Lab 05 ADDS Group Policy Lab - Herrscherr0Z/SYS255 GitHub Wiki

Plan For Reset

My plan to prepare for the network reset is to go over and re do all the labs we have gone through and mimic what they have taught me. Essentially I want to re attempt everything on my own time, and memorize it. As I memorize the individual steps I plan on taking the labs and try to simplify them so it'd be easier for me to understand and undergo in week 4. It is a load of information which is why I think the best course of action would be to simplify the tasks would prove to be beneficial in remembering what I need to set up and complete. I plan on attempting to make a controlled environment with help of the professor if applicable and applying my plan from there.

Lab 05

In this lab we had to...

  • Create a OU in our domain
  • Create a group policy that enforces various options
  • Apply settings to the groups and computers in the newly created OU

The majority of the lab underwent in our domain controller, which we first had to open up our Active directory Users and computers (tool).

From there we needed to create our new OU (named SYS255) and add three OUs within it (being 'Accounts', 'Computers' and 'Groups'). We then had created three users, then we had to drag our wks01 from yourname.local\Computers OU to SYS255\Computers OU. Finally we then added a global security group within the 'Groups' OU called 'custom-desktop' with two of the users (use defaults).

Afterwords we went into Group Policy Management (tool) to define some User level settings. We went into the SYS255 OU and created a new group policy named sys255.

  • Step 1. Add the custom-desktop group created earlier to the Security Filter

  • Step 2. Remove Authenticated Users from the Security Filter.

  • Step 3, Add Domain Computers

  • Step 4. Delegation tab -> Advanced (Uncheck Apply Group Policy, Select Deny)

Once we have defined who this policy applies to, we are now ready to author what the group policy does.

Finally we Nuked the recycling bin and disabled last log in which can be viewed here: https://docs.google.com/document/d/15Vg-3cEpHwwuLpiZD3BKwcQkHRK7BHCoKKRe0Klo-Ew/edit