Exercise to deploying and configuring an Odyssey Task one stage a delegated installation of an ROTC
preparation to prestige prestigious ROTC account.
The computer name must not be in use in the domain.
Therefore you first need to remove L0 and SVR one from the domain by performing the following steps.
One on L0 and SVR.
One in server manager.
On the left side, click local server two in the properties for L0 in SVR one section, click the domain
of data CNN.com three in the System Properties Dialog Box Click Change.
Four in the computer names slash domain changes dialog box in the member of section select workgroup
type music and then click okay five in the computer name slash domain changes dialog box click okay
six in the computer name slash domain changes dialog box, you will see the following message.
Welcome to the Munich workgroup.
Click okay.
Seven In the computer name slash domain changes dialog box, you will see the following message You
must restart your computer to apply these changes.
Click.
Okay.
Eight In the System Properties Dialog Box Click close.
Nine In the Microsoft Windows Dialog Box Click Restart Now.
Ten Sign in is username administrator.
Password 11.
Switch to low and DC one in server manager click tools and then click Active Directory users and Computers
12.
In the navigation pane expander datum icon click to select a date in servers right click L1 SDR one
and then click Delete 13 in the Active Directory Domain Services Dialog box.
Confirmed the deletion by clicking.
Yes.
14 in the confirmed subtree deletion dialog box click.
Yes.
Stage a delegated installation of an arrow DC one on ELO and DC one in server manager Click Tools and
then click Active Directory sites and services to inactive directory sites and services in the navigation
pane.
Click sites from the action menu.
Click New Site.
Three in the new object site dialog box in the name field type Munich Select the default website link
site link object and then click okay.
Four in the Active Directory Domain Services Dialog Box Click.
Okay five switch to server manager Click Tools and then click Active Directory Administrative Center
six in Active Directory Administrative Center in the navigation pane, click a datum local and then
in the details pane double click the domain controllers 0u7 in the tasks pane in the domain controllers
section click pre create a read only domain controller account eight in the Active Directory Domain
Services Installation Wizard on the Welcome to the Active Directory Domain Services Installation Wizard
Page.
Click Next nine.
On the Network Credentials page, click next.
Ten on the specified the computer name page type the computer name L1 SVR one and then click next.
11 on the selected site page, click Munich and then click Next 12 on the additional domain controller
options page except the default selections of DNS Server and global catalog and then click next.
13.
On the delegation of ROTC Installation and Administration Page Click Set.
14 in the select user or group dialog box in the enter the object name to select field type nester and
then click check names 15 Verify that Nestor Fiore is resolved and then click okay.
16.
On the delegation of RDC Installation and Administration page, click next.
17.
On the summary page, review your selections and then click next.
18 On the Completing the Active Directory Domain Services Installation Wizard Page Click Finish.
Tasked to run the Active Directory Domain Services installation wizard on an Odyssey DC to complete
the deployment process.
One.
Switch to L0 in SVR one from server manager, click manage and then click add roles in features to in
the add roles and features wizard on the before you begin page click next.
Three.
On the select installation type page, accept the default of role based or feature based installation
and then click next.
For on the select destination server page except the default with L1 SVR one being selected and then
click next.
Five.
On the Select Server Roles page in the Roles list.
Select Active Directory Domain Services six in the ADD Roles and features Wizard Accept to install the
features and management tools.
Click Add features and then click next.
Seven on the Select Features page.
Click Next.
Eight.
On the Active Directory Domain Services page, click next.
Nine.
On the confirm installation selections page.
Click Install ten.
Wait until the role installs.
You can click close at any time, but monitor the notification icon and server manager.
11 when the installation of the new roll is finished, click the notification icon for notifications.
12.
In the post-deployment configuration message box, click promote the server to a domain controller 13.
In the Active Directory Domain Services Configuration Wizard on the deployment configuration page,
leave the default to add a domain controller to an existing domain.
14.
In the supplied the credentials to perform this operation section, click change 15 in the Windows Security
Dialog Box.
Enter the following credentials and then click okay.
Username a date and backslash.
Nestor.
Password.
16 Under Specify the domain information for this operation.
Click select.
Then select the domain, a date and rt.com.
Click.
Okay.
And then click.
Next, you will receive a notification that an arrow DC account that matches the name of the server
exists in the directory.
17 On the Domain Controller Options page.
Accept the default to use existing arrow DC account in the password and confirm password fields.
Type your password and then click next.
18 On the additional options page, accept the defaults and then click next.
19 On the paths page accept the defaults and then click next.
20 On the review options.
Page Review your options and then click next.
21 After the Prerequisites Check has been performed.
Click Install.
Note The computer will configure ads and restart, but you can proceed to the next task.
Task three configure the domain wide password replication policy one.
Switch to L0 and DC one in server manager Click Tools and then click Active Directory Administrative
Center to Inactive Directory Administrative Center in the navigation pane.
Click a datum local.
Three.
In the details pane double click it.
Four.
Locate the group.
Right click the group and then click add to another group.
Five in the select groups dialog box in the enter the object names to select text box type denied and
then click check names six verify that the name of the group is expanded to denied RDC Password Replication
Group and then click okay.
Note The members of the IT group have elevated permissions, so storing their password on an odyssey
would be a security risk.
Therefore you add the group to the global deny list, which applies to every arrow DC in the domain.
Seven Closed the Active Directory Administrative Centre task for create a group to manage password replication
to the branch office.
RDC one Switch to server manager Click Tools and then click Active Directory users and computers two
in the navigation pane expanded datum dot com and then click users.
Three on the action menu, click new and then click group.
Four in the new object group dialog box type, the group name unique allowed RDC password replication
group click okay and then double click the Munich Allowed RDC Password Replication Group.
Five.
On the members tab, click add six in the select users contacts, computers, services, accounts or
groups dialog box in the Enter the object names to select text box type Ana and then click check names
seven in the multiple names found dialog box select on a control and then click okay eight in the select
users contacts, computers, service accounts or groups dialog box click okay.
And then in the Munich allowed RDC Password Replication Group Properties Dialog Box Click okay.
Nine Close Active Directory users and computers.
Ten.
In Active Directory Administrative Center.
From the domain controllers, you view the properties for l0 and SVR 111 in the extension section on
the password replication policy tab.
Click Add 12 in the ADD Groups, Users and Computers Dialog Box.
Select allow passwords for the account to replicate to this RDC and then click okay.
13 in the select users computers, service accounts or groups dialog box in the enter the object names
to select text box type Munich Click Check Names and then click okay.
14 in the L1 SVR one dialog box.
Click okay to close the dialog box.
Task five Evaluate the result and password replication policy.
One Inactive Directory Administrative Center in the tasks pane in the L1 SDR.
One Section Click Properties.
Two In the properties of L1 SVR.
One in the extension section on the Password Replication Policy Tab, Click Advanced Note.
Note that this dialog box shows all accounts with passwords that are stored in the RDC.
Three Select accounts that have been authenticated to this read only domain controller.
And then note that this only shows accounts that have the permissions and already have been authenticated
by this RDC.
Four Click the resultant policy tab and then add on a Cantrell.
Notice that on a Cantrell has a resultant policy of allow five.
Close all open dialogue boxes.
Exercise three.
Creating and associating a group MSA.
Task one.
Create an associate in MSI one on ELO and DC one in server manager Click Tools and then click Active
Directory module for Windows PowerShell two at the Windows PowerShell Command prompt type the following
command and then press enter.
And Cady's rookie affective time get date done at hours minus ten three at the Windows PowerShell command
prompt type the following command and then press enter new add service account name web service, DNS,
Hostname, ELO and DC one principal's allowed to retrieve managed password ELO and DC $1.
Four at the Windows PowerShell command prompt typed the following command and then press enter.
At a computer service account identity ELO and DC one service account.
Web service.
Five.
At the Windows PowerShell command prompt typed the following command and then press enter get add service
account filter asterisk.
Six.
Note the output of the command and then ensure the newly created account is listed.
Seven Minimize the Windows PowerShell Command Window.
Task to install a group MSI one on low and DC one at the Windows PowerShell command prompt type the
following command and then press enter install add service account identity web service.
Two.
In Server Manager, click the Tools menu and then click Internet Information Services.
IRS Manager.
Three Expand low and DC one a data backslash administrator and then click application pools.
Four in the details pane right click the default app pool and then click advanced settings.
Five In the Advanced Settings Dialog Box in the process model section, click identity and then click
the ellipsis.
Six In the Application Pool Identity Dialog Box.
Click Custom Account and then click set.
Seven in the set credentials dialog box.
Type A data and backslash web service dollar in the username field and then click okay.
Three times.
Eight in the actions pane.
Click stop to stop the application pool.
Nine Click Start to start the application pool.
Ten Close Internet Information Services IRS Manager.