Lab: Implementing identity services and Group PolicyScenarioYou are working as an administrator at Contoso Ltd. The company is expanding its business with several new locations. The Active Directory Domain Services (AD DS) Administration team is currently evaluating methods available in Windows Server for a non-interactive, remote domain controller deployment. The team is also searching for a way to automate certain AD DS administrative tasks. Additionally, the team wants to establish configuration management based on Group Policy Objects (GPO). Show ObjectivesAfter completing this lab, you’ll be able to:
Estimated time: 45 minutesLab setupVirtual machines: AZ-800T00A-SEA-DC1, AZ-800T00A-ADM1, and AZ-800T00A-SEA-SVR1 must be running. Other VMs can be running, but they aren’t required for this lab.
Exercise 1: Deploying a new domain controller on Server CoreScenarioAs a part of business restructuring, Contoso wants to deploy new domain controllers in remote sites with minimal engagement of IT in remote locations. You need to use DC deployment to deploy new domain controllers. The main tasks for this exercise are as follows:
Task 1: Deploy AD DS on a new Windows Server Core server
Task 2: Prepare the AD DS installation and promote a remote server
Task 3: Manage objects in AD DS
ResultsAfter this exercise, you should have successfully created a new domain controller and managed objects in AD DS. Exercise 2: Configuring Group PolicyScenarioAs a part of Group Policy implementation, you want to import custom administrative templates for Office apps and configure settings. The main tasks for this exercise are as follows:
Task 1: Create and edit a GPO
Task 2: Link the GPO
Task 3: Review the effects of the GPO’s settings
Task 4: Create and link the required GPOs
Task 5: Verify the order of precedence
Task 6: Configure the scope of a GPO with security filtering
Task 7: Verify the application of settings
ResultsAfter this exercise, you should have successfully created and configured GPOs. |