NSAD6311-Network Server Administration Reflection Report - IT Computer Science Assignment Help

Assignment Task

Task

Portfolio of Evidence (PoE) — Background              

A portfolio of evidence (POE) is a collection of materials that illustrates a person’s skills and capabilities. Through a POE, students can recognise their own growth and learn new skills. Students can also show possible employers what their capabilities are.

The POE is the place (usually a file) where students collect together critical documents which they can use for one or both of the following purposes:

•  To demonstrate their competence by putting together evidence of what they did;  
•  To keep in one place some of the documents they may wish to show a potential employer as evidence of their learning.

In this module, you will be expected to complete POE tasks. Ensure that you keep both the hard copy and the soft copy of the completed POE. Use your creativity and be as innovative as possible in the creation of the final solution. Use the marking rubrics provided to guide you through the minimum
content that you are required to submit for evaluation.
This POE will require you to work consistently during the semester in order to achieve the best results.  

Scenario and Background 

You have been appointed as the new Enterprise Architect in a newly developed hospital in your area. The hospital has a number of wards. As part of the local hospital’s improvement plan, you have been tasked with a number of duties, among them to foster the development of the data, application and technology upgrade project.

You are also expected to oversee the planning, configuration, setup, deployment, testing and management of the network infrastructure for the local hospital. As part of your commitment to the upgrade project, you are requested to sign a formal service level agreement to ensure that you stick
to cost?effective best practices and standards.

The hospital has a file containing all its healthcare staff and among them, they are grouped as follows:

•  General Practitioners;
•  Professional Nurses;
•  Medical specialists;
•  Emergency care practitioners.

 

The IT administrator of the hospital, who is managing users’ accounts, has been mandated to create a user account for each staff. Staff is required to make use of the network?wide resources only for clinical purposes. Among these clinical tasks include, share patients' files, saving files and printing documents as required by line managers, as well as accessing hospital/wards computers for any practical works.

At the end of each year, each medical staff is required to submit a medical report using one of the computers in a specific dedicated location in the hospital. The dedicated location within the local hospital has four computer/lab rooms and staff are encouraged to use any computer/lab rooms for
the purpose.

Your line manager has informed you that a maximum of 20 medical staff can make use of the computers and write their final medical report at a time. The nature of the medical report requires staff to retrieve read?only patients read?only files from the local dedicated folder, work with thesefiles and save the modified files in a secure dedicated account home folder.

For security reasons, each medical staff is required to login with the staff account using a unique login name and password, giving them the ability to retrieve their medical report files uploaded in the medical report home folder created for the logged?on report account and save their completed
medical report files in the same folder. Only the logged?on medical report account has access to this folder.

Administratively, the medical report files are preloaded to each medical report home folder for each medical report account and only medical staff logged on with the medical report account is assigned full control permission on the medical report folder. As an Enterprise Architect, you are tasked to create these domain medical report accounts and their respective home medical report folders. You need to ensure that each medical staff is able to do the following:

•  Logon securely and retrieve only the medical files and resources they need for completing the medical report; and
•  Submit the files to their medical report home folders successfully.

One of your other tasks is to ensure that none of the domain users, other than the administrators, can access the medical report accounts and folders before, and immediately after, the medical report is submitted/saved. All the medical report files need to be removed from the medical report folders two hours after the duration stipulated for the medical report to be completed. The hospital consists of the head office located in the heart of Soweto Township and four mobile laboratories (mobile laboratory 1, mobile laboratory 2, mobile laboratory 3 and mobile laboratory 4) spread out in the township. Each mobile laboratory comprises electronic devices and support offices. All client computers run Windows 7 or the latest operating system, Microsoft Office 2013 package, Microsoft Project and Visio 2013

Below is a brief for the network connectivity and access for the medical:

•  A forest consisting of the domain is recommended for this network;
•  Trust relationships must be configured and must allow connectivity, communication, and access to resources;
•  Security is a concern and both technology and physical multi?factor security systems must be implemented. Only the administrators and authorised medical staff have access to the facilities and resources. Access level and assigning rights must follow best practices and be implemented based on selected policies. Users must have access to resources according to their roles and duties;

Users have access to electronic mail, Internet connection and secured wireless connection; Users may connect to network?attached printers located in labs and medical facilities based on access permissions.

 

The deployment and configuration infrastructure should meet the following specifications and requirements.

NB: Your lecturer will provide guidance on the detail of each configuration, e.g.:

•  Number of medical staff members and their designations;
•  Security, maintenance and update;
•  The number of computers per mobile  laboratory;
•  The number of medical report user accounts, user account folders and shared medical report folders.

 

1. The medical staff user accounts
One of the recommendations for the upgrade project is that apart from the medical staff user accounts, you create medical staff user accounts, groups, shares and network drives. You will need to configure these objects, including assigning permissions and delegating control.

 

For medical staff user accounts:

•  Must have the login name, display name, e?mail address, and a password that does not expire;
•  Must be linked to a student user account home directory (S :\) with full permission assignment;
•  Must belong to a global security group. The groups must be members of the main security universal group;
•  Must be given access to a public folder (e.g., P :\) which is fully accessible by all students.

You have been given the names of three IT support staff members. These three must be able to perform a selection of Enterprise Administrator’s administrative tasks on the system without the use of any administrators’ password.

 

2. Staff user accounts:

•  Must have the login name, display name, e?mail address and a password that does not expire;
•  Must be linked to a student user account home directory (S :\) with full permission assignment;
•  Must belong to a global security group. The groups must be members of the main security universal group;
•  Must be given access to a public folder (e.g., P :\) which is fully accessible by all students.

You have been given the names of three IT support staff members. These three must be able to perform a selection of Enterprise Administrator administrative tasks on the system without the use of any administrators’ password.

 

3. The Computers’ Accounts
There are a number of computer facilities including mobile laboratories for the local hospital. Each computer facility and mobile laboratory consists of a number of computers and other devices. One of your tasks is to organise computers and devices into their respective OUs in the Active Directory
(AD). Computers must be functional and joined to the domain while all other network devices are to be shared in the domain.

You have also been briefed about the following critical areas, namely, security, privilege settings, password and account lockout policy, as well as audit best practices that need to be redefined as indicated below:

 

a. Security
One of the recommendations is to minimise the surface of attack by configuring Restrictive Desktop settings and securing the network environment. This includes:

•  Access to Internet: Restrict access to Facebook, Twitter, Flash games, online dating websites, adult content material websites, downloading, installation of unlicensed software, internet options and FTP and peer?to?peer communication;
•  Restrictive desktop: Disable the configuration of the desktop, the taskbar, control panel features, and the use of the run dialogue box;
•  Disable the use of removable media.

 

b. Privilege setting

•  Deny logon locally;
•  Disabling debugging programs;
•  Disable loading and unloading of device drivers;
•  Disable to restore files and directories;   
•  Take ownership of files or other objects;   
•  Remote Access Authentication.

 

c. Password and account lockout policy

•  Set the password policy and lockout policy appropriately. Ensure that only the administrator can troubleshoot any locked?out accounts;
•  Use the fine?grained password policies to apply stricter settings to privileged accounts and less strict settings to the accounts belonging to normal users;
•  For User Account Control purposes, automatically deny all elevation requests for users and enforce credentials prompting for administrators.

 

d. Auditing

•  Develop a good audit policy, audit account logon events and logon events;
•  Ensure that the system is shut down immediately if unable to log security audits. Based on the scenario above, complete all the questions that follow in a virtualized environment.

Task-1

Activity Planning and deploying the installation of the server infrastructure.    

At this stage:

•  Install the server for the Head Office, keeping in mind that the domain administrative tasks will be centralised and dealt with at the Head Office;
•  Promote the server to the domain controller;
•  Configure an automated server installation that will be used for server deployment for each mobile laboratory;
•  Configure a server deployment infrastructure, taking into consideration forest and domain(s) that could be involved.

Requirements 

1. The file and storage services identified are sufficient and suitable for the network meeting all or most of the network needs.
2. The file and storage services identified above are adequately configured. 
3. The configuration above is functional and specific to the scenario and the needs of the network.
4. The forest, domain and/or sites were carefully considered in the implementation of
5. the file and storage services above.

 

Activity 
Designing and implementing network DHCP services.
At this stage:

• Install and configure the DHCP service applicable to the domain. Your IP address management solution must consider suitable DHCP possible filtering and management tasks for the network.

Activity Designing and implementing the network DNS services.    
At this stage:

•  Configure a secure name resolution applicable to the domain. Include the possible interoperability, replication and zone configuration tasks.
• In this section, you are required to write a reflection report on the learning experience. Once completed, a self?evaluation must be completed to reflect on your learning experience. Use the rubric provided.

 

This NSAD6311-IT Computer Science Assignment has been solved by our IT Computer Science Expert at My Uni Paper. Our Assignment Writing Experts are efficient to provide a fresh solution to this question. We are serving more than 10000+ Students in Australia, UK & US by helping them to score HD in their academics. Our Experts are well trained to follow all marking rubrics & referencing Style. Be it a used or new solution, the quality of the work submitted by our assignment experts remains unhampered. 

You may continue to expect the same or even better quality with the used and new assignment solution files respectively. There’s one thing to be noticed that you could choose one between the two and acquire an HD either way. You could choose a new assignment solution file to get yourself an exclusive, plagiarism (with free Turn tin file), expert quality assignment or order an old solution file that was considered worthy of the highest distinction.