Crossroads Training Institute

Gusa National Highway, Cagayan de Oro City

0917-634-3009 | 0975-503-2089
crossroads.techvoc@gmail.com

UC3 – Set-up Computer Servers

1.) Router Configuration
Network: 192.168.100.1
DHCP: Disabled
2.) Manual IP Address Assigning
SERVER CLIENT
IP ADDRESS: 192.168.100.2 192.168.100.3
SUBNET MASK: 255.255.255.0 255.255.255.0
DEFAULT GATEWAY: 192.168.100.1 192.168.100.1
Preferred DNS: 192.168.100.2 192.168.100.2
Alternate DNS: ---.----.-----.---- (Leave it Blank) ---.----.-----.---- (Leave it Blank)
PING Server to Client PING Client to Server
Note: Turn off Windows Firewall
3.) Active Directory Domain Services
SERVER CLIENT
1.) Click Start -> Administrative Tools -> Server Manager
2.) Click Add roles -> Next
3.) Check “Active Directory Domain Services” NO Activity
4.) Next -> Next -> Install
5.) After installation -> Close
4.) DNS Server (dcpromo.exe)
SERVER CLIENT
1.) Start -> RUN -> Type "dcpromo.exe"
2.) Next -> Next -> Select "Create a new forest"
3.) Type Required FQDN Root Domain (cti.com) -> Next
4.) Select "Windows Server 2008 R2" -> Next
1.) Start -> My Computer -> Right Click Properties
5.) [/] DNS Server -> Next -> YES
2.) Change Settings -> Change
6.) Next -> Server Password (SERVERAdmin1) -> Next
3.) Member of -> Domain: cti.com
7.) Next -> [/] Reboot on completion
4.) OK -> CLOSE -> Restart Now
8.) After reboot -> Log-on to Administrator
9.) Check Computer Properties -> Domain: cti.com
10.) Change "Preferred DNS SERVER 127.0.0.1" to
“192.168.100.2”
5.) Dynamic Host Configuration Protocol (DHCP Server)
SERVER CLIENT
1.) Click Start -> Administrative Tools -> Go to SERVER
MANAGER -> ROLES -> Add Roles
2.) Next -> Select DHCP Server -> Next-> Next
3.) Check IP Address same in Server's IP Address -> Next 1.) Go to Network and Sharing
4.) Check Parent Domain: 2.) Change adapter settings
3.) Internet Protocol version 4 (IPv4)
Check Preferred DNS Server (Validate)
4.) Properties
Next
5.) Obtain the IP Address
5.) Select "WINS is not required" -> Next
6.) Obtain the P. DNS
6.) Add DHCP Scope
7.) Then go to CMD
7.) Scope Name (CTI Computers)
8.) type ipconfig
Start IP 192.168.100.10 9.) Your IP must be the start IP of your scope
End IP 192.168.100.20
8.) Default Gateway (Router's IP Address)
9.) Ok -> Next -> DISABLE DHCPv6 -> Next

Page | 1
10.) Select "Use current credentials" -> Next
11.) Install then close
12.) Go to Administrative Role -> Go to DHCP
Click under domain (cti.com)
Expand IPv4
Locate the Scope Name (CTI Computers)
Locate "Scope Options"
Right Click "Configure Options"
003 Router Add Router IP Address
006 DNS Server Add Server's IP Address
015 DNS Domain Name Type Domain Name
6.) Create Organizational Unit and Users
SERVER CLIENT
1.) Click Start -> Administrative Tools -> Go to "Active
Directory Users and Computers"
2.) Click "cti.com" or domain
3.) Right Click -> New -> Organizational Unit
4.) Type Organizational Unit Name (KIA) then Ok
5.) Right Click Under Organizational Unit 1.) Client -> Switch User
6.) New -> Users 2.) Try to Log-in the user you created
7.) Type details and log-on name -> Next
8.) Create Password
9.) [/] User cannot change password
10.) [/] Password never expires
11.) Next -> Finish
7.) User Home Directory
SERVER CLIENT
1.) Create Shared Folder (Family Name) in Local Disk D.
2.) Right Click -> Properties
3.) Sharing
4.) Advanced Sharing
5.) Share this folder
6.) Share name add "$"
7.) Permissions
8.) Remove Everyone
9.) Add
10.) Advanced
11.) Find now 1.) Sign Out or Log-off the Computer
12.) Domain Users -> Ok -> Ok -> Full Control - Apply Ok -> 2.) Relog-in
Apply Ok 3.) Go to My Computer/This PC
13.) Share .. 4.) Client must have the Network Location below the Local
14.) Add Everyone -> Read/Write Disk C and Local Disk D
15.) Start -> Administrative Tools -> Go to Active Directory
Users and Computer
16.) Expand Domain Name (cti.com)
17.) Click Organizational Unit created
18.) Locate USER then RIGHT Click -> Properties
19.) Go to Profile
20.) Home Folder
21.) Connect Z: (Folder Network Path)
22.) Add "\%username%"
23.) 19. Apply -> Ok
8.) GPO Folder Redirection
SERVER CLIENT
1.) Start -> Administrative Tools -> Group Policy 1.) Go to Command Prompt
Management 2.) Type “gpupdate /force”
Page | 2
2.) Expand Domain Name 3.) Type Y or Sign-out/Log-off
3.) Expand Domains 4.) Start -> Go to My computer/This PC
4.) Click "cti.com" 5.) Open Network Location
5.) Click Under Organizational Unit (KIA) 6.) Client must have “Documents” inside the network
6.) Right Click -> Create a GPO location
7.) Rename "GPO Folder Redirection" -> Ok
8.) Then Right Click "Edit"
9.) Go to User Configuration
10.) Policies
11.) Windows Setting
12.) Click "Folder Redirection"
13.) Select "Documents"
14.) Right Click "Properties"
15.) Setting: Basic – Redirect
16.) Copy Root Path (Shared Folder)
17.) Setting Tab
18.) Uncheck "Grant the user."
19.) Apply -> Yes -> Ok
20.) Go to Command Prompt
21.) Type "gpupdate /force"
22.) Log-off
9.) GPO Printer Deployment
SERVER CLIENT
1.) Start -> Administrative Tools -> Group Policy
Management
2.) Expand Domain Name
3.) Expand Domains
4.) Click "cti.com"
5.) Click Under Organizational Unit (KIA)
6.) Right Click -> Create a GPO
7.) Name it. “GPO Printer Deployment”
8.) Start -> Administrative Tools -> Server Manager -> Add
Roles
9.) Print and Document Services -> Next -> Next
10.) Print Server -> Next
11.) Install -> Close 1.) Go to Command Prompt
12.) Add Printer (EPSON AL-2600) 2.) Type “gpupdate /force”
13.) Use existing port 3.) Type Y or Sign-out/Log-off
14.) Share Printer 4.) Start -> Devices and Printers/Printers and Scanners
15.) Start -> Administrative Tools -> Print Management 5.) Client must see the deployed printer
16.) Click All Printer
17.) Locate Printer Installed
18.) Right Click -> Deploy with Group
19.) Browse
20.) Select “GPO Printer Deployment” then OK
21.) [/] The User
22.) [/] The computer
23.) Add
24.) Apply
25.) Ok
26.) Ok
27.) Open Command Prompt -> gpupdate /force
10.) GPO User Control
SERVER CLIENT
1.) Start -> Administrative Tools -> Group Policy 1.) Go to Command Prompt
Management 2.) Type “gpupdate /force”
Page | 3
2.) Expand Domain Name 3.) Type Y or Sign-out/Log-off
3.) Expand Domains 4.) Log-in
4.) Click "cti.com" 5.) Client cant access the Control Panel
5.) Click Under Organizational Unit (KIA)
6.) Right Click -> Create a GPO
7.) Name it. “GPO User Control”
8.) Right Click the GPO -> Edit
9.) User Configuration
10.) Policies
11.) Administrative Templates
12.) Control Panel
13.) Prohibit access to the Control Panel
14.) Edit
15.) Enabled
16.) Apply -> Ok
17.) Open Command Prompt -> gpupdate /force -> log-off
18.) Right Click the GPO -> Edit
19.) User Configuration
20.) Policies
1.) Go to Command Prompt
21.) Administrative Templates
2.) Type “gpupdate /force”
22.) System
3.) Type Y or Sign-out/Log-off
23.) CTRL + ALT + DEL Options
4.) Log-in
24.) Remove Task Manager
5.) Client cant access the Task Manager
25.) Enabled
26.) Apply -> Ok
27.) Open Command Prompt -> gpupdate /force -> log-off
28.) Right Click the GPO -> Edit
29.) User Configuration
30.) Policies
31.) Administrative Template 1.) Go to Command Prompt
32.) Windows Components 2.) Type “gpupdate /force”
33.) Windows Explorer 3.) Type Y or Sign-out/Log-off
34.) Locate "Hide these specified drives in My Computer" 4.) Log-in
35.) Enabled 5.) Client must Hide the local disk C in computer
36.) Restrict C drive only
37.) Apply -> Ok
38.) Open Command Prompt -> gpupdate /force -> log-off
39.) Create a picture then save it as JPEG. Save it in your
shared folder.
40.) Right Click the GPO -> Edit
41.) User Configuration
42.) Policies
1.) Go to Command Prompt
43.) Administrative Templates
2.) Type “gpupdate /force”
44.) Desktop
3.) Type Y or Sign-out/Log-off
45.) Desktop Wallpaper
4.) Log-in
46.) Enabled
5.) Client must change the desktop wallpaper
47.) Paste the folder path of the picture you created then
add the file name of your picture.
48.) Apply -> Ok
49.) Open Command Prompt -> gpupdate /force -> log-off
11.) Remote Desktop Services
SERVER CLIENT
1.) Start -> Administrative Tools -> Local Security Policy
2.) Local Policies

Page | 4
3.) User Rights Assignments
4.) Locate "Allow log on through Remote Desktop Services"
5.) Right Click "Properties
6.) Add User or Group
7.) Advanced
8.) Find now
9.) Domain Users
10.) Apply
11.) Ok
12.) Start -> Administrative Tools -> Active Directory Users
and Computers
13.) Expand cti.com -> Organizational Unit -> Locate USER
14.) Right Click "Properties"
15.) Locate "Member of"
16.) Add
17.) Advanced
18.) Find now
19.) Remote Desktop Users
20.) Ok ---- > Apply
21.) Ok ---- > Apply ---- > OK
22.) Start -> Computer -> Right Click -> Properties -> Remote Start -> This PC -> Right Click -> Properties -> Remote
Settings Settings
23.) Allow connections only from computer (more secure) Allow connections
24.) Start -> Administrative Tools -> Server Manager -> Add
Roles
25.) Remote Desktop Services
26.) Next
27.) Select [/] Remote Desktop Session Host
[/] Remote Desktop Licensing
[/] Remote Desktop Connection Broker
Next
28.) Next -> Do not Required Network Level Authentication
29.) Next -> Add .. -> Domain Users -> Next
30.) Configure later -> Next -> Install
31.) Restart Now? YES
32.) Try to remote from SERVER to CLIENT Try to remote from CLIENT to SERVER
33.) Open “Remote Desktop Connection” Open “Remote Desktop Connection”
34.) Write down the IP Address of the CLIENT Write down the IP Address of the SERVER
35.) To know the IP Address -> cmd -> ipconfig To know the IP Address -> cmd -> ipconfig
12.) Real-time Desktop Sharing
SERVER CLIENT
NOTE: Before DOING THIS, REMOVE ALL GPO
gpupdate /force
gpupdate /force
1.) Share the Desktop of the Server
2.) Start -> Click Administrator -> Locate Desktop
3.) Click -> Right Click -> Properties -> Sharing
4.) Advanced Sharing -> Share this folder 1.) Go to Desktop -> Right Click -> Properties
5.) Permissions 2.) Location
6.) Everyone 3.) Type the network path of Server’s Desktop
7.) Full Control
8.) Share ..
9.) Everyone -> Add -> Read/Write -> Share -> Done

Page | 5