Exercise 1: Administer Computer Objects Through Their Life Cycle
Lab Setup
The virtual machines should already be started and available after completing Lab A. However, if they are not, you should complete steps 1 to 3 and then step through exercises 1 to 3 in Lab A before continuing.
You will be unable to successfully complete Lab B unless you have completed Lab A.
1. Start 6425C-NYC-DC1.
2. Log on to NYC-DC1 as Pat.Coleman_admin, with the password, Pa$$w0rd.
3. Start 6425C-NYC-SVR2. Do not log on until directed to do so.
Task 1: Configure computer object attributes.
1. On NYC-DC1, run Active Directory Users and Computers.
2. In the console tree, expand the contoso.com domain and expand the Client Computers OU, and then click SEA.
3. Right-click LNO8538, and then click Properties.
4. Click the Managed By tab.
5. Click the Change button.
6. Type Linda Mitchell and press Enter. Note that Linda's contact information is populated on the Managed By tab.
7. Click OK to close the computer Properties dialog box.
8. Repeat steps 3 through 7 to assign LOT9179 to Scott Mitchell.
9. Click LOT9179.
10. Press and hold CTRL while you click LNO8538. You should now have both computers selected.
11. Right-click either of the highlighted items, LNO8538 or LOT9179, and then click Properties.
12. Select the Change the description text for all selected objects check box.
13. Type Scott and Linda Mitchell.
14. Click OK.
Task 2: Add computers to software management groups.
1. In the console tree, click the SEA OU, right-click LOT9179 in the details pane, and then click Add to a group.
2. Type APP_ and press Enter. The Multiple Items Found dialog box appears.
3. Click APP_Project and click OK. A message appears: “The Add to Group operation was successfully completed.”
4. Click OK.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
Lab A: Create Computers and Join the Domain L5-9
5. In the console tree, expand the Groups OU, and then click Application.
6. Right-click APP_Project, and then click Properties.
7. Click the Members tab.
8. Click Add.
9. Type LNO8538 and press Enter. The Name Not Found dialog box appears. By default, the Select Users, Computers, or Groups interface does not search for computer objects.
10. Click Object Types.
11. Select the check box next to Computers, and then click OK.
12. Click OK to close the Name Not Found dialog box. Both computers can now be seen on the Members tab.
13. Click OK.
Task 3: Move a computer between OUs.
1. In the Client Computers\SEA OU, click LOT9179.
2. Drag LOT9179 into the VAN OU, visible in the console tree. A message appears that reminds you to be careful about moving objects in Active Directory.
3. Click Yes.
4. Right-click LNO8538 , and then click Move. The Move dialog box appears.
5. Expand the Client Computers OU, and then click the VAN OU.
6. Click OK.
Task 4: Disable, enable, and delete computers.
1. In the SEA OU, right-click DEP6152, and then click Disable Account. A confirmation message appears.
2. Click Yes. A message appears: “Object DEP6152 has been disabled.”
3. Click OK.
4. Right-click DEP6152, and then click Enable Account. A message appears: “Object DEP6152 has been enabled.”
5. Click OK.
6. Right-click DEP6152, and then click Delete. A confirmation message appears.
7. Click Yes.
Result: In this exercise, you added computers to software management groups, moved a computer between OUs, and deleted a computer.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
L5-10 Lab A: Create Computers and Join the Domain
Exercise 2: Administer and Troubleshoot Computer Accounts
Task 1: Reset a computer account.
1. In the VAN OU, right-click LOT9179, and then click Reset Account. A confirmation message appears.
2. Click Yes. A message appears: “Account LOT9179 was successfully reset.”
3. Click OK.
Task 2: Experience a secure channel problem.
1. Log on to NYC-SVR2 as Pat.Coleman, with the password, Pa$$w0rd.
2. Log off from NYC-SVR2.
3. Switch to NYC-DC1.
4. In the Active Directory Users and Computers console tree, expand the Servers OU, and then click the File OU.
5. Right-click NYC-SVR2, and then click Reset Account.
Because NYC-SVR2 is currently joined to the domain correctly, this step effectively breaks the trust relationship by resetting the account password on the domain without involving or informing NYC-SVR2. The computer therefore does not know its new password.
A confirmation message appears.
6. Click Yes. A message appears: “Account NYC-SVR2 was successfully reset.”
7. Click OK.
8. On NYC-SVR2, attempt to log on as Pat.Coleman, with the password, Pa$$w0rd. A message appears:
“The trust relationship between this workstation and the primary domain failed.”
9. Click OK.
Task 3: Reset the secure channel.
1. Switch to NYC-DC1.
2. In the Active Directory Users and Computers console tree, expand the Servers OU, and then click the File OU.
3. Right-click NYC-SVR2, and then click Reset Account. A confirmation message appears.
4. Click Yes. A message appears: “Account NYC-SVR2 was successfully reset.”
5. Click OK.
6. After resetting the secure channel, you can move NYC-SVR2 into a workgroup, and then rejoin the domain. It will join its reset account, thereby retaining its group memberships. Do not perform that step at this time.
Result: In this exercise, you resolved secure channel issues.
M C T U SE O N LY . S TU D EN T U SE P R O H IB IT ED
Lab A: Create Computers and Join the Domain L5-11