Windows Server 2012 R2

This document provides a comprehensive guide to Windows Server 2012 R2. It covers topics such as computer preparation, active directory design and installation, and active directory management. The document includes step-by-step instructions and screenshots for easy understanding.

Running Head: WINDOWS SERVER 2012 R2 1
Windows Server 2012 R2
Institution
Date
Name

WINDOWS SERVER 2012 R2
2
Table of Contents
Task 1- Computer Preparation.....................................................................................................................3
Root-DC Setup.........................................................................................................................................3
IPCONFIG /All Command.........................................................................................................................4
Task 2- Active Directory Design and Initial Setup........................................................................................5
Task 3: Active Directory Installation............................................................................................................8
Task 4 : Active Directory Management.......................................................................................................9
A – Group Management..........................................................................................................................9
Melbourne Security Group................................................................................................................11
B-User Account Management...............................................................................................................11
Created a new user named ADTest_User..........................................................................................12
C – Policies Applications............................................................................................................................14
D – Software Restriction............................................................................................................................15

WINDOWS SERVER 2012 R2
3
Task 1- Computer Preparation
Root-DC Setup
The root domain controller is setup and named Root-Dc Computer
How the Root-DC computer was setup
This is pretty simple, once the Root-Dc computer is added; we just need to promote it to
become a domain controller. On the dashboard for Server Manager, click the flag icon at the top
(this is seen in the screenshot above)having the exclamation point and click the option
written Promote this server to a domain controller. Next, Setting up the other two other
computers (COM-A and COM-B); This was done by right clicking on All servers and selecting
add server.

WINDOWS SERVER 2012 R2
4
IPCONFIG /All Command
The dashboard; this is where all operations on our server can be accesses easily at a glance

WINDOWS SERVER 2012 R2
5
Task 2- Active Directory Design and Initial Setup
Open the Server Manager from the task manager bar. From the Server Manager dashboard,
select Add roles and highlights. On the Installation Type screen, select Role-based or based
features and then click next.

WINDOWS SERVER 2012 R2
6

WINDOWS SERVER 2012 R2
7

WINDOWS SERVER 2012 R2
8
Task 3: Active Directory Installation

WINDOWS SERVER 2012 R2
9
Task 4 : Active Directory Management
A – Group Management
The first thing before beginning group management task is to configure the Active Directory
auditing capabilities so as to log group additions, deletions and membership modifications.
Install group policy management.
In the Server Manager principle windows, click "Add roles and features".
In the "Roles and Features Wizard" under "Installation Type" tick the "Role based or feature
based establishment" radio catch and snap "Next".
In the "Include Roles and Features Wizard" under "Server Selection" check the "Select a server
from the server pool", select the server you need to introduce the Group Policy Management
Console Tools (GPMC) on and click "Next"
click "Next"
In the "Include Roles and Features Wizard" under "Highlights" look down and tick "Group
Policy Management". Snap "Next" If provoked to introduce any supporting roles, acknowledge
the defaults and proceed.
In the "Include Roles and Features Wizard" at the "Affirmation" page tick "Install" to start the
establishment of the Group Policy Management Console Tools (GPMC)

WINDOWS SERVER 2012 R2
10
Screenshot shows Melbourne group created.

WINDOWS SERVER 2012 R2
11
Melbourne Security Group
B-User Account Management
From the Server 2012 Start screen, hold Windows Key + X. Doing this opens a context menu.
Choose Computer Management from this context menu that opens. From the navigation tree to
the left of the Computer Management, window choose Local Users and Groups. To bring in
additional users now, right-click on Users and select "New User”.

WINDOWS SERVER 2012 R2
12
Created a new user named ADTest_User

WINDOWS SERVER 2012 R2
13
Ensuring that User must change password at the first logon
User shown below in list

WINDOWS SERVER 2012 R2
14
C – Policies Applications
Consequetly delete the contents of the ….\Windows\Temp directory each time user
ADTest_User signs on to a computer as shown in screenshot below.

WINDOWS SERVER 2012 R2
15
D – Software Restriction
Used a software restriction policy to block ADTest_User from opening the executable named
iexplore.exe (windows internet explorer)
Open the Server Manager and dispatch the Group Policy Management:
Make another Group Policy Object and give a name to the new Group Policy Object:
Alter the Computer Configuration:

WINDOWS SERVER 2012 R2
16
You will discover the Software Restriction Policies under the way Computer Configuration – >
Windows Settings – > Security Settings. Make New Software Restriction Policies:

WINDOWS SERVER 2012 R2
17
On Additional Rules, right click and select create New path rule and provide the path to
iexplorer.exe This will prevent this application from being used in this domain.

WINDOWS SERVER 2012 R2
18