Is416 Lab 1

LAB: Configure Active Directory and Implement Departmental and User Access Controls

D Hinsley

ITT Tech Online

IS416: Securing Windows Platforms and Applications

Todd Wolfe

Week 1: LAB

Due: 20140323

Week 1 Laboratory

Lab Part 1: Configure Active Directory and Implement Departmental and User Access Controls

Learning Objectives and Outcomes

Upon completing this hands-on lab, students will be able to complete the following tasks:

* Create Windows 2008 Standard Server R2 Active Directory system administration configurations for defined departmental workgroups and users

* Create Windows 2008 Standard Server R2 global domain departmental groups and user account definitions per defined access control requirements

* Configure Windows 2008 Standard Server R2 departmental group and user folders with unique access rights per the defined access control requirements

* Access a Windows 2008 Standard Server R2 as a user and encounter errors when attempting to create data files and write them to specific folders

* Create a list of new and modified access control parameters to implement stringent security access controls per the defined requirements using Windows 2008 Standard Server R2

Lab Part 1 – Access Controls Criteria Worksheet

Instructions

For the given access control requirements, specify what you need to implement to comply with the requirement.

Access Control Requirement | Access Control Implementation |

Prevent unauthorized users from logging onto another person’s user account with periodic password changes. | The Principle of Least PrivilegeCreate passwords to expire in a set period of time |

Allow Shop Floor users to read and write files in C:\ERPdocuments\SFfiles. | Grant read and write access to users in the Shop Floor group |

Allow Human Resources users to read and write files in C:\ERPdocuments\HRfiles. | Grant read and write access to users in the Human Resources group |

SFManager users to read and write...