LAB 8 WORKSHEET

SECURING A SERVER

This lab contains the following exercises and activities:
Exercise 8.1 Exercise 8.2 Exercise 8.3 Exercise 8.4 Lab Review Lab Challenge Creating Users and User Groups Creating a Share Assigning Permissions Testing Share Access Questions Configuring Password Policies

Exercise 8.1
Overview

Creating Users and User Groups
In this exercise, you create the user accounts for the Accounting department staff as well as the groups that you will use to provide them with the permissions they need. 15 minutes

Completion time

1

.2 MOAC Windows Server 2008 Administrator. and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided. showing the Accounting## OU and the objects you created in it. Exam 70-646 24. Press Ctrl+Prt Scr to take a screen shot of the Active Directory Users and Computers console.

what roles are currently installed on the computer? DHCP Server. Print Services Why is the NFS option grayed out on the Share Protocols page? Because NFS is not installed on this server.Lab 8: Securing a Server 3 Exercise 8. you create the network share where the Accounting department will store its confidential files. Question 2 .2 Overview Completion time Creating a Share In this exercise. File Server. 10 minutes Question 1 According to the Server Manager console.

. Exam 70-646 16. and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided. Press Ctrl+Prt Scr to take a screen shot of the Share and Storage Management console.4 MOAC Windows Server 2008 Administrator. showing the share you just created.

20 minutes Completion time . you create domain local groups and assign the NTFS permissions that will grant the groups access to the folders on the network share. Exercise 8.Lab 8: Securing a Server 5 Question 3 What installed roles appear in the Server Manager console now? Why has there been a change? File services was already installed.3 Overview Assigning Permissions In this exercise.

Press Ctrl+Prt Scr to take a screen shot of the Budget Properties sheet. showing the Security tab and the three security principals you just added.6 MOAC Windows Server 2008 Administrator. Exam 70-646 17. and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided. .

a member of the Acctg##-Full group. 15 minutes Question 4 Why is the LeoG## account able to open the file.4 Overview Completion time Testing Share Access In this exercise.1. you test the permissions you created by logging on using the accounts you created in Exercise 8.Lab 8: Securing a Server 7 Exercise 8. a member of the Acctg##-RW group. Question 6 . unable to modify the Report## file? Because Karen was also added to the Acctg12-users group and that group has read-only access and also share permissions have not been set yet. Question 5 What is the result? Permission to modify the file is denied Why are KarenA##. and MarieR##. but not modify it? He has read-only permissions.

In a previous step we assigned NTFS permissions. So we would need to go to the share folder and right click to properties and assign permissions. list the steps you must perform to correct the problem and enable the members of the Acctg##-Full and Acctg##-RW groups to modify the Report## file. On your worksheet. Exam 70-646 18. Now.8 MOAC Windows Server 2008 Administrator. we would need to assign share permissions as well. .

10 minutes In Exercise 8. what test could you perform to prove that your reason for KarenA##’s and MarieR##’s inability to modify the Report## file is correct? I could try assigning the share permissions to the different groups and see if they can modify the report.4. what would happen if you accidentally reversed the group memberships and tried to add the Budget##-Full group as a member of the Acctg##-Full group? The n users that are not supposed to have specific permissions to folders would be able to modify files in it. what would you have to do to grant him the permissions to the Budget share that he needs? Move his 'user object' to the container users instead of intern. 2. In Exercise 8.Lab 8: Securing a Server 9 LAB REVIEW QUESTIONS Completion time 1. If Leo Giakoumakis is hired as a full-time employee after his internship ends.3. 3. .