Senior Project

As my senior project for UNK, I chose to create a virtual Active Directory domain environment to simulate an actual use-case. A fictional organization was created as a basis for the AD configuration. This project was done with one fellow student.

The domain consisted of 3 VMs: 1 server, 2 clients. Several users were created to test for various different group policy and security group configurations. Shared folders were created with security groups to manage and grant access to these shares. OUs were also used to allow for various GPO configurations and limit access where appropriate – the idea was to give users only the access they needed to perform their work effectively. Server hardening was also done by disabling services, increasing the password length, and more.

Materials
  • Slide Show Presentation

Senior Project

Project Complete, Reflections

As the semester comes to its conclusion, so does our project.  We chose to build an Active Directory domain because it is an industry standard in the field of systems administration. During the last few months, we have learned a lot about the creation and management of a domain.  Challenges were presented in the form of limited resources or systems not…

Senior Project

Documentation & Presentation

The technical aspects of the project are now pretty much complete.  We have a functional domain that meets all of the testing requirements.  It is essentially ready for deployment.  This week we built and completed the documentation for the domain – the idea is that this documentation would be used by IT personnel to get a basic understanding of the…

Senior Project

Powershell Integration and Testing

This week was quite productive.  We downloaded the Powershell scripts I wrote for work so we could begin implementing some test-cases using both Powershell and the MMC console.  The first problems we ran into were ExecutionPolicy issues – we resolved these by modifying the default execution policy for the IT\ElevatedPrivs OU and running Powershell as an administrator.  We had to use net…

Senior Project

Sprint 1 Complete

Today marks the official conclusion of Spring 1 and the mid-point for the project.  We’ve accomplished a number of things during the first half of the project: Set up virtual machines on a VMWare server Due to resource limitations, we couldn’t obtain a 3rd client machine Create and configure Active Directory Create and configure file shares Set up users and…

Senior Project

SCCM Followup & Server Hardening

This week we continued our break from GPOs by following up on the research into SCCM.  We’ve decided to postpone implementation of SCCM for the time being.  During our research we watched a few videos on the implementation of SCCM and found some trial versions available from Microsoft for the 2016 version. While implementation doesn’t appear to be prohibitively difficult,…

Senior Project

SCCM Research

This week we took a break from setting up group policy objects to review System Center Configuration Manager and see whether we’d have the time and resources to set up SCCM on our domain.  SCCM is a system used to deploy software automatically via Active Directory. We believe that if we have extra time we can implement an SCCM system…

Senior Project

More Group Policies

We have been finishing up on the creation and setup of departmental shared drives and their automated mappings with GPOs. Default GPOs have been refined to further reduce unnecessary accesses from basic users.   Our GPOs are becoming more focused and less broad – each newer GPO has a specific set of accesses it will configure.   We’ve begun to…

Senior Project

Planning and Configuration

The second week is coming to a close.  We have mostly fleshed out the organizational structure of the Nimbus Organization.  The Call Center and Headquarters have been set up with their respective departmental subOUs. Some specialized OUs such as the IT department subOU “ElevatedPrivs” were created in order to allow for more fine tuning of GPO accesses.  Speaking of GPOs,…

Senior Project

Setting Up the Environment

This week has been primarily about getting all of the VMs set up.  We have successfully created an Active Directory domain with the Windows Server configured as the primary domain controller.  The client machines were both added to the domain and their DNS settings pointed to the domain controller IP. Following the successful setup of AD – we decided on…

Senior Project

Project Startup

Active Directory Domain Sr. Project Team members:  Chase & Logan Our project will be a virtual Active Directory domain, complete with a server and 3 client machines.   After speaking to Kyle, we discovered that due to hardware limitations, we could only have 4 VMs.  The 3 client machines will probably each have different versions of Windows installed – this…