lab 8 answer key - mywiley.infomywiley.info/uploadedfiles/ittnt1230/resources/answerslab8.pdflab 8...

LAB 8 ANSWER KEY CONFIGURING A

WINDOWS SERVER 2008

MACHINE

This lab contains the following exercises:

Exercise 8.1 Installing Active Directory

Exercise 8.2 Creating Users and Groups

Exercise 8.3 Joining a Windows 7 Machine to the Active Directory Domain

Estimated lab time: 90 minutes

Exercise 8.1 Installing Active Directory

Overview Contoso has outgrown their workgroup setup. You must now configure your

Windows Server 2008 machine to be an Active Directory domain controller.

In this exercise you will install the Active Directory Domain Services role and

the Active Directory Domain Services Installation Wizard.

Completion time 30 minutes

1. Turn on the Server## computer and log on using your Student## account and the password P@ssw0rd.

70-640 Windows Server 2008 Active Directory Configuration

2. When the Initial Configuration Tasks window appears, click Add Roles. The Add Roles Wizard appears, click Next.

Configuring a Windows Server 2008 Machine

3. On the Select Server Roles page select the Active Directory Domain Services role and click Next. The Active Directory Domain Services page appears, click Next.


4. On the Confirm Installation Selections page click Install. An installation Progress page appears.


5. Following the Installation Progress page, an Installation Results page appears. On the Installation Results page click Close.


6. Close the Initial Configuration Tasks window and the Server Manager window appears (if the

Server Manager window does not open, open it manually from the Administrative Tools menu).


7. In the Server Manager window click Roles and the Roles console will appear. In the Role summary pane click Active Directory Domain Services. The Active Directory Domain Services page appears.


8. On the Active Directory Domain Services page click Run the Active Directory Domain Services

Installation Wizard (dcpromo.exe). The Active Directory Domain Services Installation page appears.


9. On the Active Directory Domain Services Installation page select Use Advanced Mode Installation

and click Next.


10. On the Operating System Compatibility page, click Next.


11. On the Choose a Deployment Configuration page, select Create a new domain in a new forest and click Next.


Question

1

Why is this message displayed? What can you do to fix it?

Answer: The Local Administrator has a blank password.

12. Close all open windows and log off the Server and log in using the Administrator account. A

message is displayed stating that The User’s password must be changed before logging in for the first time, click OK. Enter P@ssw0rd into both boxes and click the arrow. You will get a message confirming your password has been changed.


Question

2

Why wasn’t this message displayed when you logged in with

your Student account?

Answer: The Student account was assigned a password during the

installation process.


13. Close the Initial Configuration Tasks window and the Server Manager window appears (if the Server Manager window does not open, open it manually from the Administrative Tools menu).

14. Repeat steps 7 – 12 to begin the creation of a new forest. 15. On the Name the Forest Root Domain page, key Domain##.Local and click Next.

16. On the Domain NetBIOS name page leave the default value, click Next.


17. On the Set the Forest Functional Level page, select Windows Server 2008, click Next.


18. On the Additional Domain Controller Options page, verify that the DNS server checkbox is selected and click Next.


*Note

If the following message box appears, even though you have

already sent a static address click Yes to continue.

19. A message box appears, warning you that the system cannot locate an existing DNS

infrastructure. Because you will be creating a new DNS infrastructure, you can ignore this warning and click Yes.


20. On the Location for Database, Log Files, and SYSVOL page, click Next to accept the default settings.

21. On the Directory Services Restore Mode Administrator Password page, key P@ssw0rd in the

Password and Confirm Password text boxes and click Next.


22. On the Summary page, click Next and Active Directory installation begins.


23. When the installation process is complete click Finish and restart the server.


24. Log on using your Administrator account and the password P@ssw0rd and open the Server

Manager console. Take a screen shot showing the Server Manager console showing that the

Domain##.Local is now your domain by pressing Alt+ Prt Scr, and then paste the resulting image

into the Lab08_worksheet file in the page provided by pressing Ctrl + V.

25. Leave the computer logged on for the next exercise.


Exercise 8.2 Creating Users and Groups

Overview Because Contoso Ltd. is now moving to a Client-Server architecture

instead of using workgroups, the user and group accounts created in Lab 4

must now be recreated on the server. In this exercise you will use the

Active Directory Users and Computers MMC to create users and groups on

your Windows Server 2008 machine. Group memberships are as follows:

Accounting – Director, shift supervisors, administrative

assistants

Bookkeeping – Director, bookkeepers, administrative

assistants

Admins – Director, bookkeepers, IT managers

Domain Admins – Director, shift supervisors, IT managers


1. Turn on the Server## computer and log on using your Administrator account and the password P@ssw0rd.

2. Click Start > Administrative Tools > Active Directory Users and Computers. The Active Directory Users and Computers console appears.

3. In the Active Directory Users and Computers console expand Domain##.Local


4. Select the Users container and a list of user and group accounts on the server appears.


5. Right click the Users container and select New > User. The New Object – User dialog box

appears. Create the following users.

Question

3

Could you use Password as the password for this user? Why

or why not?

Answer: No, the password Password does not meet Windows

complexity requirements.


Full Name Account

Name

Password Position Selected Check

Boxes

Jay Adams JAdams P@ssw0rd Shift Supervisor/IT

Manager

Pilar

Ackerman

PAckerman P@$$w0rd Bookkeeper User Must

Change Password

At Next Logon

Adam Barr ABarr P@$$w0rd Shift Supervisor (Day) User Must

Change Password

At Next Logon

Susan Metters SMetters P@$$w0rd Director User Must

Change Password

At Next Logon

Heidi Steen HSteen P@$$w0rd Shift Supervisor

(Night)

User Must

Change Password

At Next Logon

Tai Yee TYee P@$$w0rd Administrative

Assistant

User Must

Change Password

At Next Logon

6. Right click the Users container and select New > Group. The New Object – Group dialog box

appears. Create the following groups:


Group Name Group Type Group Scope

Accounting Security Global

Bookkeeping Security Global

Admins Security Global


Question

4

Why did you not have to manually create the Domain Admins

group?

Answer: It is created automatically during the installation of Active

Directory.

7. In the Users container right click the Jay Adams account and select Add to a group. The Select

Group dialog box appears.

8. In the Enter the object names to select text box, type Accounting; Admins; Domain Admins. Click

Check Names, and then Click OK. An Active Directory Domain Services dialog box appears stating

that The Add to Group operation was successfully completed, click OK.


9. Repeat steps 7 and 8 using the account information in the table and the membership

assignments at the beginning of this exercise to create the appropriate group memberships for

all of the users you created.

10. Take a screen shot showing the Active Directory Users and Computers console with all of the

users and groups added in this exercise by pressing Alt+ Prt Scr, and then paste the resulting

image into the Lab08_worksheet file in the page provided by pressing Ctrl + V.

11. Close all open windows and leave the computer logged on for the next exercise.

Exercise 8.3 Joining a Windows 7 Machine to the Active Directory Domain

Overview The client computers in the network must now be joined to the domain to

reap the full benefits of an Active Directory environment. In this exercise

you will join your Windows 7 machine to the Active Directory domain and

log in with one of the user accounts created in exercise 8.2



1. Turn on the Workstation## computer and log on using your Student## account and the

password P@ssw0rd.

2. Click Start and then click Control Panel. The Control Panel window appears.

3. Click Network and Internet > Network and Sharing Center. The Network and Sharing Center

control panel appears.


4. In the Network and Sharing Center control panel select Change Adapter Settings. The Network

Connections window appears.

5. Right-click the Local Area Connection icon and, from the context menu, select Properties. The

Local Area Connection Properties sheet appears.

6. Clear the Internet Protocol Version 6 (TCP/IPv6) checkbox.


7. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. The Internet Protocol Version

4 (TCP/IPv4) Properties sheet appears.


8. Select the Use the following IP address and the Use the following DNS server addresses radio

buttons and enter the following information:

• IP Address: 172.16.##.2 (Where ## is the number assigned by your instructor)

• Subnet Mask: 255.255.255.0

• Preferred DNS Server: 172.16.##.1


*Note

The IP addresses supplied in this setup document and in the lab manual are suggestions. You can use any IP addresses for the computers in your classroom, as long as all of the systems are located on the same subnet. If the classroom network is connected to a school network or the Internet, you can specify the address of the router providing the network connection in the Default Gateway field. Otherwise, leave it blank.

9. Click OK twice to close the two Properties sheets. Close the Network Connections window. 10. Right Click on Computer and Select Properties (you can also use Windows Key + Pause). The

Computers Property sheet appears.


11. Click the Change Settings Button. The System Properties Dialog Box appears.

12. Click Change. The Computer Name/Domain Name Changes Dialog Box appears.


13. In the Member of section of the Computer Name/Domain Name Changes Dialog Box select the

Domain radio button and enter Domain##.Local in the Domain text box.

Question

5

Could you have used your local Student## account to join the

Domain##.Local domain? Why or why not?

Answer: No the local Student## account does not have any authority

on the domain.


14. Click OK to accept the change. A Windows Security dialog box appears. Enter Administrator in

the username text box and P@ssw0rd in the password text box and click OK.

*Note

If you receive a DNS error at this step check the IP address configurations on both machines. If that does not resolve the issue change the VMWare Player network settings on both machines to Bridged.

15. A message appears welcoming you to the DomainXX.Local domain. Click OK.

16. You will be prompted to restart the machine Click OK. Click OK on the System Properties screen

and choose restart now.


17. When the computer has completed restarting, log on using your Administrator account and the password P@ssw0rd.


*Note

In order to log in you may have to click switch user and enter Domain##\Administrator as the username.

18. Right Click on Computer and Select Properties (you can also use Windows Key + Pause). The

Computers Property sheet appears.


19. Take a screen shot showing the Computer Properties window displaying that Workstation## is now a member of the Domain##.Local domain by pressing Alt+ Prt Scr, and then paste the resulting image into the Lab08_worksheet file in the page provided by pressing Ctrl + V.

20. Log off both machines.

lab 8 answer key - mywiley.infomywiley.info/uploadedfiles/ittnt1230/resources/answerslab8.pdflab 8...

Documents