IT1C: Windows Server and Active Directory Administration

Assignment Overview

In this project, students are required to build a functional Windows Server environment with multiple servers, Active Directory, DHCP, DNS, WDS, VPN, DFS, and other essential services. The assignment is divided into step-by-step tasks covering server configuration, network setup, domain management, and service deployment.

Assignment Tasks

1. Server Installation and Active Directory

• Install Server1 on a VM. Connect one NIC to an external network and another to a private network.

• Assign static IP to private NIC.

• Set up a new Active Directory domain in a new forest with the highest functional levels.

• Make Server1 a global catalog server.

2. DHCP and WDS Configuration

• Configure Server1 as a DHCP server to provide IP addresses to network clients.

• Set up Windows Deployment Services (WDS) to host installation images.

• Ensure WDS does not automatically join computers to the domain.

3. Deploy Server2

• Install Server2 using the WDS server.

• Configure its static IP and hostname.

• Join Server2 to the domain.

4. Advanced DHCP Configuration

• Modify the existing DHCP scope and give it a descriptive name.

• Set lease duration, default gateway, and DNS for clients.

• Add IP exclusions and reservations for specific devices and servers.

• Configure additional scopes for other network segments.

• Set server-wide options such as WINS and DHCP failover with Server2.

• Configure device-specific options for legacy clients and VoIP phones.

5. WINS Configuration

• Configure Server1 and Server2 as WINS servers in a push/pull relationship.

• Add static mappings for devices with fixed IPs.

• Ensure automatic NetBIOS name registration.

6. DNS Configuration

• Create a forward lookup zone for your domain.

• Add A, CNAME, and MX records for various servers.

• Configure reverse lookup zones and integrate DNS with WINS for fallback resolution.

• Forward queries for external domains to the appropriate servers.

7. Secondary DNS Setup

• Configure Server2 to host secondary copies of your primary DNS zones.

• Test zone replication and query functionality.

• Enable round-robin load balancing.

8. Active Directory Integration

• Convert DNS zones to Active Directory-integrated.

• Restrict updates to secure dynamic updates only.

9. VPN Configuration

• Configure Server1 as a VPN server.

• Assign VPN clients to the appropriate network.

• Enable RADIUS authentication with logging and idle session disconnection policies.

• Test VPN connectivity and split tunneling from Server2.

10. DFS Namespace and Shared Folders

• Create a domain-based DFS namespace called Warehouse.

• Add multiple shared folders across servers.

• Enable DFS replication for shared folders across servers.

11. Organizational Unit Structure

• Create OUs for various departments.

• Implement nested groups for role-based permissions.

12. User and Group Management

• Create local and domain groups to manage resource permissions.

• Assign users to appropriate groups for access control.

• Create user accounts in the respective OUs.

13. Workstation Accounts

• Develop a naming convention for workstations.

• Pre-stage computer accounts for general and departmental workstations.

14. Group Policy Configuration

• Create a GPO for a department OU (e.g., Mfg).

• Configure security, access restrictions, services, logs, desktop redirection, and software deployment.

• Test GPO application and scope filtering.

15. Conditional Forwarders and Trusts

• Configure DNS conditional forwarders for external domains.

• Establish a two-way transitive realm trust.

16. Sites and Replication

• Configure multiple AD sites corresponding to physical locations.

• Ensure the DC account is assigned to the closest site.

• Configure intersite replication intervals.

17. Certification Authority

• Configure Server1 as a CA.

• Enable auto-enrollment for users and computers.

• Test certificate issuance and export the list of issued certificates.

18. iSCSI Storage Configuration

• Configure Server1 as an iSCSI SAN.

• Share a virtual disk with Server2.

• Format with NTFS, enable deduplication, and verify access.

19. Performance Baseline

• Take performance baseline screenshots for Server1 and Server2.

20. WSUS Configuration

• Set up Server1 as a WSUS server.

• Download the Windows Update catalog without deploying updates.

21. PowerShell Automation

• Modify and execute the provided PowerShell script.

• Generate output files and compress the project folder for submission.

BONUS Tasks

• Install and configure additional servers with IIS containers or Failover Clustering.

• Verify functionality with screenshots.

Submission Requirements

• Complete all tasks as per instructions.

• Include screenshots for verification where specified.

• Compress the project folder for submission.

• Ensure proper naming conventions and documentation.

Assessment Requirements – Summary

The primary goal of this assignment is for students to design, configure, and manage a Windows Server 2022 environment covering multiple aspects of server administration. Key requirements include:

• Server setup: Installation of multiple servers (Server1 and Server2), configuration of Active Directory, domain services, and static IP addresses.

• Network services: Configure DHCP, WDS, WINS, DNS, VPN, and DFS to enable a functional network environment.

• User and group management: Create Organizational Units (OUs), nested groups, and assign users to manage permissions effectively.

• Group Policy Management: Apply security policies, software deployment, and folder redirection via GPOs.

• Advanced configurations: Setup of iSCSI storage, Certification Authority (CA), WSUS, and performance monitoring.

• Automation: Execute PowerShell scripts for automated configuration and output generation.

• Bonus tasks: Optional implementation of IIS containers and Failover Clustering for advanced skills.

• Documentation & submission: Include screenshots, compressed project folder, proper naming conventions, and verification of tasks.

The assessment is designed to test practical Windows Server skills, networking knowledge, security implementation, and administration capabilities in a controlled environment.

Approach Taken by the Academic Mentor

The Academic mentor guided the student step by step, breaking down the complex assignment into manageable sections:

Step 1: Server Installation & AD Setup

• The mentor demonstrated how to install Server1, configure dual NICs, and assign static IPs.

• Guided the creation of a new domain in a new forest, ensuring Server1 acted as a global catalog.

Step 2: DHCP & WDS Configuration

• Students were shown how to set up DHCP scopes, exclusions, reservations, and server options.

• WDS installation and configuration were illustrated, including network boot setup for client deployment.

Step 3: Server2 Deployment

• Mentor explained how to install Server2 from WDS and join it to the existing domain.

• Static IP and hostname configuration were reviewed.

Step 4: Advanced Network Services

• DHCP customization for specific devices (VoIP phones, legacy clients) and failover configuration with Server2.

• WINS setup for name resolution in a push/pull replication model.

Step 5: DNS Setup

• Creating forward and reverse lookup zones, adding A, CNAME, MX records, integrating with WINS, and setting up secondary zones.

Step 6: Active Directory, VPN, and DFS

• DNS zones were converted to AD-integrated zones.

• VPN server configuration using RADIUS authentication and testing split tunneling.

• DFS namespace setup and shared folder replication across multiple servers.

Step 7: User, Group, and GPO Management

• OU creation and nested group management for access control.

• GPO application for security, software deployment, and folder redirection.

• Testing GPO scope filtering to ensure correct application.

Step 8: Advanced Features & Automation

• Certification Authority configuration with auto-enrollment.

• iSCSI storage setup and data deduplication.

• WSUS server setup and performance baseline capture.

• Execution of PowerShell scripts for automated configuration and file generation.

Step 9: Bonus Configuration

• Mentor showed optional IIS container deployment and Failover Cluster setup to extend learning outcomes.

Outcome Achieved

• Students successfully built a fully functional Windows Server environment, integrating multiple services and features.

• Screenshots and documentation verified proper implementation.

• Automation through PowerShell streamlined repetitive tasks.

• Optional advanced tasks were completed, demonstrating applied knowledge in containerization and clustering.

Learning Objectives Covered

1. Master server installation, virtualization, and network configuration.

2. Implement and manage Active Directory, DNS, DHCP, WDS, WINS, DFS, and VPN services.

3. Apply security and access control through OUs, groups, and GPOs.

4. Configure advanced services like iSCSI storage, CA, WSUS, and verify performance.

5. Understand scripting and automation using PowerShell.

6. Develop problem-solving skills in troubleshooting network and domain services.

7. Gain practical exposure to enterprise-level Windows Server management and best practices.

Access Expert Assignment Solutions Safely

Looking for guidance to complete your assignment? You can download our sample solution to see how professional academic work is structured and understand the concepts better. These samples are for reference only submitting them as your own work may lead to plagiarism issues and academic penalties.

If you want a fully original, plagiarism-free solution, our team of expert academic writers can create a custom assignment tailored to your requirements. Ordering a fresh solution ensures:

• 100% original content written specifically for your task.

• Accurate adherence to your assignment guidelines.

• Step-by-step explanations that make complex concepts easy to understand.

• On-time delivery with proper formatting and references.

Take control of your academic success with trusted, professional support that helps you learn while staying plagiarism-free.

Don’t risk your grades choose the solution that works for you!

[Download Sample Solution] [Order Fresh Assignment]