Just need to work on virtual machine and screenshoot.

ITSA2005
Planning and Implementing Server
Lab Assignment 3
LAB 3: Managing Group Policy Application and Infrastructure
Total Marks 40 Weightage 5%
The lab environment consists of student workstations connected to a local area network, along with a server that functions as the domain controller for a domain called VITLAB.local.
This lab contains the following exercises and activities:
Exercise 3.1: Prepare GPOs, Security Groups, and OUs
Exercise 3.2: Manage GPOs
Exercise 3.3: Manage Group Policy Processing
Exercise 3.4: Group Policy Inheritance and Enforcement
After completing the lab, fill your student details on the first page of the template word file and upload it with the answers and screen shots on to Moodle.
• This video tutorial will help you to complete this task.
• Note: You can take screenshots by pressing Alt+Prt Scr and then paste it into your Lab3 answer sheet by pressing Ctrl+V.
• Use the following serial number to activate Windows Server 2012 R2: D2N9P-3P6X9-2R39C-7RTCD-MDVJX
Table 3-1 Computers required for Lab 3
Computer Operating System Computer Name
Server Windows Server 2012 R2 CRWDC01- student ID
After completing this lab, you will be able to:
? Prepare GPOs, Security Groups and OUs
? Manage GPOs
? Manage Group Policy Processing
? Manage Group Policy Inheritance and Enforcement
.1: Prepare GPOs, Security Groups, and OUs (10 marks)
1. Sign into the DC with the VITLABAdministrator account.
2. In Server Manager, click the Tools menu, and click Group Policy Management.
3. Expand the Forest: VITLAB.localDomainsVITLAB.local node and click Group Policy Objects.
4. On the Action menu, click New.
5. In the New GPO dialog box, type Melbourne and click OK.
6. Repeat steps 4 and 5 to create new GPOs named Sydney and Adelaide.
7. Verify that there are five GPOs listed
8. In Server Manager, click Active Directory Administrative Center.
9. In Active Directory Administrative Center, click VITLAB (Local), and then click Users
10. In the Tasks pane, click New, and click Group.
11. In the Create Group dialog box, type the group name Melbourne_GPO_Editors; click Security, Global, and Protect from Accidental Deletion then click OK.
12. Repeat steps 10 and 11 to create the Adelaide_Computers security group.
13. In the Active Directory Administrative Center, in the Tasks pane, under VITLAB (Local), click New, and then click Organizational Unit.
14. In the Create Organizational Unit dialog box, type the name Melbourne_Computers and click OK.
15. Close the Active Directory Administrative Center.
16. On the taskbar, click File Manager.
17. In File Manager, click Computer, and then double-click Local Disk (C:) 18. On the title bar of the Local Disk (C:) window, click the New Folder icon.
19. Name the new folder GPO_Backup.
20. Close the Local Disk (C:) window.
.2: Manage GPOs (10 marks)
In this exercise, you perform several Group Policy management-related tasks. To complete this exercise, perform the following steps:
1. In the GPMC, click the Melbourne GPO.
2. When the Melbourne GPO is selected, click the Delegation tab
3. On the Delegation tab, click Add.
4. In the Select User, Computer, Or Group dialog box, type Melbourne_GPO_Editors, click Check Names, and click OK.
5. In the Add Group or User dialog box, use the drop-down menu to select Edit Settings, Delete, Modify Security and click OK.
6. In the GPMC, click the Sydney GPO.
7. On the Action menu, click Back Up.
8. In the Back Up Group Policy Object dialog box, type C:GPO_Backup as the location and click Back Up.
9. In the Backup dialog box, click OK.
10. In the GPMC, click the Sydney GPO.
11. On the Action menu, click Delete.
12. In the Group Policy Management dialog box, click Yes.
13. Verify that the Sydney GPO is no longer listed under Group Policy Objects
14. Click Group Policy Objects. On the Action menu, click Manage Backups.
15. In the Manage Backups dialog box, click the Sydney GPO and click Restore.
16. In the Group Policy Management dialog box, click OK.
17. In the Restore dialog box, click OK.
18. In the Manage Backups dialog box, click Close.
19. Verify the presence of the Sydney GPO in the list of Group Policy Objects.
.3: Manage Group Policy Processing (10 marks)
In this exercise, you perform Group Policy management tasks related to Group Policy processing. To complete this exercise, perform the following steps:
1. In the GPMC, click the Adelaide GPO.
2. On the Action menu, click Edit.
3. In the Group Policy Management Editor, expand the Computer ConfigurationAdministrative TemplatesSystemGroup Policy node and select the Configure User Group Policy loopback processing mode policy
4. On the Action menu, click Edit.
5. In the Configure User Group Policy Loopback Processing Mode dialog box, click Enabled. Set the mode to Replace and click OK.
6. Close the Group Policy Management Editor.
7. In the GPMC, click the Adelaide GPO, and click the Scope tab.
8. On the Scope tab, click the Authenticated Users group, and click Remove.
9. In the Group Policy Management dialog box, click OK.
10. Under Security Filtering, click Add.
11. In the Select User, Computer, Or Group dialog box, type Adelaide_Computers, click Check Names, and click OK.
12. In the GPMC, click VITLAB.local, and click the Linked Group Policy Objects tab.
13. Click VITLAB.local On the Action menu, click Link an Existing GPO.
14. In the Select GPO dialog box, click Adelaide and click OK.
15. In the GPMC, verify that the Adelaide GPO and the Default Domain Policy GPO are linked to the domain
3.4: Group Policy Inheritance and Enforcement (10 marks)
In this exercise, you will perform Group Policy management tasks related to Group Policy processing. To complete this exercise, perform the following steps:
1. In the GPMC, click the Melbourne_Computers OU.
2. On the Action menu, click Block Inheritance.
3. In the GPMC, click VITLAB.local.
4. On the Action menu, click Link an Existing GPO.
5. In the Select GPO dialog box, click Melbourne, and then click OK.
6. Click the Melbourne GPO under VITLAB.local.
7. On the Action menu, click Enforced.
8. Verify that the GPMC shows the Melbourne policy as Enforced and the Melbourne_ Computers OU set to Block Inheritance
9. In the GPMC, click the Group Policy Modeling node.
10. On the Action menu, click Group Policy Modeling Wizard.
11. On the Welcome page of the Group Policy Modeling Wizard, click Next.
12. On the Domain Controller Selection page, click This Domain Controller, and click Next.
13. On the User and Computer Selection page, click Browse next to Container in the Computer Information section.
14. In the Choose Computer Container dialog box, click Melbourne_Computers, and click OK.
15. On the Summary of Selections page, click Next, and then click Finish.
16. In the Warning dialog box, click OK.