LAB 8 WORKSHEET

SECURING A SERVER

This lab contains the following exercises and activities:

Exercise 8.1 Exercise 8.2 Exercise 8.3 Exercise 8.4 Lab Review Lab Challenge Creating Users and User Groups Creating a Share Assigning Permissions Testing Share Access Questions Configuring Password Policies

Exercise 8.1
Overview

Creating Users and User Groups

In this exercise, you create the user accounts for the Accounting department staff as well as the groups that you will use to provide them with the permissions they need. 15 minutes

Completion time

MOAC Windows Server 2008 Administrator, Exam 70-646

24. Press Ctrl+Prt Scr to take a screen shot of the Active Directory Users and Computers console, showing the Accounting## OU and the objects you created in it, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

Lab 8: Securing a Server

Exercise 8.2
Overview Completion time

Creating a Share
In this exercise, you create the network share where the Accounting department will store its confidential files. 10 minutes

Question 1

According to the Server Manager console, what roles are currently installed on the computer? DHCP Server, File Server, Print Services Why is the NFS option grayed out on the Share Protocols page? Because NFS is not installed on this server.

Question 2

MOAC Windows Server 2008 Administrator, Exam 70-646

16. Press Ctrl+Prt Scr to take a screen shot of the Share and Storage Management console, showing the share you just created, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

Lab 8: Securing a Server

Question 3

What installed roles appear in the Server Manager console now? Why has there been a change? File services was already installed.

Exercise 8.3
Overview

Assigning Permissions
In this exercise, you create domain local groups and assign the NTFS permissions that will grant the groups access to the folders on the network share. 20 minutes

Completion time

MOAC Windows Server 2008 Administrator, Exam 70-646

17. Press Ctrl+Prt Scr to take a screen shot of the Budget Properties sheet, showing the Security tab and the three security principals you just added, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

Lab 8: Securing a Server

Exercise 8.4
Overview Completion time

Testing Share Access

In this exercise, you test the permissions you created by logging on using the accounts you created in Exercise 8.1. 15 minutes

Question 4

Why is the LeoG## account able to open the file, but not modify it? He has read-only permissions.

Question 5

What is the result? Permission to modify the file is denied Why are KarenA##, a member of the Acctg##-Full group, and MarieR##, a member of the Acctg##-RW group, unable to modify the Report## file? Because Karen was also added to the Acctg12-users group and that group has read-only access and also share permissions have not been set yet.

Question 6

MOAC Windows Server 2008 Administrator, Exam 70-646

18.

On your worksheet, list the steps you must perform to correct the problem and enable the members of the Acctg##-Full and Acctg##-RW groups to modify the Report## file.

In a previous step we assigned NTFS permissions. Now, we would need to assign share permissions as well. So we would need to go to the share folder and right click to properties and assign permissions.

Lab 8: Securing a Server

LAB REVIEW QUESTIONS

Completion time 1. 10 minutes

In Exercise 8.3, what would happen if you accidentally reversed the group memberships and tried to add the Budget##-Full group as a member of the Acctg##-Full group?

The n users that are not supposed to have specific permissions to folders would be able to modify files in it. 2. If Leo Giakoumakis is hired as a full-time employee after his internship ends, what would you have to do to grant him the permissions to the Budget share that he needs?

Move his 'user object' to the container users instead of intern. 3. In Exercise 8.4, what test could you perform to prove that your reason for KarenA##s and MarieR##s inability to modify the Report## file is correct?

I could try assigning the share permissions to the different groups and see if they can modify the report.