Dire Dawa University
Institute Of Technology
Department Of Computer Science
Course Name: Network and System Administration
Group Assignment
Section2 Group 2
Group members ID.
1. Matiyas Bitew----------------------------1001295
2. Amanuel Melese-------------------------1001551
3. Milkiyas Bayesa--------------------------1001306
4. Mintesinot Melese------------------------1002089
5. Nasir Kemal-------------------------------1001726
6. Markon Nigatu----------------------------1001484
7. Getachew Yeshiwondim-----------------1002005
8. Misganw Bitew---------------------------1001294
9.Kalid Nasir--------------------------------------1002160
10.Yonas shewaye-----------------------------1001449
11.Misganw Antene-------------------------1001089
Submitted to: -Mis. Mekdes G.
All implementation of each module or task are break down
Module 1: Deploying and Managing Windows Server 2012
Windows Server 2012, Windows Server 2012 Management, Installing
Windows Server 2012, Post-Installation Configuration of Windows Server
2012, Windows PowerShell,
Installation
We used a Virtual box to install a Microsoft Windows Server by using Microsoft
Windows Server 2012 R2 ISO disc image.
During the installation of windows server, we must choose some requirements.
Step 1: Choose language
Step 2: click the “install now” button to proceed.
Step 3: choose Windows Server 2012 R2(Server with GUI ) option.
Step 4: accept license terms
Step 5: Select a drive to proceed the installation
Finally, wait until the installation completes.
Post installation
Step 1:
When there is a prompt window asking for password, provide appropriate
password and proceed.
Enter a password and continue.
Step 2: Proceed by pressing Ctrl + Alt + Delete buttons.
Module 2: Active Directory Domain Services, and Domain Controllers,
Installing a Domain Controller
Active Directory Domain Services (AD DS) is a server role in Active
Directory that allows admins to manage and store information about resources
from a network, as well as application data, in a distributed database.
A domain controller is a server that responds to authentication requests and
verifies users on computer networks.
Domains are a hierarchical way of organizing users and computers that work
together on the same network. The domain controller keeps all of that data
organized and secured.
Before proceeding into the next step, we have to change the computer name.
Step 1 : Click Local Server
Step 2: Right click on Computer name and change the name.
Step 3: Click Apply and close the window.
1. Click on the “Add roles and features”
Step 2: Click Next
Step 3: Select Role-based or feature-based installation and then click Next
Step 4: Click Select a server from the server pool, click the name of the server
to install Active Directory Domain Services to, and then click Next (If you
wanted to install this on a remote server, you have to first create a server group
containing the remote server)
Step 5: Click Active Directory Domain Services. When the Add Roles and
Features Wizard dialog box opens, select Add Features, then Next
Step 6: On the Active Directory Domain Services page, review the information
and then click Next
Step 7: On the Confirm installation selections page, click Install
Step 8: On the Results page, verify Installation succeeded, and click Promote
this server to a domain controller to start the Active Directory Domain
Services Configuration Wizard
Module 3: Managing Active Directory Domain Services Objects
Managing User Accounts, Managing Groups Accounts, Managing
Computer Accounts and Delegating Administration
Adding a User Account
Step 1: Open the Windows Server Essentials Dashboard from the desktop Icon
and click Tools.
Step 2: Click Active Directory Domains and Trusts
Step 3: Right click on Active Directory and click manage
Step 4: Right click on free space and click new.
Step 5: Enter the information for the user you wish to add. Be sure to enter a
password that meets the complexity requirements and choose Next.
Step 6: Review the information on the success page and click Close
Removing User Accounts
Step 1: Open the Windows Server Essentials Dashboard from the desktop Icon
and click on Tools.
Step 2: Click on Active Directory Domain name and navigate to the Users tab
and right click.
Step 3: Right click on the user you wish to delete.
Step 4: In the tasks pane, click Delete the user account
Step 5: On the confirmation page, click Delete Account.
Deactivating User Accounts
If a user will not be using their account for some time, it is a good practice to
deactivate the user.
Step 1: Open the Windows Server Essentials Dashboard from the desktop Icon
and click Tools.
Step 2: Click on Active Directory Users and Computers and navigate to
the Users tab and right click.
Step 3: Select the user account you wish to deactivate.
Step 4: In the Tasks pane, choose Deactivate the user account by Disabling the
account.
5. In the confirmation prompt, click OK
Creating a User Group
Step1: Open the Windows Server Essentials Dashboard from the desktop Icon
and Tools.
Step 2: Click on Active Directory Users and Computers and navigate to
the Users tab and right click.
Step 3: In the User Groups Tasks pane, click new and again click group.
Step 4: Add a New Group, Enter the name and description for the group.
Choose OK.
Step 5: Right click on the group you wish to add to a user and click properties.
Step 6: At the top panel click members then click Add at the bottom.
Step 7: Click Advanced.
Step 8: Then find the desired user to add in the group by clicking Find Now
button.
Step 9: Choose a user you want to add from the search result.
Removing a User Group
Step 1: Open the Windows Server Essentials Dashboard from the desktop Icon
and click Tools.
Step 2: Navigate to the Users tab and choose User Groups
Step 3: Select the group you wish to remove and right click on it.
Step 4: When a prompt comes asking us to prove if we want to delete, click Yes.
Managing Computer Accounts
Step1: Open the Windows Server Essentials Dashboard from the desktop Icon
and click Tools.
Step 2: Click Active Directory Administrative Center.
In this panel we can manage all accounts. Such as Users, Groups, Computer
Accounts etc.
Step 3: Click any user you want to delegate and Click properties.
Step 4: From the left option click Delegation.
Step 5: Choose delegation type then click OK.
Module 4: Automating Active Directory Domain Services Administration
Using Command-Line Tools for Administration, Using Windows
PowerShell for Administration, and Performing Bulk Operations with
Windows PowerShell
Open Command prompt and type the command below.
Open power shell and type the following codes
To create new group and add new member
To create new user
Module 5: Implementing IPv4
TCP/IP, IPv4 Addressing, Subnetting and Super-netting, Configuring and
Troubleshooting IPv4
IPv4 is considered the core of internet addressing, as it allows transmission
of data using TCP/IP. In previous years, this protocol proved its stability
and reliability in working in the internet environment in order to provide a
connection for millions of nodes. The Figure shows the five classes of IPv4
address.
Implementation of IPv4
Step 1: Click on local server and then right click on Ethernet
Step 2: Right Click Ethernet and choose properties.
Step 3: Select on Internet Protocol Version 4 and click properties
Step 4: Enter the IP address, subnet mask, default gateway and DNS
requirements manually then click OK.
Configuring and Troubleshooting IPv4
Step 1 – Go to Command Prompt and type ipconfig
Step 2 – Enter the netsh command-line tool
Step 3 – Ping the ip address to check packets
Using Power shell
Module 6: Implementing DHCP
Installing a DHCP Server Role, Configuring DHCP Scopes, managing a
DHCP Database, and Securing and Monitoring DHCP
Installing a DHCP Server Role
Step 1: Click on the “Add roles and features”
Step 2: Click Next
Step 3: Select Role-based or feature-based installation and then click Next
Step 4: Click Select a server from the server pool, click the name of the server to
install Active Directory Domain Services to, and then click Next (If you wanted
to install this on a remote server, you have to first create a server group
containing the remote server)
Step 5: Click DHCP Server. When the Add Roles and Features Wizard dialog
box opens, select Add Features, then Next
Step 6: On the Active Directory Domain Services page, review the information
and then click Next
Step 7: On the Confirm installation selections page, click Install
Step 8: On the Results page, verify Installation succeeded, and click Promote this
server to a domain controller to start the Active Directory Domain Services
Configuration Wizard
Configuring DHCP Scopes
Step 1: Click on Tools and select DHCP
Step 2: Right Click on the DHCP server
Step 3: Then choose an IP version that you want to scope
Managing a DHCP Database
We can restore and backup our database using DHCP management.
Step 1: Click on Tools and select DHCP
Step 2: Right Click on the DHCP server
Step 3: Then choose restore or backup to manage the database
Securing and Monitoring DHCP
Step 1: Click on Tools and select DHCP
Step 2: Right Click on the DHCP server
Step 3: On the upper panel choose Network Access Protection and Secure.
Module 7: Implementing DNS
Name Resolution for Windows Client and Servers, Installing and
Managing a DNS Server, and Managing DNS Zones
Installing and Managing a DNS Server
Step 1: Click on the “Add roles and features”
Step 2: Click Next
Step 3: Select Role-based or feature-based installation and then click Next
Step 4: Click Select a server from the server pool, click the name of the server to
install Active Directory Domain Services to, and then click Next (If you wanted
to install this on a remote server, you have to first create a server group
containing the remote server)
Step 5: Click DNS Server. When the Add Roles and Features Wizard dialog box
opens, select Add Features, then Next
Step 6: On the Active Directory Domain Services page, review the information
and then click Next
Step 7: On the Confirm installation selections page, click Install
Step 8: On the Results page, verify Installation succeeded, and click Promote this
server to a domain controller to start the Active Directory Domain Services
Configuration Wizard
Managing DNS Zones
Step 1: Click on Tools and select DNS
Step 2: Right Click on one of the lookup zones
Step 3: Then click add New zone and follow the instruction
Step 4: After adding new zone we can add new host, new domain and man more.
Module 8: Implementing IPv6
IPv6, IPv6 Addressing, Coexistence with IPv4, and IPv6 Transition
Technologies
IPv6 is also known as IP next generation: it is considered evolutionary
from IPv4, as it does not make a radical change to IPv4 and the basic
concept remains the same, but some features have been added, which
help to improve performance and provide a good service for customers.
The IPv6 size is 128 bits, comprised of Hexadecimal digits which are
able to provide 3.8X1038 addresses, which are enough to give a unique
address to each device for today and the future. Each four digits are
separated by a colon which provides eight parts.
Coexistence with IPv4
Step 1 – Click Tools and select DNS
Step 2 – create new host
Step 3 – Go to registry and click on Local Machine and expand System and click
on current control set
Step 4 – Expand Services and select TCPIP
Step 5 – Then click parameters and Enable IPEnableRouter
Step 6 – Open windows powershell and type the following command.
Module 9: Implementing Local Storage
Overview of Storage, Managing Disks and Volumes, and Implementing
Storage Spaces
Implementing Storage Spaces
Step 1 – Click Add roles and features
Step 2 – Check File and Storage Services and click Next.
Step 3 – Click Next
Step 4 – Click install
Step 5 – Click close.
Overview of Storage
Step 1 – At the left side, click on File and Storage Services
Step 2 – Click Disks
Step 3 – Click on volumes overview to see about the Disk space.
Managing Disks and Volumes
Step 1 – At the left side, click on File and Storage Services
Step 2 – Click Volumes
Step 3 – Click on volumes and right click on selected Drive and select manage.
Module 10: Implementing File and Print Services
Securing Files and Folders
Protecting File Shares with Shadow Copies
Configuring Network Printing
Implementing File and Print Services
we will see how to install a Print Server which plays some very important roles
for the system administrator and the management. We should follow the steps
given below.
Step 1: Go to Server Manager → Manage
Step 2 − Add Roles and Features → Next → Check on the Role- or feature-based
installation → Check on
box and → Check on Select a server from the server pool and then → Next.
Once it is done then, at the list of the roles find Print and Document Services →
A popup window will open.
Step 3 − Click on Add features and then → Next → Next → Next.
Step 4 − Check on the Print Server and → Next.
Step 5 − Click Install.
Configuring Network Printing
Step 1: Go to Server Manager → Tools
Step 2 – Click print management
Step 3 – Click on Print Server and choose Printers
Step 4 – Configure printers.
Easy Printing is a feature which allows the client that connects via RDS to print
over the network. It is installed in Windows server 2012 by default. Easy Printing
is basically where the printer device is defined on the client system and a printer
is connected directly via the network. All configuration is done via Group Policy
Objects.
The configuration settings can be found at – Administrative Templates –Remote
Desktop Services – Printer Redirection.
For User Configuration
User Configuration, it will be having the same path – Administrative Templates –
Remote Desktop Services – Printer Redirection.
In administration, another important aspect is to set the priority for the printer, so
the users have the same printer installer and can print as per their priorities. In
this, the users printing with higher priorities overpass the printing will lower
priorities.
To do so, you need to add different logical printers and then add then as per the
users or departments that have different priorities.
To do this, firstly let us add a printer to the print server by following the steps
given below.
Step 1 − Click on Server Manager → Tools → Print Management → then on the
left panel click Print Servers → then right click on Printers and → Add Printer
Step 2 − Next, follow the wizard to add the network printer like you do for a
normal workstation and at the end this printer will be shown in the Printer
Management.
Step 3 − Now that we have installed the printer, we can set the priority on this
printer – Right click on the printer → Advanced → put a number at Priority from
1-99 → OK.
Module 11: Implementing a Group Policy Infrastructure
Group Policy
Group Policy Processing
Implementing a Central Store for Administrative Templates
The features of Group Policy Management were installed during the DC Role
Installation. Many of the management features haven’t changed as compared to
the previous versions of Windows Server. To create a GPO (Group Policy
Overview), we need to follow the steps given below.
Step 1 − To create a GPO open create a GPO open the Group Policy
Management Console (GPMC), go to Server Manager → Tools → Group Policy
Management.
Step 2 − Right-click on an OU → select the first option Create a GPO in this
domain and Link it here.
Step 3 − Type the Name for this GPO object → click OK button. We have
selected the name as Test GPO.
Step 4 − Right-click the GPO object and click Edit
Implementing a Central Store for Administrative Templates
Step 1 – Go to a browser and search for ADMX Windows 2012 R2
Step 2 – Then download ADMX Windows 2012 R2
Step 3 – Install the file
Step 4 – After installation completes go to windows explorer
Step 5 – Go to installation directory Program files(x86) -> Microsoft Group
Policy -> PolicyDefinition and copy some files,
Step 6 – Go to in the Network->Domain Directory -> SysVol -> Domain Name
-> Policies and create a folder named PolicyDefinitions and paste the previous
copied files.
Step 7 –
Go to
Group
Policy
Management and right click on Default Domain policy and click Edit.
Step 8 – Check the Administrative Templates if they are retrieved from the
central store.
Module 12: Securing Windows Servers by Using Group Policy Objects
Windows Security
Configuring Security Settings
Restricting Software
Configuring Windows Firewall with Advanced Security
Configuring Security Settings and Restricting Software
Step 1 – Click on Tools and select Group Policy Management
Step 2 – Double click on the Domain name and select Group Policy Objects
Step 3 – Then, right click on the object that needs to be edited and select edit.
Step 4 – Double click on User Configuration and select policies.
Step 5 – Double click on Windows Settings and select Security Settings, then
select Software Restriction Policies.
Step 6 – Click on Additional Rules and right click on the registers to manage.
Step 7 – Choose the security level and apply, then click OK.
Configuring Windows Firewall with Advanced Security
Step 1 – Click on Tools and select Group Policy Management
Step 2 – Double click on the Domain name and select Group Policy Objects
Step 3 – Then, right click on the object that needs to be edited and select edit.
Step 4 – Double click on User Configuration and select policies.
Step 5 – Double click on Administrative Templates and select All Settings, then
select Windows Fire Wall with Advanced Security.
Step 6 – Right click on it and choose Edit.
Step 7 – Choose the configuration, then click close.
Module 13: Implementing Server Virtualization with Hyper-V
Virtualization Technologies
Implementing Hyper-V
Managing Virtual Machine Storage
Managing Virtual Networks
Virtualization is one of the most important technology feature and Microsoft has
invested on this and the responsible role is called as Hyper-V. Let us now see
how to install the Hyper-V Role, for doing this we should follow the steps given
below.
Implementing Hyper-V
Step 1 − To Install DNS role go to “Server Manager” → Manage → Add Roles
and Feature.
Step 2 − Click Next.
Step 3 − Select the Role-based or feature-based installation option then click
Next.
Step 4 − It will install a Local Hyper-V role as it will Select a server from the
server pool then Next.
Step 5 − From the Roles lists, check the Hyper-V Server role → click Add
Features on the popup windows which show up and then → Next
Step 6 − Click Next
Step 7 − Choose your server’s physical network adapters that will take part in the
virtualization →Next.
Step 8 − Under Migration, leave the default settings → Next
Step 9 − Choose the path where to save the file
Step 10 − Click Install and wait for the installation bar to finish.