Active Directory Lab

Documentation

Here are the tasks to accomplish in Active Directory:

Our first task is to add the hires into AD. The lab instructed me to do three of them. We had to set their full name, email, display name, and make sure that they change the password at next logon. I did two of them through the terminal and the other through the GUI.

Added!

Now we have to remove a couple users, Mike O’Hare and Paul Valencia.

Now, I have to unlock Adam Masters account because he can’t remember his password.

Next, we are tasked with creating a new Security Group called “Analysts” and adding our new hires into the group, under the IT hive. I was able to trace the OU and DC path through the “IT” hive’s properties.

We were able to successfully add the users to the group. Now, I have to duplicate a group policy “Logon Banner”, rename it, and modify it for the Analysts OU.

In order to enforce the GPO I have to link it, and then modify it. I’m tasked with modifying Password policy settings for users in the group, allowing them to access PowerShell and CMD. In terms of computer settings, I need to ensure Logon Banner is applied and that removable media is blocked from access. To edit this, it was suggested I hop into Group Policy Management rather than try and modify it from Powershell.

Done, now we have to add a computer to our domain and change the OU that it resides in.

The host we need to join the INLANEFREIGHT domain is named: ACADEMY-IAD-W10. We have the credentials to the host. To add the computer to the domain from the localhost GUI, I had to hop into the control panel and manually edit the domain

Done!