Lab 5 ADDS - jude-lindale/Wiki GitHub Wiki

Objectives:

  • Create an organizational unit (OU) in our domain.
  • Create a group policy that enforces various options.
  • Apply settings to the groups and computers in the newly created OU.

OU Structure Creation

Create Users and Groups

Group Policy - User

Nuking the Recycle Bin

Creating a Computer Policy

Tech Journal Entry

My plan to prepare for the coming assignment is to make sure that my tech journals are all correct with the instructions that I have put in them so that the step-by-step is all spic and span. I will then read over each lab one by one making sure to keep note of what I have to do. I will start with lab 1 and work my way to lab 5. Essentially I will go over and study the lab instructions.

Working notes

The purpose of this lab was to create an organizational unit (OU) in our domain, create a group policy that enforces various options, and apply settings to the groups and computers in the newly created OU. First I started with the OU Structure Creation. In that I had to first Open up Active Directory Users and Computers in Server manager under tools, then Create Organization Unit call it SYS255 with the sub Organization Units of Accounts, Computers, and Groups. Once that had been done I then started to Create Users and Groups. Within the Accounts OU I added the users Alice, Bob, and Charlie. Then I found WSK01 and draged it into the computers OU under SYS255. Then Within the SYS255\Groups OU, I add a global security group called custom-desktop with users Alice and Bob (not Charlie) as members. Then it was time for the Group Policy - User. With that I went to Group Policy Management, and created a GPO in the GPO I added the custom-desktop(JUDE\custom-desktop) group created earlier to the Security Filter and removed Authenticated Users from the Security Filter. Then I added Domain Computers, then Uncheck Apply Group Policy, Select Deny under Delegation and then advanced. Then it was time to Nuking the Recycle Bin in that I Drop the policies folder under user configuration, then the Administrative Template folder under Policies, and clicked the Desktop folder under Administrative Template and enabled Remove Recycle Bin Icon From Desktop. Lastly, I started Creating a Computer Policy by creating a new GPO within the SYS255\Computers OU called DisableLastLogin, under Computer Configuration drop-down policies then windows settings then security settings, in security options. I then choose Interactive logon: Don't display the last signed-in and enabled it.