You are on page 1of 9

LAB 8 WORKSHEET

SECURING A SERVER

This lab contains the following exercises and activities:
Exercise 8.1 Exercise 8.2 Exercise 8.3 Exercise 8.4 Lab Review Lab Challenge Creating Users and User Groups Creating a Share Assigning Permissions Testing Share Access Questions Configuring Password Policies

Exercise 8.1
Overview

Creating Users and User Groups
In this exercise, you create the user accounts for the Accounting department staff as well as the groups that you will use to provide them with the permissions they need. 15 minutes

Completion time

1

2 MOAC Windows Server 2008 Administrator. showing the Accounting## OU and the objects you created in it. . and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided. Exam 70-646 24. Press Ctrl+Prt Scr to take a screen shot of the Active Directory Users and Computers console.

Question 2 . 10 minutes Question 1 According to the Server Manager console.Lab 8: Securing a Server 3 Exercise 8. Print Services Why is the NFS option grayed out on the Share Protocols page? Because NFS is not installed on this server. what roles are currently installed on the computer? DHCP Server. File Server.2 Overview Completion time Creating a Share In this exercise. you create the network share where the Accounting department will store its confidential files.

4 MOAC Windows Server 2008 Administrator. and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided. . Press Ctrl+Prt Scr to take a screen shot of the Share and Storage Management console. Exam 70-646 16. showing the share you just created.

Exercise 8. you create domain local groups and assign the NTFS permissions that will grant the groups access to the folders on the network share. 20 minutes Completion time .Lab 8: Securing a Server 5 Question 3 What installed roles appear in the Server Manager console now? Why has there been a change? File services was already installed.3 Overview Assigning Permissions In this exercise.

showing the Security tab and the three security principals you just added. Press Ctrl+Prt Scr to take a screen shot of the Budget Properties sheet. and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided. Exam 70-646 17. .6 MOAC Windows Server 2008 Administrator.

a member of the Acctg##-RW group. and MarieR##. unable to modify the Report## file? Because Karen was also added to the Acctg12-users group and that group has read-only access and also share permissions have not been set yet. a member of the Acctg##-Full group. but not modify it? He has read-only permissions. 15 minutes Question 4 Why is the LeoG## account able to open the file.1. you test the permissions you created by logging on using the accounts you created in Exercise 8.Lab 8: Securing a Server 7 Exercise 8.4 Overview Completion time Testing Share Access In this exercise. Question 5 What is the result? Permission to modify the file is denied Why are KarenA##. Question 6 .

8 MOAC Windows Server 2008 Administrator. Now. we would need to assign share permissions as well. . Exam 70-646 18. On your worksheet. list the steps you must perform to correct the problem and enable the members of the Acctg##-Full and Acctg##-RW groups to modify the Report## file. In a previous step we assigned NTFS permissions. So we would need to go to the share folder and right click to properties and assign permissions.

.4. what test could you perform to prove that your reason for KarenA##’s and MarieR##’s inability to modify the Report## file is correct? I could try assigning the share permissions to the different groups and see if they can modify the report. 2.Lab 8: Securing a Server 9 LAB REVIEW QUESTIONS Completion time 1. what would you have to do to grant him the permissions to the Budget share that he needs? Move his 'user object' to the container users instead of intern. In Exercise 8. what would happen if you accidentally reversed the group memberships and tried to add the Budget##-Full group as a member of the Acctg##-Full group? The n users that are not supposed to have specific permissions to folders would be able to modify files in it. 3. If Leo Giakoumakis is hired as a full-time employee after his internship ends.3. 10 minutes In Exercise 8.