NIT3122- Enterprise Network Management

NIT3122- Enterprise Network Management
1
Assignment – Network Design and Implementation

Due date: Refer to VU Collaborate Submission Drop Box Weighting: 30% of final grade

Scenario A
You are a network specialist for ActiveDirectoryxx.com (where xx is the number of your
assigned account student-xx to login to VSphere Client). You company have 4 servers running
window server 2012 (Root-DC, Com-A, Com-B and Com-C). You are given a subnet 50.50.xx.0
(the value of xx is the same as above), mask 255.255.255.0. You are required to design and
configure a network with active directory according to the following requirement:
Two server computers must act as active directory domain controller for the
ActiveDirectoryxx.com, to support the high volume of user for your company. Among them,
one should be configured as Read Only Domain Controller which does not allow modification of
the active directory database. The root Domain Controller is located in Melbourne. Your
company opens one branch in Sydney and takes the child domain name as
Syd.ActiveDirectoryxx.com. Another computer should be configured as a member computer of
the root domain.
Note: You can use the VMware provided in the Labs on campus or setting up your own VWware
on your PC for this assignment.
If you choose to use the Labs’ computers, before attempting the assignment tasks, you should
take a Snapshot of the VMware DC, SYD-A, SYD-B and SYD-Core for backup.
If you choose to use your own PC, you are responsible for installation and maintenance of your
own systems.
Task 1 (3 Marks): Computer Preparation
If you use your own PC:

  

Install fresh window server 2012 R2 on your VMware platform. Name computers as Root-DC, Com-A, Com-B and Com-C Use ipconfig /all command in Windows Powershell and take screenshots show the names of your computers have been configured properly.

If you use the VMware in computer labs:
NIT3122- Enterprise Network Management
2

   

Take snapshots of your VMware for backup. Remove all Active Directory Installation from all computers. Name computers as Root-DC, Com-A, Com-B and Com-C Use ipconfig /all command in Windows Powershell and take screenshots show the names of your computers have been configured properly, and computers are not in any domain.

Task 2 (3 Marks): Active Directory Design and Initial Setup



Design and draw the network topology based on the above requirement. Clearly label the server computer names, assigned IP addresses, assigned domains, and DNS IP addresses. Set up the computers IP address and DNS IP address according to the proposed design. Use commands ipconfig /all to verify the configurations and ping to verify connection between computers, take screenshots of the computer information and pings.

 

Task 3 (7 Marks): Active Directory Installation

 	Configure the active directory following the proposed design. Capture necessary screenshots to demonstrate the steps taken to configure the network, and provide some explanation for your steps. After completed the configuration, take screenshot of Computers and Domain Controllers folder in Active Directory User and Computers of the root domain


controller to verify the existing domain controllers and member computer in the
network.
Task 4 (17 Marks): Active Directory Management
A – Group Management: (4 marks)
 Create a security group named Melbourne_Group. Create a new group Managed Service
Account named Sydney. Configure the group Managed Service Account to be used by
computers that are members of the Melbourne_Group.
B – User Account Management: (4 marks)
NIT3122- Enterprise Network Management
3

	Create a new user named ADTest_User, and request user must change password at the first logon. Log on using a member computer to verify the setting is working. (Take screenshots of the account creation and log in process) Try to logon to the root domain controller using ADTest_User account. Why can’t you login?


Perform necessary configuration to enable ADTest_User to be able to login onto the root
domain controller.
C – Policies Applications: (4 marks)
 Use Group Policy preferences to automatically delete the contents of the c:WindowsTemp
folder each time user ADTest_User signs on to a computer. Create some text files in the Temp
folder, then log off and log in again using ADTest_User to verify the policy has been applied.
D – Software Restriction: (5 marks)

	Use a software restriction policy to block ADTest_User from opening iexplore.exe on any computer in the domain ActiveDirectoryxx.com. Log into a computer using ADTest_User and verify that ADTest_User cannot open iexplore.exe Log on to any computer using Administrator account and verify that iexplore.exe can be opened.
 

Assignment Specific Requirements
 You are required implement the active directory according to the tasks specified above.

	You will prepare a documentation that provides the network design and describes the steps taken and the screenshots of the system. The description of steps does not need to be as detailed as in the lab manual, but it should provide enough information for reader to understand what you did to achieve the desired outcome. Mark will be given to screenshot of the system and quality of the step description.



NIT3122- Enterprise Network Management
4
Submission Requirements
You are required to submit a word document containing Assignment Cover Sheet (provided on
VU Collaborate) with your name and student ID, together with the screenshot and step
description.
The content in the document may be compared with the actual implementation. Therefore, you
are required to maintain the system after completing and submitting your assignment. You may
be requested to present your implementation to verify your work.
Your assignment will be marked based on the functionality of the system after implementation
and the quality of your documentation.
Penalty of 5% will be applied for each day late.