Application Security
Lab 1: Implementing Access Controls with Windows Active Directory
8
9 | LAB #1 Implementing Access Controls with Windows Active Directory
SECTION 1: Hands-On Demonstration
Part 1. User and Group Administration
23. Make a screen capture showing the members of the Managers group and paste it into your Lab Report file.
Part 2. Resource Management
19. Make a screen capture showing the updated share permissions for the MGRfile folder and
paste it into your lab report.
20. Make a screen capture showing the updated share permissions for the HRfiles folder and paste it into your lab report.
21. Make a screen capture showing the updated share permissions for the SFfiles folder and paste it into your lab report.
Part 3. Practical Application
13. Make a screen capture showing the text file for HRUser01 in the HRfiles folder and paste it into your Lab Report file.
14. Make a screen capture showing the text file for SFManager in the SFfiles folder and paste it into your Lab Report file.
15. Make a screen capture showing the text file for SFManager in the MGRfiles folder and paste it into your Lab Report file.
Part 1. User and Group Administration
7 Make a screen capture showing the two new users within the Contractors OU and paste it into your Lab Report file.
Part 2. Resource Management
4. Make a screen capture showing the contents of the CoreFiles directory and paste it into the Lab Report file
14. Make a screen capture showing Advanced Security Settings for the yourtown directory and paste it into the Lab Report file.
Part 3. Modify Permissions Using a Script
5. Make a screen capture showing the result of attempting to create a new test file and paste it into the Lab Report file.
7. Repeat steps 2-4 for the ANewuser account and describe the results in the Lab Report file.
10. Repeat step 4 and describe the results in the Lab Report file.
11. In the Lab Report file, explain why you received the results you did in steps 4, 7, and 10.
SECTION 3: Lab Challenge and Analysis
Analysis and Discussion
1. Use the Internet to research the SYSTEM account. Why is it necessary to include this account with full control on a directory?
12. Using the icacls utility, document the command that will give the ANewuser account write access to the yourschool folder.
13. Using your work in this lab as a guide, create a three-level directory structure for your family tree (grandparents, parents, children). You will need to create user accounts for each member of the family (at least 2 in each generation), create groups for each generation, and then secure the folders so that only members of a single generation can write to files within that generation’s directory. Make screen captures to document your progress and describe your process.
Copyright © 2017 by Jones & Bartlett Learning, LLC, an Ascend Learning Company. All rights reserved. www.jblearning.com Student Lab Report