Design Project 2 Outline - brian-anderson01/Capstone GitHub Wiki

Milestone Objectives Overview

In Design Project 2 I will firstly be finishing the configuration and deployment of the Azure file share I made. I am aiming to get it deployed on a local VM as well as deploying it automatically through Intune. I am also looking to make another share or two and controlling access to certain computers/users. Next, I am going to build a secure virtual environment. This environment will consist of a Windows 10 VM hosted on Azure and a LAMP stack, also hosted on Azure. The objective is to lock down the Windows 10 VM so it is only accessible to certain users. From that VM the user can access the web portal hosted on the LAMP stack. The web portal hosted on the LAMP stack will be secured so it can only be accessed from that Windows 10 VM. Only admins will have access to the actual VM running the LAMP stack. Finally, I would like to look into Intune a bit more, enforcing a compliance policy for joined devices. This would make it so devices need to be updated to reduce vulnerabilities and they would have to meet other requirements as well. I also plan to research Intune more to discover more functionality and potentially add to that milestone if time permits.

Milestone Objectives/tasks

  • Finish setting up/configuring Azure File Share

    • Get the file share working on a local VM
    • Deploy the file shares with Intune via a PowerShell script
    • Create one or two more shares and control access so only certain users can use them
    • Document setup and configuration

  • Create a secure virtual environment with AAD authentication

    • Create a secure VM with Azure AD user authentication
    • Create a web server (LAMP stack) that is only accessible from the secure VM
    • Document VM creation/configuration as well as access control implementation

  • Further explore Intune and device compliance

    • Enforce updates to managed devices, so that they are patched and up-to-date, reducing vulnerabilities
    • Research and see what else Intune can do and add to milestone