.

https://www.practice-labs.com/app/platform/print.aspx 61/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.54 Screenshot of PLABWIN10: Displaying the System Properties dialog box with the Remote tab
highlighted.

Step 7
In the Remote tab, click Select Users…

https://www.practice-labs.com/app/platform/print.aspx 62/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.55 Screenshot of PLABWIN10: Displaying the System Properties - Remote tab with Select Users
highlighted.

Step 8
Click Add on the Remote Desktop Users dialog box.

https://www.practice-labs.com/app/platform/print.aspx 63/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.56 Screenshot of PLABWIN10: Displaying selecting Add on the Remote Desktop Users dialog box.

Step 9
In the Select Users or Groups dialog box, type the following for the Enter
object names to select field and click Check names:

testuser

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 64/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.57 Screenshot of PLABWIN10: Displaying the Select Users or Groups dialog box with the required
settings performed and the OK button highlighted.

Step 10
Click OK on the Remote Desktop Users window.

https://www.practice-labs.com/app/platform/print.aspx 65/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.58 Screenshot of PLABWIN10: Displaying selecting OK on the Remote Desktop Users window.

Step 11
Click OK on the System Properties window.

https://www.practice-labs.com/app/platform/print.aspx 66/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.59 Screenshot of PLABWIN10: Displaying selecting OK on the System Properties window.

Step 12
Right-click on the Start charm and select Sign-out.

https://www.practice-labs.com/app/platform/print.aspx 67/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.60 Screenshot of PLABWIN10: Displaying right-clicking on the Start charm and selecting Sign-
out.

Step 13
Reconnect to PLABWIN10 after a minute.

On the user sign-in screen, click Other user.

https://www.practice-labs.com/app/platform/print.aspx 68/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.61 Screenshot of PLABWIN10: Displaying the login screen with Other user selected.

Step 14
In the User name text box, type:

testuser

In the Password text box, type:

Passw0rd

Press Enter.

https://www.practice-labs.com/app/platform/print.aspx 69/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.62 Screenshot of PLABWIN10: Displaying the Other user login screen with the required
credentials typed in.

Step 15
Click Install on the Application Install - Security Warning pop-up window.

https://www.practice-labs.com/app/platform/print.aspx 70/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.63 Screenshot of PLABWIN10: Displaying selecting Install on the Application Install - Security
Warning pop-up window.

Step 16
Click Agree on the BGInfo License Agreement pop-up window.

https://www.practice-labs.com/app/platform/print.aspx 71/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.64 Screenshot of PLABWIN10: Displaying selecting Agree on the BGInfo License Agreement pop-
up window.

Step 17
Open File Explorer from the Taskbar.

https://www.practice-labs.com/app/platform/print.aspx 72/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.65 Screenshot of PLABWIN10: Displaying opening File Explorer from the Taskbar.

Step 18
Expand This PC in the left pane.

https://www.practice-labs.com/app/platform/print.aspx 73/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.66 Screenshot of PLABWIN10: Displaying expanding This PC in File Explorer.

Step 19
On the left pane, the Home folder testuser is now automatically mapped as a
drive in File Explorer.

Close the File Explorer window.

https://www.practice-labs.com/app/platform/print.aspx 74/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 3.67 Screenshot of PLABWIN10: Displaying closing the File Explorer window.

https://www.practice-labs.com/app/platform/print.aspx 75/130
12/10/24, 5:21 PM Practice Labs | Print

Exercise 4 - Active Directory Logon Scripts

Logon scripts can be used for several purposes, such as including the mapping
of network drives to users and computers, installing applications, setting up
printers, creating log files, and many other tasks. Once the script is written, it will
need to be saved in a batch file.

In this exercise, you will make a batch file name XShare.bat. Once the user signs
in, any logon scripts will be executed. You will also create a shared folder using
Group Policy Editor and link it to the Administrator account. You will then use
Windows PowerShell to force an update of the group policy.

Learning Outcomes
After completing this exercise, you should be able to:

Create a Shared Folder

Create a Batch File
Create a GPO Object and Attach a Group Policy
Update the Group Policy

Your Devices
You will be using the following devices in this lab. Please power these on now.

PLABDC01 - (Windows Server 2019 - Domain Controller)

PLABWIN10 - (Windows 10 - Domain Member Workstation)

Task 1 - Create a Shared Folder

Shared folders are folders that can be used throughout the network by users that
have the proper permissions. Documents can be placed in these folders, which
can then be accessed and collaborated by others.

In this task, you will create a shared folder.

Step 1
Connect to PLABDC01.

Sign in as PRACTICELABS\Administrator using the Password:

Passw0rd

https://www.practice-labs.com/app/platform/print.aspx 76/130
12/10/24, 5:21 PM Practice Labs | Print

Once logged in,

Click on the File Explorer icon on the Taskbar.

Figure 4.1 Screenshot of PLABDC01: Displaying opening File Explorer from the Taskbar.

Step 2
On the File Explorer window, select Local Disk (C:) under This PC.

Right-click anywhere on the right details pane and select New > Folder.

https://www.practice-labs.com/app/platform/print.aspx 77/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.2 Screenshot of PLABDC01: Displaying right-clicking on the details pane and selecting New >
Folder on the File Explorer window.

Step 3
Right-click on the New folder and select Rename.

Rename the folder to:

Share

Right-click on Share and select Properties.

https://www.practice-labs.com/app/platform/print.aspx 78/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.3 Screenshot of PLABDC01: Displaying right-clicking on the Share folder and selecting Properties
in the File Explorer window.

Step 4
In the Share Properties dialog box, select the Sharing tab.

https://www.practice-labs.com/app/platform/print.aspx 79/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.4 Screenshot of PLABDC01: Displaying the Share Properties dialog box with the Sharing tab
selected.

Step 5
From the Sharing tab, select Advanced Sharing.

https://www.practice-labs.com/app/platform/print.aspx 80/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.5 Screenshot of PLABDC01: Displaying selecting Advanced Sharing in the Share Properties -
Sharing tab.

Step 6
In the Advanced Sharing dialog box, enable the Share this folder checkbox.

https://www.practice-labs.com/app/platform/print.aspx 81/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.6 Screenshot of PLABDC01: Displaying the Advanced Sharing dialog box with the required
settings performed and the OK button selected.

Step 7
Click Permissions on the Advanced Sharing dialog box.

https://www.practice-labs.com/app/platform/print.aspx 82/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.7 Screenshot of PLABDC01: Displaying selecting Permissions on the Advanced Sharing dialog
box.

Step 8
On the Permission for Share dialog box, click Add.

https://www.practice-labs.com/app/platform/print.aspx 83/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.8 Screenshot of PLABDC01: Displaying selecting Add on the Permission for Share dialog box.

Step 9
In the Select Users, Contacts, Computers, Service Accounts, or Groups dialog
box, type the following for the Enter the object names to select field, and click
Check names:

testuser

Click OK

https://www.practice-labs.com/app/platform/print.aspx 84/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.9 Screenshot of PLABDC01: Displaying the Select Users, Contacts, Computers, Service Accounts,
or Groups dialog box with the required settings performed and the OK button highlighted.

Step 10
From the Permissions for Share dialog box, ensure testuser is selected.

Enable the Full Control checkbox, and click OK.

https://www.practice-labs.com/app/platform/print.aspx 85/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.10 Screenshot of PLABDC01: Displaying the Permissions for Share dialog box with the OK button
selected.

Step 11
Click OK on the Advanced Sharing window.

https://www.practice-labs.com/app/platform/print.aspx 86/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.11 Screenshot of PLABDC01: Displaying clicking OK on the Advanced Sharing window.

Step 12
On the Share Properties dialog box, notice the share is now created.

Click Close.

Keep the File Explorer window open.

https://www.practice-labs.com/app/platform/print.aspx 87/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.12 Screenshot of PLABDC01: Displaying the Share Properties dialog box.

Task 2 - Create a Batch File

A batch file is a file that is used to automate a process. The instructions will be
sequentially written in a shell script and run with administrative privileges. Some
common uses for batch files include backing up files, process logs, diagnostics,
and other common administrative time-consuming tasks. To create a batch file,
a text editor will be accessed, and a script will be written. After writing the script,
it will be saved in batch file format.

In this task, you will save a batch file name XShare.bat that will share a folder as
a drive on the network.

Step 1
Ensure you are connected to PLABDC01, and the File Explorer window is open.

Right-click anywhere on the right details pane and select New > Text Document.

https://www.practice-labs.com/app/platform/print.aspx 88/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.13 Screenshot of PLABDC01: Displaying right-clicking on the details pane and selecting New >
Text Document on the File Explorer window.

Step 2
Double-click the New Text Document.

https://www.practice-labs.com/app/platform/print.aspx 89/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.14 Screenshot of PLABDC01: Displaying selecting the New Text Document on the File Explorer
window.

Step 3
In the New Text Document - Notepad window, type the following:

net use x: \\PLABDC01\Share

https://www.practice-labs.com/app/platform/print.aspx 90/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.15 Screenshot of PLABDC01: Displaying the New Text Document - Notepad window with the
required text typed in.

Step 4
Click the File menu and select Save as.

https://www.practice-labs.com/app/platform/print.aspx 91/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.16 Screenshot of PLABDC01: Displaying the New Text Document - Notepad window with the File
menu accessed and Save As selected.

Step 5
From the Save As dialog box, ensure Desktop is selected on the left pane.

Type the following for the File name:

XShare.bat

Click Save.

https://www.practice-labs.com/app/platform/print.aspx 92/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.17 Screenshot of PLABDC01: Displaying the Save As dialog box with the required File name typed
in and the Save button selected.

Step 6
Close Notepad and minimize File Explorer.

The XShare batch file has now been created on the Desktop. It has an icon with
gear wheels appended to it.

Right-click on XShare and select Run as administrator.

https://www.practice-labs.com/app/platform/print.aspx 93/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.18 Screenshot of PLABDC01: Displaying right-clicking on the XShare batch file and selecting Run
as administrator.

Step 7
Back on the File Explorer window, select This PC on the left pane.

https://www.practice-labs.com/app/platform/print.aspx 94/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.19 Screenshot of PLABDC01: Displaying the File Explorer window with This PC selected.

Step 8
Notice the script has successfully created the Share (\\PLABDC01) under
Network locations.

https://www.practice-labs.com/app/platform/print.aspx 95/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.20 Screenshot of PLABDC01: Displaying a successfully created Share in the File Explorer window.

Step 9
Right-click on Share and select Disconnect.

The share will be disconnected and will disappear from view.

Keep the File Explorer window open.

https://www.practice-labs.com/app/platform/print.aspx 96/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.21 Screenshot of PLABDC01: Displaying right-clicking on Share and selecting Disconnect.

Task 3 - Create a GPO Object and Attach a Group

Policy
In this task, you will first create a Group Policy Object (GPO) and then attach a
group policy to it.

Step 1
Ensure you are connected to PLABDC01.

Restore the Server Manager window from the Taskbar.

https://www.practice-labs.com/app/platform/print.aspx 97/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.22 Screenshot of PLABDC01: Displaying opening Server Manager from the Taskbar.

Step 2
In the Server Manager window, click Tools and select Group Policy
Management.

https://www.practice-labs.com/app/platform/print.aspx 98/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.23 Screenshot of PLABDC01: Displaying the Server Manager Window. Tools menu is accessed,
and Group Policy Management is selected.

Step 3
In the Group Policy Management window, right-click on Group Policy Objects
and select New.

https://www.practice-labs.com/app/platform/print.aspx 99/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.24 Screenshot of PLABDC01: Displaying the Group Policy Management window with Group Policy
Objects right-clicked and New selected.

Step 4
From the New GPO pop-up window, type the following for the Name field:

XShare Logon Script GPO

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 100/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.25 Screenshot of PLABDC01: Displaying the New GPO pop-up window with the required Name
typed in and the OK button selected.

Step 5
Back on the Group Policy Management window, right-click on XShare Logon
Script GPO and select Edit.

https://www.practice-labs.com/app/platform/print.aspx 101/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.26 Screenshot of PLABDC01: Displaying right-clicking on XShare Logon Script GPO and selecting
Edit on the Group Policy Management window.

Step 6
On the Group Policy Management Editor window, expand User Configuration
> Policies > Windows Settings.

Select Scripts (Logon/Logoff).

https://www.practice-labs.com/app/platform/print.aspx 102/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.27 Screenshot of PLABDC01: Displaying the Group Policy Management Editor window with
Scripts (Logon/Logoff) selected on the left pane.

Step 7
On the Scripts (Logon/Logoff) pane, right-click Logon and select Properties.

https://www.practice-labs.com/app/platform/print.aspx 103/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.28 Screenshot of PLABDC01: Displaying right-clicking on Logon and selecting Properties in the
Group Policy Management Editor window.

Step 8
From the Logon Properties window, click Show Files.

https://www.practice-labs.com/app/platform/print.aspx 104/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.29 Screenshot of PLABDC01: Displaying selecting Show Files on the Logon Properties window.

Step 9
Notice that the Logon window is empty.

You will copy the file that was created on the Desktop.

Restore the File Explorer window from the Taskbar.

https://www.practice-labs.com/app/platform/print.aspx 105/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.30 Screenshot of PLABDC01: Displaying opening File Explorer from the Taskbar.

Step 10
In the File Explorer window, select Desktop on the left pane.

Right-click the XShare batch file on the details pane and select Copy.

https://www.practice-labs.com/app/platform/print.aspx 106/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.31 Screenshot of PLABDC01: Displaying right-clicking on XShare and selecting Copy on the File
Explorer window.

Step 11
Restore the Logon window from the Taskbar.

https://www.practice-labs.com/app/platform/print.aspx 107/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.32 Screenshot of PLABDC01: Displaying opening the Logon window from the Taskbar.

Step 12
In the Logon window, right-click anywhere on the details pane and select Paste.

https://www.practice-labs.com/app/platform/print.aspx 108/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.33 Screenshot of PLABDC01: Displaying right-clicking on the Logon window and selecting Paste.

Step 13
Close the Logon window.

https://www.practice-labs.com/app/platform/print.aspx 109/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.34 Screenshot of PLABDC01: Displaying closing the Logon window.

Step 14
Close the other File Explorer window.

https://www.practice-labs.com/app/platform/print.aspx 110/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.35 Screenshot of PLABDC01: Displaying closing the File Explorer window.

Step 15
Restore the Group Policy Management Editor window from the Taskbar.

In the Logon Properties window, click Add.

https://www.practice-labs.com/app/platform/print.aspx 111/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.36 Screenshot of PLABDC01: Displaying selecting Add in the Logon Properties window.

Step 16
From the Add a Script window, click Browse.

https://www.practice-labs.com/app/platform/print.aspx 112/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.37 Screenshot of PLABDC01: Displaying selecting Browse in the Add a Script window.

Step 17
In the Browse dialog box, select XShare and click Open.

https://www.practice-labs.com/app/platform/print.aspx 113/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.38 Screenshot of PLABDC01: Displaying the Browse window with XShare selected and the Open
button highlighted.

Step 18
The XShare.bat script is now added.

Click OK.

https://www.practice-labs.com/app/platform/print.aspx 114/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.39 Screenshot of PLABDC01: Displaying the Add a Script window with OK selected.

Step 19
In the Logon Properties window, you can see the XShare.bat file has been
added.

Click Apply and then click OK.

https://www.practice-labs.com/app/platform/print.aspx 115/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.40 Screenshot of PLABDC01: Displaying the Logon Properties window with the batch file added
and the OK button highlighted.

Step 20
Close the Group Policy Management Editor window.

https://www.practice-labs.com/app/platform/print.aspx 116/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.41 Screenshot of PLABDC01: Displaying closing the Group Policy Management Editor window.

Step 21
Back on the Group Policy Management window, expand Group Policy Objects
in the left pane and select XShare Logon Scripty GPO.

Under the Security Filtering section in the right pane, click Add

https://www.practice-labs.com/app/platform/print.aspx 117/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.42 Screenshot of PLABDC01: Displaying the Group Policy Management window with Add selected
in the XShare Logon Script GPO pane.

Step 22
In the Select User, Computer, or Group dialog box, type the following for the
Enter the object name to select field:

testuser

Click Check Names.

https://www.practice-labs.com/app/platform/print.aspx 118/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.43 Screenshot of PLABDC01: Displaying the Select User, Computer, or Group dialog box with the
required object name entered and the Check Names button selected.

Step 23
Click OK.

https://www.practice-labs.com/app/platform/print.aspx 119/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.44 Screenshot of PLABDC01: Displaying the Select User, Computer, or Group dialog box with the
OK button selected.

Step 24
Right-click on Practicelabs.com and select Link an Existing GPO…

https://www.practice-labs.com/app/platform/print.aspx 120/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.45 Screenshot of PLABDC01: Displaying right-clicking on Practicelabs.com and selecting Link an
Existing GPO on the Group Policy Management window.

Step 25
On the Select GPO window, select the XShare Logon Script GPO and click OK.

https://www.practice-labs.com/app/platform/print.aspx 121/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.46 Screenshot of PLABDC01: Displaying the Select GPO window with XShare Logon Script GPO
selected and the OK button highlighted.

Step 26
Minimize the Group Policy Management window.

https://www.practice-labs.com/app/platform/print.aspx 122/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.47 Screenshot of PLABDC01: Displaying minimizing the Group Policy Management window.

Task 4 - Update the Group Policy

When rules are created in the active directory, they do not take effect until the
next update is run. If an administrator wants to enact the rules immediately,
they can access the command line or Windows PowerShell and force the update
to occur immediately.

In this task, you will update the group policy from Windows PowerShell.

Step 1
Connect to PLABWIN10.

Sign in with the following credentials:

testuser

Passw0rd

https://www.practice-labs.com/app/platform/print.aspx 123/130
12/10/24, 5:21 PM Practice Labs | Print

Once logged in, right-click the Windows Start charm and select Windows
PowerShell (Admin).

Figure 4.48 Screenshot of PLABWIN10: Displaying right-clicking on the Windows Start charm and
selecting Windows PowerShell (Admin).

Step 2
In the Administrator: Windows PowerShell window, type the following
command if you want to review the different options available with the
gpupdate command:

gpupdate /?

Press Enter.

Next, type the following command:

gpupdate /force

https://www.practice-labs.com/app/platform/print.aspx 124/130
12/10/24, 5:21 PM Practice Labs | Print

Press Enter.

Figure 4.49 Screenshot of PLABWIN10: Displaying the Administrator: Windows PowerShell window with
the gpupdate commands entered.

Step 3
In the Administrator: Windows PowerShell window, type the following
command and press Enter:

gpresult /R

https://www.practice-labs.com/app/platform/print.aspx 125/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.50 Screenshot of PLABWIN10: Displaying the Administrator: Windows PowerShell window with
the gpresult command entered.

Note: The result from the command shows that the GPO has been
successfully applied to the user account.

Step 4
Open File Explorer from the Taskbar.

https://www.practice-labs.com/app/platform/print.aspx 126/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.51 Screenshot of PLABWIN10: Displaying opening File Explorer from the Taskbar.

Step 5
In the File Explorer window, notice the Share drive appears on the left pane.

Note: If the new file share does not appear in File Explorer, please restart
the PLABWIN10 device and verify that the file share is present.

Close the File Explorer window.

https://www.practice-labs.com/app/platform/print.aspx 127/130
12/10/24, 5:21 PM Practice Labs | Print

Figure 4.52 Screenshot of PLABWIN10: Displaying closing the File Explorer window.

Keep all devices that you have powered on in their current state and
proceed to the review section.

https://www.practice-labs.com/app/platform/print.aspx 128/130
12/10/24, 5:21 PM Practice Labs | Print

Review
Well done, you have completed the Authentication and Authorization Methods
Practice Lab.

Summary
You completed the following exercises:

Exercise 1 - Mobile Device Management (MDM)

Exercise 2 - Active Directory Structure
Exercise 3 - Security Groups Vs. Distribution Groups
Exercise 4 - Active Directory Logon Scripts

You should now be able to:

Set up a Security Group

Set GPO for the Security Group
Setup a Home Folder for Testuser
Test the Home Folder for Testuser
Create a Shared Folder
Create a Batch File
Create a GPO Object and Attach a Group Policy
Update the Group Policy

You should now have further knowledge of

Mobile Device Management (MDM)

Forest, Trees, & Domains
Organizational Units

Feedback
Shutdown all virtual machines used in this lab. Alternatively, you can log out
of the lab platform.

https://www.practice-labs.com/app/platform/print.aspx 129/130
12/10/24, 5:21 PM Practice Labs | Print

https://www.practice-labs.com/app/platform/print.aspx 130/130