You are on page 1of 17

LAB C MONITOR PERFORMANCE & USER ADMINISTRATION

Download this Lab instruction file for this class from Blackboard under assignments. Save your Lab worksheet to your USB drive. When your assignment is complete, you must submit the Lab worksheet to Blackboard under Project Submission by the due date listed on your syllabus for full credit. Follow the steps for each exercise in your “Windows 7 Configuration Lab Manual”. The steps listed below are the changes from the steps in the printed lab manual. You must complete ALL Exercises, Lab Review questions, and Lab Challenge Exercises that are listed in this lab worksheet.

LAB 10
CONFIGURING APPLICATIONS
Exercise 10.1 Installing Remote Server Administration Tools
Overview Before you can configure AD DS Group Policy settings from your Windows 7 workstation, you must install and enable the Remote Server Administration Tools, which includes the Group Policy Management console. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01

. Group Policy Management 15. search. and then it below by pressing Ctrl+V.Take a screen shot of the Group Policy Management console. Administrative Tools.msu 11. REPLACE STEP 2 in Lab Manual.Completion time 10 minutes 2. \\rwdc01\downloads\x86fre_GRMRSAT_MSU. Will the Group Policy settings you configure in your new GPO have an Questio immediate effect on your network? Why? n 1 The settings will not have any immediate effect because the GPO is not yet linked to an Active Directory Domain Services object. REPLACE STEP 11 in Lab Manual Click Start. showing the GPO you created. Start. All programs. by pressing Alt+Prt Scr.

designed several years ago for a previous IE version. Ltd. such as add-ons and accelerators. the director wants to ensure that all Internet browsing activity on the network is logged for later examination.2 Configuring IE8 Overview The director of IT at Contoso. Your job is to configure the appropriate Group Policy settings to implement these requirements in your GPO. is it necessary to enable both the Prevent Deleting Web sites that the User has Visited policy and the Turn off InPrivate Browsing Questio policy? n 4 to keep track of what users are looking at and allow their personal settings to stay in place Questio Why isn’t it necessary to enable the Turn off InPrivate Filtering as well? so the users cannot control who looks at their stuff n 5 . Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 Completion time 10 minutes Questio case. display properly in IE8. wants to prevent the company’s Windows 7 users from modifying the default Internet Explorer configuration by installing additional software. Finally. in this case.Exercise 10. rather than the Turn off accelerators policy? n 2 Why would you want to enable the Use policy accelerators policy in this to keep people form accessing some accelerators Why is it necessary to disable the Turn on Internet Explorer Standards Questio Mode for Local Intranet policy? n 3 so all intranet pages are displayed i ie7 configuration Why. She also wants to ensure that the company intranet pages.

Members of the IT support staff. Exercise 10. She wants standard users to able to run all of the executables included with Windows except for the Registry Editor. 16. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 . who are all members of the Group Policy Creator Owners group.3 Using AppLocker Overview Your IT director wants to begin using the new AppLocker feature in Windows 7 to restrict the applications that users are able to run on their workstations.Take a screen shot of the Group Policy Management console displaying all of the policy settings you configured in this exercise by pressing Alt+Prt Scr. however.Step 14: HINT: minimize the Group Policy Management Editor that you have been working with & follow the rest of this step. must be able to run the Registry Editor to service other users’ computers. and then paste it below by pressing Ctrl+V.

To prevent users from attempting to run downlevel applications. To complete this challenge. you must locate and configure the appropriate Group Policy settings to accomplish these goals in the GPO you created in Exercise 10. what programs can a typical user run on a Windows 7 workstation? What Questio programs can members of the Administrators group run? n 6 Users can run any programs in the windows and program files folders Admins can use all files Based on the default rules that appear in the Windows Installer Rules folder. what Windows Installer files can a typical user run on a Windows 7 Questio workstation? What Windows Installer files can members of the n7 Administrators group run? Users only digitally signed installer files and those in Installer folder Admins all Windows Installer files Why is it necessary to create the additional rule for the Group Policy Questio Creator Owners group? n 8 so that the user who is restricting access can use that folder 18. are restricted to a predefined set of applications. PastePrintscreenHere LAB CHALLENGE: SUPPRESSING COMPATIBILITY WARNINGS Completion time 15 minutes The Windows 7 users at Contoso. all of which have been recently updated and carefully tested for compatibility.1. you have been instructed to disable the Windows 7 compatibility mode controls using Group Policy.Completion time 10 minutes Based on the default rules that appear in the Executable Rules folder. Ltd. Write out the procedure you used to configure the .Take a screen shot of the Group Policy Management Editor console displaying the contents of the Executable Rules container by pressing Alt+Prt Scr. and then paste it below by pressing Ctrl+V.

Enter admin tools click on Group Policy Manager. Click on VM. you must link it to a Active Directory Domain Services domain. and paste it below by pressing Ctrl+V. follow the steps allowing the group owners to only have access to program files. and then take a screen shot of the container where the settings are located by pressing Alt+Prt Scr.settings. . Write out the procedure you used to complete the challenge. Right click on NYC-CLa Policies and under Policies\Windows Settings\Security Settings\Application Control Policies\Applocker right click Executable Rules Create new rule. PastePrintscreenHere Make snapshot of VM Close out of your VM. and then take a screen shot showing the configuration that limits the scope of the GPO by pressing Alt+Prt Scr. PastePrintscreenHere LAB CHALLENGE: DEPLOYING GROUP POLICY OBJECTS Completion time 15 minutes To deploy a GPO like the one you have created in this lab. and paste it below by pressing Ctrl+V. for the purposes of this lab. Snapshot and Take Snapshot… Type in the name: After Ex10 with a description of Exercise 10 activities complete & click on OK. To complete this challenge. Right click on NYC-CLa Policies and under Policies\Administrative Templates\Windows Components\Internet Explorer\Computability View double click Turn off Compatibility View and enable it. site. or organizational unit object. Enter admin tools click on Group Policy Manager. and not any of the other computers on the network. you must configure your GPO so that its settings apply only to the NYC-CLa computer and then link it to the contoso.com domain object in the AD DS tree. it is necessary for the settings in your GPO to be applied to your workstation only. However.

by pressing Ctrl+Prt Scr and then paste it below by pressing Ctrl+V. Take a screen shot of the Event Viewer console.LAB 11 MANAGING AND MONITORING PERFORMANCE Exercise 11. you demonstrate some methods for isolating the most important events in the Windows 7 logs. PastePrintscreenHere Exercise 11. Right click on Computer. then double click on Event Viewer. showing the Critical & Warning custom view. Click on Manage. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 Completion time 10 minutes Step 2: Click Start. Questio How many events appear in the System log? n 1 2656 Questio How many events appear in the System log now? n2 31 Questio How many events appear in the Critical & Warning custom view? 4 n 3 12.2 Creating Event Subscriptions .1 Using Event Viewer Overview In Exercise 11.1.

you demonstrate some methods for isolating the most important events in the Windows 7 logs. showing the new subscription you created. by pressing Ctrl+Prt Scr and then paste it below by pressing Ctrl+V. NOTE: the forwarded events is in the left column of the Event Viewer.2. PastePrintscreenHere 23. because all of the counters have approximately similar values. routinely use the Performance Monitor tool to examine the performance levels of Windows 7 workstations. Complete this on the VM you created NYC-CLa. and WinServer2008_RWDC01 Completion time 20 minutes 22. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 Completion time 15 minutes Questio n 4 Questio n 5 What counter appears in the Performance Monitor display by default? % processor time What happens? The Queue Length counter is added to the System Monitor graph. Ltd.Overview In Exercise 11. Take a screen shot of the Event Viewer console. each technician uses Performance Monitor in a different way. Does this selection of counters make for an effective graph? Why or why Questio not? n 6 Yes. The IT director wants to create a standard set of performance counters that are easily visible in a single Performance Monitor line graph that would enable the support staff to compare the performance levels of different computer models. . However. You have been given the task of selecting the performance counters for this standard Performance Monitor configuration and testing their visibility on the graph. Exercise 11.3 Using Performance Monitor Overview The technical specialists at Contoso. NYC-CLb.

What effect does launching the programs have on the Performance Questio Monitor graph? n 8 the graphs shot up 13.4 Logging Performance Data Overview To properly gauge the performance level of a computer. so there is no need n 7 to consider the similarity of the data produced by the various performance counters. You have been given the task of taking baseline performance level readings on a new computer using the Performance Monitor console.4. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 Completion time 15 minutes . it is helpful to have a baseline reading that you’ve taken under normal operating conditions that you can use to compare with the levels when the computer is under the stress of a workload. In Exercise 11. Take a screen shot of the Performance Monitor console showing the line graph by pressing Alt+Prt Scr. Does this selection of counters make for an effective graph? Why or why Questio not? n 10 no the graphs are not visible from this view Exercise 11. each counter is displayed numerically. as is the case in graph view. PastePrintscreenHere Does this modification make the graph easier or more difficult to read? Why or why not? Questio It is easier to read because all of the counters tend to have high values n 9 while the programs are loading. saving the baseline levels to a file for later examination. and then paste it below by pressing Ctrl+V.How would using the report view instead of the line graph view affect the compatibility of the performance counters you select? Questio In report view. and increasing the vertical scale makes it easier to see the maximum counter values. you use the Data Collector Sets tool to create a counter log for the computer.

In the console tree on the right select the NYC-CLa Base line under User Defined then above under the menu tabs select the button on the far right that looks like a note book to see the last report. PastePrintscreenHere Questio circumstances would it be necessary to specify a user name and n 11 password in the Run As section of the collector set’s Properties sheet? when running form the server to record end client computers When creating a performance counter data collector set.1: VIEWING A PERFORMANCE COUNTER LOG Completion time 10 minutes In Exercise 11.9. under what Questio What happens when the Start Time you configured arrives? n 12 the icon on the side console tree has a play button on it LAB CHALLENGE 11.4. you created a performance counter data collector set for the purpose of gathering baseline performance data for your Windows 7 workstation. PastePrintscreenHere Make snapshot of VM . To complete this challenge. you must use the Performance Monitor console to display the data you gathered for the counters in the Memory performance object that you collected. Write out the procedure you used to display the data and take a screen shot of the console showing the collector set data by pressing Alt+Prt Scr. and then paste it below by pressing Ctrl+V. Take a screen shot of Which performance counters would you like to log? by pressing Alt+Prt Scr. and then it below by pressing Ctrl+V.

Login with the Student account and the password P@ssw0rd. Take a screen shot showing the Welcome message by pressing Ctrl+Prt Scr and then paste it below by pressing Ctrl+V. you will create and deploy local password and account policies.Close out of your VM. PastePrintscreenHere Step 12.1 Joining a Workgroup Overview In Exercise 12. Snapshot and Take Snapshot… Type in the name: After Ex 11 with a description of Exercise 11 activities complete & click on OK. you configure your workstation as a member of a workgroup. so that you can use all of the Windows 7 tools for creating local users and groups. Complete this on the VM you created NYC-CLa . Exercise L Overview Local Password and Account Policies You have discovered that users are not using secure passwords. In order to better secure your computer. Click on VM.1. LAB 12 WORKING WITH WORKGROUPS AND DOMAINS Exercise 12. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 Completion time 10 minutes 8.

4. Look at the properties of each of the following and type in your own words.2 Creating Local Users and Groups . 5. These policies control what happens when someone tries to log on using your account. Determines the amount of failed login attempts that can be tried. Determines the amount of time that needs to elapse till it is reset. but does not succeed. 1. 8 7. Administrative Tools 2. and then double click on Account Policies. Now click on Password Policy. 6. 3. PastePrintscreenHere Exercise 12. what each of the following mean: (fill in the table) Amount of time account remains locked out Account lockout duration Account lockout threshold Reset account lockout counter after vefore automatically becoming unlocked. Take a screen shot showing the Local Security Policy console by pressing Ctrl+Prt Scr and then paste it below by pressing Ctrl+V. Double click on Enforce password history and change the password history to Double click on Maximum password age and change the password age to 60 Double click on Minimum password length and change the password length to 6 9. and select Account Lockout Policy. System & Maintenance. Double click on Local Security Policy. Click on Start. 8.Completion time 15 minutes The steps in this lab are NOT in the textbook or in the Lab manual. Double click on Password must meet complexity requirements and change it to enabled 10. Control Panel.

Jay Adams. Ltd. PastePrintscreenHere Exercise 12. Complete this on the VM you created NYC-CLa Completion time 15 minutes Questio policy requirements? n 1 In what way(s) did the password you tried to use not meet the password It was not long enough Table 12-3 Proposed passwords Password Smadaj jadams000 Jadams1! Password Pa$$w0rd Reason for Failure (NOT “does not meet requirements – more detailed reason) Not complex Contains user name Contains user name Default password This password is acceptable.3 Using the Local Users and Groups Snap-In .Overview The new hires in the Accounting department at Contoso. you create a new local user account for the director of the accounting department. In Exercise 12.2. need local user accounts for their workgroup computers—not only for themselves. using the Windows 7 User Accounts control panel.Take a screen shot of the Choose the user account you would like to change page with the new account you created by pressing Ctrl+Prt Scr. but also for other department workers who need access to their data. 13. and then paste it below by pressing Ctrl+V.

PastePrintscreenHere Exercise 12. Step 8: NOTE: user name = account name. and then paste it below by pressing Ctrl+V. you decide to create the rest of the local accounts for the computer using the Local Users and Groups snap-in for Microsoft Management Console (MMC) instead. Therefore. Take a screen shot of the Computer Management console with the new accounts you created by pressing Ctrl+Prt Scr.4 Managing Group Memberships . it does not provide access to all of the user account properties you need to secure the computer. Unselect User Must change Password at Next Logon 9. description = position. Complete this on the VM you created NYC-CLa Completion time 15 minutes What tasks can you perform in the JAdams Properties dialog box that you Questio could not perform in the User Accounts control panel? What to do with the Password you used earlier and what happens with the n 2 password.Overview You have discovered that while the User Accounts screen makes it easy to create accounts for local users.

has ordered that every workgroup computer have two additional local groups created on it. In the Local Users and Groups snap-in. · · · · administrative assistants Bookkeeping—Director. shift supervisors. administrative assistants Bookkeeping group: bookkeepers. bookkeepers. She has also provided you with the following group membership assignments that must be implemented on every workgroup computer. administrative assistants Administrators—Director. bookkeepers. · Accounting—Director. called Accounting and Bookkeeping. and then paste it below by pressing Ctrl+V. you must manually configure the group memberships for the new users. The IT director of Contoso. bookkeepers Users—Director. Take a screen shot of the Computer Management console showing the contents of the Groups folder by pressing Ctrl+Prt Scr. shift supervisors Power Users—Director. you have two account type options (Standard User and Administrator) to choose from that are actually a means of creating memberships in the Users and Administrators groups. administrative assistants . Step 10: Accounting group: shift supervisors. Ltd. shift supervisors. administrative assistants Complete this on the VM you created NYC-CLa Completion time10 minutes Questio How many built-in local groups are there on the computer? 14 n 3 5. respectively. PastePrintscreenHere Questio Of which group(s) is Jay Adams currently a member? n 4 He is a member of the Users group.Overview When you create local user accounts with the User Accounts control panel.

Take a screen shot showing the Welcome message by pressing Ctrl+Prt Scr and then paste it below by pressing Ctrl+V.5 Joining a Domain Overview Now that you have created the new local user accounts and group memberships on the workstation. shift supervisors. and then add the users to the correct groups. You must also enable the Active Directory Users and Computers console.4. net net net net net user JAdams Pa$$w0rd /add accounting JAdams /add bookkeeping JAdams /add administrators JAdams /add power users JAdams /add administrative assistants . bookkeepers. Write a list of Net.com domain.exe command line utility. 12. according to the following assignments: · Accounting—Director. you will rejoin the computer to the contoso. To complete this challenge. Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01 Completion time 10 minutes 8. bookkeepers.Exercise 12.1: CREATE DOMAIN USERS AND GROUPS Completion time 15 minutes In Exercises 12.4.exe commands that will create a user account for the Director Jay Adams (JAdams). administrative assistants · Bookkeeping—Director. shift supervisors. PastePrintscreenHere LAB CHALLENGE 12. so that you can work with domain users and groups. provided with the Remote Server Administration Tools package installed earlier.2. the users from Table 124. administrative assistants · Domain Admins—Director. you must complete the same tasks by creating domain users and groups using the Net.3. and 12. you created several local user accounts and two local groups. shift supervisors · Enterprise Admins—Director · Domain Users—Director. and the groups from Exercise 12. and then added the users as members of the appropriate groups.

Then open the Active Directory Users and Computer console and take a screen shot of the console. Click on VM. but not graded NOT submitted. open an elevated command prompt on your workstation and execute the commands. click on Tools. you must submit the LabC (this file) to Blackboard under Project Submission by the due date listed on your syllabus for full credit. After you have submitted. Snapshot and Take Snapshot… Type in the name: After LabC with a description of LabC activities complete & click on OK. . from inside blackboard. My Grades Submitted. This shows that either your computer locked up or you lost connection to the internet OR you clicked on Save instead of Submit. Submit assignment to blackboard When your assignment is complete. Your instructor can clear this indicator if you email them. Make snapshot of VM Close out of your VM.When you are finished. showing the users and groups you created.