Windows Servers R2 Active Directory LAB -Trevor Shi

Windows Servers R2 Active Directory LAB  -Trevor Shi  
VM machine

AD architecture



2012 R2 AD servers
1. Install DNS in AD/DNS server
Domain name greenland.com
2. Create AD in AD/DNS server
    Root domain name greenland.com
3. Create 2 organizational unit
    IT support/HR part
4. Creat 2 users in IT support and 2 users in the HR part
ITUSER1, ITUSER2, HRUSER1, HRUSER2
5. Install DHCP server


6. Install Windows backup servers, use backup once function to backup AD system state into Accounting sever ADBackup folder


Accounting Server
1. Add into Domain greenland.com
2. Use user account ITUSER2 log in Domain
3. Create a folder names Tools, then only can allow ITUSER1 to read it
  User domain controller account, HRUSER1, ITUSER1 account to test it
4. Create a folder names ADBackup to save AD windows image backup

ADRedundancy
1. Setting Up Additional Active Directory Domain Controller With Windows Server 2012 in ADRedundancy
2. Turn off AD/DNS servers, test the domain controller servers working condition.
3. Check the WinServerADRedundancy AD domain servers.

*Troubleshooting: Turn off AD/DNS servers, AD servers still work, but user computer couldn’t visit internet, cause DNS server stop working. In real production environment can install DNS into the other servers.
*Troubleshooting: at this Step, I enter in domain controller credentials as username: Administrator/password,
But the system informs me” You must supply a user account name”. I tried to use command deciding to troubleshooting. I know there is something wrong with Credentials,  
I tried to use ADRundancy’ username&password but still doesn’t work. After some research, I found the correct credentials should be greenland.com/username.




WEB server
1. Add into Domain greenland.com
2. Install ISS servers
3. Install WEB Application
4. Install database MySQL
5. Test from WEB server work status

USER
1. Add into Domain greenland.com
2. Use HRUSER1, HRUSER2 account to log in Domain


In-Addition:
use Group Policy to remotely install the software in Windows Server 2012
use Group Policy to Apply Patches and Updates in Windows Server 2012
Build the other domain to create domain forest
What will happen when I change the DC host computer name during the AD working








Comments

Post a Comment

Popular posts from this blog

To Be A CyberMan: Installing PfSense on a WatchGuard Firebox

Image
OX01 Preface My company recently upgraded its firewall to FortiGate Firewall.  They eliminated 3 of the licenses expired WatchGuard Firebox Firewalls. The WatchGuard FireBox models are XTM5 Series, M400, and M470. I was wondering if I can install the opensource Firewall application such as PfSense on FireBox to use as Testing Lab Environment. 0X02 Information      XTM5 Series comes with a 1GB CF card, free space is not enough for the lastest Pfsense,  need to add additional Hard Disk as PfSense system booting drive.     M400 comes with a 4 GB CF card, can use CF card as a PfSense system booting drive.     M470 comes with mSTAT SSD.  can SSD as a PfSense system booting drive. 0X03 Installing PfSense on M400 1. Preparation:           WatchGuard Firebox M400 Appliance          A USB Flash Drive          A CF Card USB reader          A co...
Read more

How I passed the CSX Fundamentals within one month

Image
  How I passed the CSX Fundamentals within one month Hi Guys, My name is Trevor Shi. I just passed the CSX within one month. I would like to share some experience maybe it will help you guys to prepare the exam. One of the funny things was, I used one month to learn it. But I spent the other one month to book the exam. I re-booked 5 times of exam as ISACA PSI online exam application has lots of issues.  I met every situation you can imagine. The first-time ISACA website down, the second-time they canceled my booked without excuse, the third-time application couldn't open, and the Fourth time was my fault, I just missed the exam. Finally, I got this certificate. We had a small group named CyberRookie, It just like an unorganized cyber knowledge self-studying group, we are trying to be more organized. So t he purpose of this article is as a guideline of the CyberRookie Project CSX certification learning method . A. The Cybersecurity Fundamentals Certific...
Read more

To Be A CyberMan: The 0365 email/ADFS Troubleshooting - Http status 500 error

Image
 To Be A CyberMan: The O365 email/ADFS Troubleshooting - Http status 500 error    0x00: Preview Knowlege ADFS: Active Directory Federation Services (ADFS) is a Microsoft Single Sign-On (SSO) solution. It provides users with authenticated access to applications that are not capable of using Integrated Windows Authentication (IWA) through Active Directory (AD).   Reference: https://docs.microsoft.com/en-us/windows-server/identity/active-directory-federation-services   0x01: Symptoms Some users reported they were not able to log into the email from Web console, the error shows: HTTP status 500:internal server error   0x02: Troubleshooting We tested some accounts email, The issue only affected some of the user's web-based Outlook applications. So we sent the email to our outlook service provider, got confirmation that the outlook service is working. From the error message, we can see the error is the internal serv...
Read more