Securing Windows Platforms & Applications

Week 1 Laboratory

Lab Part 1: Configure Active Directory and Implement Departmental and User Access Controls

Learning Objectives and Outcomes

Upon completing this hands-on lab, students will be able to complete the following tasks:

* Create Windows 2008 Standard Server R2 Active Directory system administration configurations for defined departmental workgroups and users

* Create Windows 2008 Standard Server R2 global domain departmental groups and user account definitions per defined access control requirements

* Configure Windows 2008 Standard Server R2 departmental group and user folders with unique access rights per the defined access control requirements

* Access a Windows 2008 Standard Server R2 as a user and encounter errors when attempting to create data files and write them to specific folders

* Create a list of new and modified access control parameters to implement stringent security access controls per the defined requirements using Windows 2008 Standard Server R2

Lab Part 1 – Access Controls Criteria Worksheet

Instructions

For the given access control requirements, specify what you need to implement to comply with the requirement.

Access Control Requirement | Access Control Implementation |

Prevent unauthorized users from logging onto another person’s user account with periodic password changes. | By giving access to only those user who are authorized to have access within a particular group. Also, passwords will expire after a period of time and will no longer have access unless re-granted. |

Allow Shop Floor users to read and write files in C:\ ERPdocuments\SFfiles. | Grant access to the users within the shop floor department with read/write access |

Allow Human Resources users to read and write files in C:\ ERPdocuments\HRfiles. | Grant access to the users within the HR department with read/write access |

SFManager users to read and write files in C:\ ERPdocuments\MGRfiles and C:\ ERPdocuments\SFfiles. |...