Server Core and Remote Administrative Tools Lab - AidanP017/Aidan-SYS-255 GitHub Wiki

Summary

In this lab, we established and configured a Windows 2019 Server Core to behave like a file server and connected the new server (FS01) using Remote Server Administration Tools (RSAT).

How to Change the Hostname of FS01

To change the hostname of FS01, take the following steps:

  • Enter the command sconfig to be directed to the server configuration menu.
  • Enter the number 2 to edit the hostname.
  • Specify the new hostname and press Enter.

After rebooting, the server configuration menu should show the updated hostname.

How to Add an AD Domain Administrative User to FS01

To add an AD domain administrative user to FS01, take the following steps:

  • Make sure the network adapter settings for FS01 are set to LAN and not WAN.
  • In the server configuration menu, enter the number 1 to edit the domain/workgroup settings.
  • Type D for domain settings.
  • Enter the name of the domain to join.
  • Specify an authorized domain user and enter their password when prompted.

After rebooting, the server configuration menu should show that FS01 is now joined to the domain with an administrative user.

How to Edit the IP Address and DNS Settings in FS01

To edit the IP address and DNS settings in FS01, take the following steps:

  • In the server configuration menu, enter the number 8 to edit the network settings.
  • Enter 1 for the NIC Index.
    • You should see preloaded settings for the network adapter that includes an IP address, subnet mask, default gateway, DNS, and DHCP.
  • Enter 1 to set the network adapter address.
  • Enter S to set a static IP address.
  • Enter the desired IP address.
  • Enter the appropriate subnet mask.
  • Enter the appropriate default gateway.

To edit the DNS settings for FS01, take the following steps:

  • In the network adapter settings within the server configuration menu, enter the number 2 to edit the DNS servers.
  • Enter the appropriate DNS server.

Upon lookup, the network adapter settings should show the updated IP address and DNS settings.

How to Add File Service Tools and File Server Resource Manager Tools in AD02

To add file service tools and file server resource manager tools in AD02, take the following steps:

  • Open Server Manager.
  • Select Manage > Add Roles and Features
  • Navigate to the Features tab within the wizard.
  • Locate the following directory: Remote Server Administration Tools > Role Administration Tools > File Services Tools > File Server Resource Manager Tools.
    • Make sure each of the parts of the directory are checked off or selected.
  • Navigate to the Confirmation tab and install these services.

How to Add FS01 to All Servers on AD02

To add FS01 to all servers on AD02, take the following steps:

  • Open Server Manager.
  • Right-click on "All Servers" and select "Add Servers".
  • Type fs in the Name (CN) box and select "Find Now".
    • In the tab below, the FS01 workstation should appear.
  • Select the right arrow to the right of the tab and the FS01 workstation should show up.
  • Click OK.

If done successfully, the FS01 workstation should be visible in the All Servers tab.

How To Use RSAT to Add to FS01

To use RSAT to add to FS01, take the following steps:

  • In the Server Manager, right-click on FS01 and select "Add Roles and Features"
  • Navigate to the Server Roles tab.
  • Select the following directory: File and Storage Services > File and iSCSI Services > File Server Resource Manager.
    • Make sure these parts, as well as the File Server, are checked off or selected.
  • Confirm the elements and install them.
  • In FS01, run the following command to open the firewall for the File Server.
    • netsh advfirewall firewall set rule group="Remote File Server Resource Manager Management" new enable=yes
  • Back on AD02, navigate to the File and Storage Services > Servers tab on the left-hand side of the Manager.
  • Right-click on FS01 and select "File Server Resource Manager"

How to Create a New Share on FS01

To create a new share on FS01, take the following steps:

  • In the Server Manager, navigate to the File and Storage Services > Shares tab.
  • Right-click in the Shares box and select "New Share..."
  • In the File share profile box, select the "SMB Share - Quick" option.
  • Select FS01 as the share location, also making sure that "Select by volume" remains selected.
  • Name the share as desired.
  • Confirm the configurations and finish the wizard.

How to Map a Network Drive With a Group Policy

To map a network drive with a group policy, take the following steps:

  • Open Server Manager.
  • Navigate to Tools > Group Policy Management.
  • Within your domain, create a new GPO and name it "Users - Mapped Drives".
  • On the right side, right-click on the new GPO and select Edit.
  • Navigate to User Configuration > Preferences > Windows Settings > Drive Maps.
  • Right-click on Drive Maps and select "New > Mapped Drive".
  • Select "Create" from the Action box.
  • Specify the path to the share/folder in which you want to map a drive.
    • In this case, \FS01-aidan.aidan.local\Sales.
  • Select the appropriate drive letter.
  • Select "Show this drive" and "Show all drives" at the bottom of the properties.
  • Select Apply and OK.
  • In the "Common" properties for the new drive, select "Run in logged-on user's security context (user policy option)" and select "Item-level targeting".
  • Select the "Targeting..." button.
  • Select New Item > Security Group.
  • Select the group that you want to target.
  • Click OK to close the new drive properties.
  • Run the gpupdate /force command to update the group policy settings.
  • Reboot the computer in order to fully configure the new GPO.

After the system reboots, you should be able to see the new drive mapped to your group in File Explorer > This PC. You should also be able to see that the group policy has been applied by running the gpresult /r command.