Application Security

profileLeakhena@80
WinSec-Lab-1-Report-Template-v32.docx

Lab 1: Implementing Access Controls with Windows Active Directory

8

9 | LAB #1 Implementing Access Controls with Windows Active Directory

SECTION 1: Hands-On Demonstration

Part 1. User and Group Administration

23. Make a screen capture showing the members of the Managers group and paste it into your Lab Report file.

Part 2. Resource Management

19. Make a screen capture showing the updated share permissions for the MGRfile folder and

paste it into your lab report.

20. Make a screen capture showing the updated share permissions for the HRfiles folder and paste it into your lab report.

21. Make a screen capture showing the updated share permissions for the SFfiles folder and paste it into your lab report.

Part 3. Practical Application

13. Make a screen capture showing the text file for HRUser01 in the HRfiles folder and paste it into your Lab Report file.

14. Make a screen capture showing the text file for SFManager in the SFfiles folder and paste it into your Lab Report file.

15. Make a screen capture showing the text file for SFManager in the MGRfiles folder and paste it into your Lab Report file.

SECTION 2: Applied Learning

Part 1. User and Group Administration

7 Make a screen capture showing the two new users within the Contractors OU and paste it into your Lab Report file.

Part 2. Resource Management

4. Make a screen capture showing the contents of the CoreFiles directory and paste it into the Lab Report file

14. Make a screen capture showing Advanced Security Settings for the yourtown directory and paste it into the Lab Report file.

Part 3. Modify Permissions Using a Script

5. Make a screen capture showing the result of attempting to create a new test file and paste it into the Lab Report file.

7. Repeat steps 2-4 for the ANewuser account and describe the results in the Lab Report file.

10. Repeat step 4 and describe the results in the Lab Report file.

11. In the Lab Report file, explain why you received the results you did in steps 4, 7, and 10.

SECTION 3: Lab Challenge and Analysis

Analysis and Discussion

1. Use the Internet to research the SYSTEM account. Why is it necessary to include this account with full control on a directory?

Tools and Commands

12. Using the icacls utility, document the command that will give the ANewuser account write access to the yourschool folder.

Challenge Exercise

13. Using your work in this lab as a guide, create a three-level directory structure for your family tree (grandparents, parents, children). You will need to create user accounts for each member of the family (at least 2 in each generation), create groups for each generation, and then secure the folders so that only members of a single generation can write to files within that generation’s directory. Make screen captures to document your progress and describe your process.

Copyright © 2017 by Jones & Bartlett Learning, LLC, an Ascend Learning Company. All rights reserved. www.jblearning.com Student Lab Report