Milestone 3.1 AD - absentee-neptune/SYS-480 GitHub Wiki

Windows Server Sysprep

Set-Up to Create

  • Open datastore2-super8 and select Datastore Browser
  • Making sure you are in the isos directory, select Upload to upload files
    • Navigate to \\foster-synology.cyber.local\480-SHARE\isos
    • Upload the .iso files for Windows Server
  • Close the Datastore Browser when finished

Creating the VM

  • Select the Virtual Machine tab on the side
  • Select Create/Register VM
    • Leave the default selection then press Next
    • Select a name and guest OS
      • Name the new VM server-2019-gui
      • Switch the Compatability to ESXi 6.5
      • Select Windows for the Guest OS family
      • Select Windows Server 2016 or later (64-bit) for the Guest OS version
      • Press Next
    • Select datastore2-super8 as the Storage, then press Next
    • Customize the Settings to match this:

      Make sure to change the Disk Provisioning for the Hard Disks to Thin Provisioning
      and Select Windows Server for the Datastore ISO file

    • Review the configurations then press Finish

System Prepping the VM

  • Start the VM
  • Go through the standard installation
  • When arrived at the Administrator Set-up, break out the virtual keyboard and press Ctrl, Shift, Fn, then F3 to skip it
  • When rebooted onto the desktop, open the command prompt and type sconfig
  • When in the sconfig terminal, do the following in order:
    • Change the timezone to Eastern Standard Time
    • Change the Update Settings to Manual
    • Download and Install ALL updates until there are no more
    • Install VMware Tools
  • Exit the Command Terminal and open Powershell
  • Create an Administrative user called deployer
    • $Password = Read-Host -AsSecureString
    • Enter a password
    • New-LocalUser "deployer" -Password $Password
    • Add-LocalGroupMember -Group "Administrators" -Member "deployer"
  • Enable Powershell for SSH
    • Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
    • Start-Service sshd
    • Set-Service -Name sshd -StartupType Automatic
    • Set-ItemProperty "HKLM:\Software\Microsoft\Powershell\1\ShellIds" -Name ConsolePrompting -Value $true
    • New-ItemProperty HKLM:\Software\OpenSSH -Name DefaultShell -Value "C:\Windows\System32\WindowsPowershell\v1.0\powershell.exe" -PropertyType string -Force
  • Then use the Disk Cleanup Tool to delete any temporary files that were created and create any spare space
  • Reboot the System
  • When rebooted to the desktop, generalize the disk and shutdown
  • Create a Snapshot of the System called Base

AD Configuration

Set-Up Server

  • Before starting the machine again, change the network adapter to 480-WAN

  • When powered on and gone through the initial user set-up, go to server manager and do the following:

    • Change the hostname to dc
    • Change the network settings to the following:
  • Then reboot the system

:bulb: The following installations and configurations can be done either through the GUI or command line

Install Active Directory and DHCP

  • When rebooted to the Server Manager, navigate to the upper right and press Manager, then Add Roles and Features
  • Install the Server Roles of ADDS and DHCP
    • Install any managing tools as well
  • Reboot the system when finished

Configure Active Directory

  • Promote the server to a Domain Controller with the domain name.local
  • Add a user to the AD through the Active Directory Users and Computers Manager
    • name-adm
    • Add the user in both Administrator and DHCP Administrator security groups
  • Configure DNS
    • Navigate to the DNS Manager
    • Under the Reverse Lookup Zone folder in the domain, add a new zone
      • Network ID: 10.0.17.x
    • Add DNS A and PTR entries for the following:
      • xubuntu-wan: 10.0.17.100
      • 480-fw8: 10.0.17.2
      • vcenter: 10.0.17.3
      • A and PTR entries should already be there for dc (host) but just double check

Configure DHCP

  • Navigate to DHCP Manager
  • Create a new DHCP scope under IPv4 in the domain
    • it will be from 10.0.17.101 to 10.0.17.150
    • Router Address will be 10.0.17.2
    • DNS Server will be 10.0.17.4

Remmina

Installing Remmina on xubuntu-wan

  • On xubuntu-wan, open the terminal
  • Type in the following commands:
    • sudo apt-add-repository ppa:remmina-ppa-team/remmina-next
    • sudo apt update
    • sudo apt install remmina remmina-plugin-rdp remmina-plugin-secret

Configuring Remmina for dc

  • Open Remmina
  • Add a new connection profile and enter the following information:
  • Save and exit

Milestone Completion

Completed Milestone Demonstration