Windows Server 2012 R2 System Administration

1. Log in as Administrator to the Domain Controller (SYS1). 2. Create a Shared folder (Ex: ifm) in C drive. 3. Go to Start, type cmd in Search Apps, and select Command Prompt 4. Type Ntdsutil 5. Type Activate instance ntds. 6. Type ifm. 7. Type create sysvol full C:\ifm 8. Verify for the snapshot generated successfully. Verification 1. Log in as Administrator to the Workgroup Computer(SYS2), Assign IP Address and Preferred DNS Server Address. 2. Access the shared folder (Ex: ifm) on Domain Controller and copy it to local hard disk drive (Ex: C drive). 3. Go to Server Manager Dashboard, Click Add roles and features. 4. In Before you begin page, click Next. 5. In Select installation type, select Role-based or feature-based installation, click Next. 6. In Select destination server, from Server Pool select SYS2, click Next. 7. In Roles, check the box Active Directory Domain Services. 8. Click Add Features, to install the required features for Active Directory Domain Servi...

1. Log in as Administrator to the Workgroup Computer(SYS2) 2. Assign IP Address and Preferred DNS Server Address. 3. Click Server Manager 4. In Server Manager Dashboard, Click Add roles and features. 5. In Before you begin page, click Next, In Select installation type, select Role-based or feature-based installation, click Next. 6. In Select destination server, from Server Pool select SYS2,click Next. 7. In Roles, check the box Active Directory Domain Services. 8. Click Add Features, to install the required features for Active Directory Domain Services.Click Next. 9. In Select features wizard, click Next. 10. In Active Directory Domain Services wizard, click Next. 11. Check the box Restart the destination server automatically if required. Click Install. 12. Click Promote this server to a domain controller. 13. In Deployment Configuration wizard, select Add a domain controller to an existing domain, enter the Domain (Ex: Microsoft.com) 14. Click Change, enter User Name: us...

1. Log in as Administrator to the Domain Controller (SYS1). 2. Verify Domain and Forest FunctionalLevels to Windows Server 2003 or later. 3. Go to Active Directory Users and Computers. 4. Create Users (Ex: User1, User2, User3, User4, User5). 5. Right click Domain Controllers, Select Pre-create Read-only Domain Controller account. 6. In Welcome Screen,click Next. 7. Select My current logged on credentials (MICROSOFT\Administrator) and clickNext. 8. Enter the Computer Name(SYS2) of Read Only Domain Controller. 9. Select the Site (GRW) for the Read-only Domain Controllers and click Next. 10. Verify the DNS,Global Catalog and Read-only Domain Controller (RODC) check boxes and click Next. 11. ClickSet. 12. Enter the User name (User1) and click OK and click Next. 13. Review the Summary, and click Next. 14. Click Finish. 15. Account of Read-only Domain Controller will be created in Domain Controllers. 16. To cache the user account password on RODC, Select the Users(User1, User...

1. Log on to DC as Administrator 2. Go to ActiveDirectorySitesandServicesExpand SitesExpand Inter-SiteTransportsRight clickIPselect New Site Link. 3. Enter the name (LHR-GRW Link), select LHR and GRW sites and click Addclick OK. 4. Right click LHR-GRW Link,select Properties. 5. ClickChangeSchedule. 6. Select the Interval of Time for ReplicationAvailable, clickOKOK.

1. Logon to DC as Administrator, go to Start, Active Directory Sites and Services. 2. Right click SitesNew Site. 3. Enter the site name (LHR) and select DEFAULTIPSITELINKand click OK. 4. Site LHR will be created, click OK. 5. Similarly create another site (GRW) 6. Expand Default-First-Site-Name Expand ServersRight click Server (SYS1)Move 7. Select the Site (LHR) and click OK. 8. Server is now moved under LHR site.

GLOBAL CATALOG, SITES, and READ ONLY DOMAIN CONTROLLER Pre-requisites: Before working on this lab, you must have 1. A computer running windows 2012 server Domain Controller. 2. A computer running windows 2012 server. Domain:MICROSOFT.COM SYS1 Domain Controller IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 Alternate DNS ---------- SYS2 Read Only Domain controller IP Address 10.0.0.2  Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.2 Alternate DNS 10.0.0.1 1. Go to Active Directory Sites and Services. 2. Expand the Sites Default-First-Site-NameServersServer Names NTDS Settings. 3. Right click NTDS Setting and Properties, If the checkbox Global Catalog is checked, then it is a Global Catalog Server.

TRUST RELATIONSHIP Pre-requisites: Before working on this lab, you must have 1. A computer running Windows Server 2012Domain Controller for MICROSOFT.COM. 2. A computer running Windows Server 2012 Domain Controller for IBM.COM. Domain:MICROSOFT.COM Domain:IBM.COM SYS1 Domain Controller-MICROSOFT.COM IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 Alternate DNS 10.0.0.2 SYS2 Domain Controller-IBM.COM IP Address 10.0.0.2 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.2 Alternate DNS 10.0.0.1 1. Go to Active Directory Domains and Trusts, 2. Right click the Domain name and select Properties. 3. Verify Domain and Forest functional level to be Windows Server 2012. 4. Select Trusts tab,Click New Trust. 5. On Welcome wizard, click Next. 6. In Trust Name,enter name of other ForestIBM.COM and click Next. 7. Select Forest trust and click Next 8. Select Two-way and click Next. 9. Select Both this domain and the specified domain and click Next. 10. Ent...

1. Go to DC, create a Shared Folder (Folder Redirection) with everyone Co-Owner. 2. Press Windows Key to go to Start, select Group Policy Management. 3. Right click OU (Sales)Select Create a GPO... 4. Enter name (Ex: Folder Redirection) and click OK. 5. Right Click created GPO, select Edit. 6. Expand User configuration PoliciesWindows SettingsFolder Redirection  Select Desktop Right click Desktop Select Properties 7. Select Basic Redirection, select Create a folder for each user under the root path, click Browseselect the shared folder from Network,\\SYS1\Folder Redirection, click Apply and OK. Verification: 1. Login as user (S1) in client system. 2. Create a folder on desktop, Right Clickon the folder properties and check the path, it should show Network path (\\SYS1\FolderRedirection\S1\Desktop).

1. Log on to D.C, create a Shared Folder UserScripts with Everyone as co-owner. 2. Go to Start, type Notepad in Search Apps, and select Notepad. 3. Enter the text wscript.echo “Welcome to Microsoft” 4. Save the file in the Shared folder UserScripts as Logon.vbe 5. Go to Group Policy Management Right click OU (Sales1) Create a GPO in this domain and Link it here and enter the name Script, click OK, Select the GPO Right Click and select Edit. 6. Expand User ConfigurationExpand PoliciesWindows SettingsScripts Logon Properties. 7. Click Add. 8. Enter the UNC path for the Script in the shared folder \\SYS1\Userscripts\logon.vbe and click OKApply and OK. Verification: 1. Go to Member Server and login as USER1 and verify for the Message.

1. Logon to DC as Administrator, Create a Shared folder with (.msi) applications in it 2. Go to Group Policy Management. 3. Right click OU (Sales1) Create a GPO in this domain and Link it here  Enter the name (Software Deployment) click OK, Right click the policy and click Edit. 4. User Configuration  Expand Policies Expand Software settings  Right click Software Installation  Select NewPackage 5. From the left pane, select Network, OpenSYS1 (Servercontaining shared folder). 6. Select the MSI Softwares Shared Folder click Open. 7. Select the Application Folder (PowerPointViewer)  click Open. 8. Select the Application (PPVIEWER) click Open. 9. Select the Method to Deploy Application (Published)and click OK. Verification: 1. Go to Member Server and login as user1. 2. Go to Control Panel, clickPrograms and Features. 3. Click Install a Program from the Network, Select the Application and Install

1. Go to Group Policy Management  Right ClickGroup Policy Modelingand Select Group Policy Modeling Wizard. 2. Click Next. 3. Select the domain name and click Next. 4. Select User and click Browse  enter the Username (S1)click OK and Next. 5. Select the site (Default-First-site-Name) and check skip to final page, click Next. 6. Click Next Finish. Verification: 1. Click Details on the summary page and verify the policies applied on the User.

1. Go to Start, Group Policy Management Right click Group Policy Objects Select New. 2. Enter New GPO Link name Ex: Remove Recycle Bin and click OK. 3. Select the Created GPO  Right Click Created GPO  Select Edit. 4. Select User Configuration  Policies  Administrative Templates  Desktop,select Remove RecycleBin icon from desktop. 5. Right click Remove Recycle Bin icon from desktop Properties,select Enabled  OK  Close. 6. Right click Sitesselect Show Sitescheck Default-First-Site-Nameclick OKRight Click Default-First-Site-Nameselect Link an Existing GPO…. 7. Select an existing GPO, (Remove Recycle Bin) click OK. Verification: 1. Login as a user to Client or MemberServer, and Verify for the changes.

1. Press Windows Key to go to Start, select Group Policy Management. 2. Right click Domain name (MICROSOFT.COM) and select Create a GPO in this domain and Link it here. 3. Enter New GPO Link name Ex: Remove Network Icon and click OK. 4. Select the Created GPO  Right Click Created GPO  Select Edit. 5. In the Group Policy Management editor window, Go to User ConfigurationPoliciesAdministrative Templates Desktop 6. Select a policy (Hide Network Icon on desktop) right side of the screen, Right Click and select Properties. 7. Select Enabled option and click Apply and OK Verification: 1. Login as User (S1) to Client or Member Server and Verify for the changes.

GROUP POLICIES Pre-requisites: Before working on this lab, you must have 1. A computer running windows 2012 server Domain Controller. 2. A computer running windows 2012 server or Windows 7. Domain: MICROSOFT.COM SYS1  Domain Controller IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 SYS2 Member Server / Client IP Address 10.0.0.2 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 1. Press Windows Key to go to Start, select Group Policy Management. 2. Right click OU (Sales) Create a GPO in this domain and Link it here. 3. Enter any name to GPO Link (Ex: Remove Computer Icon) and click OK. 4. Right Click created GPO Link  Edit 5. In Group Policy Management Editor Window, Go to User Configuration  Policies Administrative Templates Desktop. 6. Select a policy (Remove Computer icon on the Desktop) on right side of the screen, Right Click and select Properties. 7. Select Enabled option and click Apply and OK. Verification: 1. Logon to client sy...

1. Log on to Additional Domain Controller as Administrator 2. Shutdown the Domain Controller 3. Go to Start, type cmd in Search Apps, and select Command Prompt 4. TypeNet accounts and Verify for BACKUP in Computer role. 5. Type Ntdsutiland Press Enter. 6. Type Roles and Press Enter. 7. Type Connections and Press Enter. 8. Type Connect to server SYS1 (ADC System name) and Press Enter. 9. Type: Quit 10. Type Help(or)? To view the available syntax. 11. Type Seize infrastructure master and Press Enter. 12. Click YES. 13. Type Seize naming master and Press Enter. 14. Click YES 15. Type Seize PDC and Press Enter. 16. Click Yes 17. Type Seize RID Master and Press Enter. 18. Click YES 19. Type Seize Schema Master and Press Enter. 20. Click YES 21. Type Quit and press Enter 22. Type Quit and Press Enter. Verification: 1. Type Net accounts and Press Enter 2. Computer role of Additional Domain Controller will be converted to Primary.

ROLES OF ACTIVE DIRECTORY Pre-requisites: Before working on this lab, you must have 1. A computer running windows 2012 server Domain Controller. 2. A computer running windows 2012 server Additional Domain controller. Primary Domain:MICROSOFT.COM SYS1 Domain Controller IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 Alternate DNS ----------- SYS2 Additional Domain Controller IP Address 10.0.0.2 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.2 Alternate DNS 10.0.0.1 1. Log on to Domain Controller as Administrator 2. Go to Start,type cmd in Search Apps, and select Command Prompt 3. TypeNet accounts and Verify for Primary in Computer role. 4. Type Ntdsutil and Press Enter. 5. Type Roles and Press Enter. 6. Type Connections and Press Enter. 7. Type Connect to server SYS2 (ADC System name)and Press Enter. 8. Type: Quit 9. Type Help(or)? , to see the available syntax. 10. Type Transfer infrastructure master and Press Enter. 11. Click YES. 12...

CONFIGURING NEW DOMAIN TREE IN EXISTING FOREST Pre-requisites: Before working on this lab, you must have 1. A computer running windows 2012 server Domain Controller. 2. A computer running windows 2012 server. Primary Domain:MICROSOFT.COM Child Domain:MCTS.COM SYS1 Domain Controller IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 Alternate DNS ----------- SYS4 New Domain Tree IP Address 10.0.0.4 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.4 Alternate DNS 10.0.0.1 1. Log in as Administrator to the Workgroup Computer. 2. Assign IP Address and preferred DNS Server Address 3. Click Server Manager 4. In Server Manager Dashboard, Click Add roles and features. 5. In before you begin page, click Next, In Select installation type, select Role-based or feature-based installation, and click Next. 6. In Select destination server, from Server Pool select SYS4,click Next. 7. In Roles, check the box Active Directory Domain Services. 8. Click Add Features...

CONFIGURING CHILD DOMAIN Pre-requisites: Before working on this lab, you must have 1. A computer running windows 2012 server Domain Controller. 2. A computer running windows 2012 server. Primary\Root Domain: MICROSOFT.COM Child Domain:MCITP.MICROSOFT.COM SYS1 Domain Controller IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 Alternate DNS ---------- SYS3 Child Domain controller IP Address 10.0.0.3 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.3 Alternate DNS 10.0.0.1 1. Log in as Administrator to the Workgroup Computer. 2. Assign IP Address and preferred DNS Server Address 3. Click Server Manager 4. In Server Manager Dashboard, Click Add roles and features. 5. In Before you begin page, click Next, In Select installation type, select Role-based or feature-based installation, and click Next. 6. In Select destination server, from Server Pool select SYS2,click Next. 7. In Roles, check the box Active Directory Domain Services. 8. Click Add Featu...

LOGICAL STRUCTURE OF ACTIVE DIRECTORY CONFIGURING ADDITIONAL DOMAIN CONTROLLER Pre-requisites: Before working on this lab, you must have 1. A computer running windows 2012 server Domain Controller. 2. A computer running windows 2012 server. Domain: MICROSOFT.COM SYS1   Domain Controller IP Address 10.0.0.1 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.1 Alternate DNS ---------- SYS2  Additional Domain controller IP Address 10.0.0.2 Subnet Mask 255.0.0.0 Preferred DNS 10.0.0.2 Alternate DNS 10.0.0.1 1. Log in as Administrator to the Workgroup Computer. 2. Assign IP Address and preferred DNS Server Address 3. Click Server Manager 4. In Server Manager Dashboard, Click Add roles and features. 5. In Before you begin page, click Next, In Select installation type, select Role-based or feature-based installation, click Next. 6. In Select destination server, from Server Pool select SYS2,click Next. 7. In Roles, check the box Active Directory Domain Services. ...

1. In SYS1 (DC) open any Drive which is formatted with NTFS 2. Createa shared folder (Sales1) and give permission (Ex:Co-OwnerforEveryone). 3. Similarly create a shared folder (Sales2) on SYS2 and assign permission. 4. In SYS2 (Member Server) go to DFSManagement and Expand Namespaces 5. Right click on namespace name and Select New Folder 6. Enter the Name (Ex: Sales 1)and click Add. 7. Enter the path for folder target (\\Systemname\Sharefoldername)&click OK. 8. Similarly add another DFS Folder (Ex: Sales2) and folder target \\SYS2\Sales2. 9. Go to DFS Management, Expand Namespaces, and select \\Microsoft.com\Sales. VERIFICATION: 1. In SYS2 (Member Server),Go to Start, type Run in Search Apps, and select Run, type\\Domainname\Namespace Name (Ex: \\Microsoft.com\Sales) 2. It will display the contents (Folder) of Namespace.