Problem with current ● Every server maintains its local

database of users and controls its own

setup access.​
● The printers are open to all users
without control​
● Some users share one common
account and password when accessing
servers and printers​
● accountability problem as files go
missing regularly and must be restored.
​
● Creation of these users via the
graphical user interface takes too long​
● Users face problem saving files
 Eddie
Suggestion 1

Implement server running Windows Server 2016 with Active Directory setup

● Easier for administrators to have centralised control for all PCs on the same domain
● User CAL should be used as each user has to access more than one device

Windows Features & Roles to install

Active Directory Domain Services

● Centralised management of all users from domain controller
File & Storage Services​
● Set up file servers to provide centralized location for file storage to share among users
Remote Desktop Services​
● Allow for users to access company’s printer from home
Print and Document Services​
● Allows for centralized print server and network printer
Windows server backup
● Provides backup and recovery in case of emergency
 Eddie
Suggestion 2

Set up Active Directory Services

● One forest with a domain and 3 Organizational unit

● Separation of each department for easy security policy

implementation

● Allows for centralised management of all user accounts

from the domain controller

● Users will not need to share accounts, account can be

logged on to any computers on the domain

Logical Structure
 Eddie

Set up Active Directory Services (Cont.)

● For the future expansion of the company, another

domain can be added.

● Both domain will have a Two-Way Transitive trust

● All domain controllers within the same forest are

equivalent

● Future domains will have the domain name

format, <country-name>.adatum.com adatum.com
Suggestion 3 Norish
Access control mechanism

Users face problem saving files with the permissions set below:

Group File Permission Share Permission

Finance team members Read & execute File permission Read

Admin Write File permission Read

Finance Managers & Team Full Control Read

Member
Suggestion 4

Create a PowerShell script to bulk create all users in Active Directory Norish

Import the CSV file to create with the attributes:

● Name
● samAccountName
● ParentOU
● ParentGroup
● EmailAddress

- Import.csv cmdlet allows to read data from a csv file in a table format.
- It loops through the items using For-Each object to read the user data and assign it to a
variable
PDT