Windows 2003 Server
Consolidated Lab 1
Nov 20, 2009
Name:_______________________
In the following lab you are asked to complete several tasks you have
previously completed to set up a Windows 2003 Server. Instead of using Server
2003, this time you will use Windows Server 2008. After each lab task I have
include space for you to record your experience completing these tasks on
Server 2008.
Please pass in the lab pack when you have completed all tasks.
Student Server Static IP Domain Justin Benoit 172.16.144.20 region-a Vlad Chernyavdkyy 172.16.144.21 region-b Fred Chisholm 172.16.144.22 region-c Josh Christensen 172.16.144.23 region-d Clorice Fontaine 172.16.144.24 region-e Ryan Gamblin 172.16.144.25 region-f Eric Henderson 172.16.144.26 region-g Jake Jesso 172.16.144.27 region-h Adam Lucas 172.16.144.28 region-i Jason MacDonald 172.16.144.29 region-j Jayce MacDonald 172.16.144.30 region-k Pat MacDonald 172.16.144.31 region-l Bill MacEachern 172.16.144.32 region-m Aaron Miller 172.16.144.33 region-n Jamie Scott 172.16.144.34 region-o Chad Shearer 172.16.144.35 region-p Jonathan Wolfe 172.16.144.36 region-q Liam Yuill 172.16.144.37 region-r
1. Disable the Windows Shutdown Event Tracker a. Click Start, then click Run.
b. Type gpedit.msc, then click OK. The Group Policy Object Editor window opens. c. Double-click Local Computer Policy, Computer Configuration, Administrative
Templates, then double-click System.
d. On the right side of the screen, double-click Disable Shutdown Event Tracker. The Display Shutdown Event Tracker Properties dialog box opens.
2. Create and View a Boot Log File
In this exercise, you will reboot your computer and then enable boot logging. Finally, you will view the boot log file in Microsoft Notepad.
a. Click Start, and then click Shut Down and Restart.
b. During the reboot, press F8 to access the advanced startup options.
c. In the Windows 2003 Options menu, select Enable Boot Logging, and then press ENTER.
d. Log on to the server.
e. From the desktop, click Start, and then click Run.
f. In the Run dialog box, in the Open box, type C:\Winnt\Ntbtlog.txt and then click OK.
g. In the Ntbtlog - Notepad window, view the contents of the boot log file you created. h. Notice that the service pack level, date, and time are listed at the beginning of the
boot log file. Also notice that a complete list of the drivers that were loaded, and the drivers that were not loaded, is included in the file. This file can be used to
troubleshoot boot problems on computers running Windows 2003. i. Close Notepad.
You have successfully created and viewed a boot log file on your computer.
3. Create an extended partition a. Open the Disk Manager.
Select the free space from which you want to create a partition. b. Start the Create Partition Wizard.
c. Create a 6G extended partition.
c. Use the Create Volume Wizard to create a simple volume that takes up approximately half the available free space (3G)
d. Be prepared to select an appropriate drive letter, file system, allocation unit size, and volume label for your new volume and then complete the wizard.
5. Mount a volume.
a. Create a folder call “Lab” to be used as a mount point. b. Select or create a volume to be mounted.
c. Find and copy the following files to the mounted volume: notepad.exe, defrag.exe. d. Mount the volume to your mount point.
6. Create a stand alone Dfs server.
a. Create a folder called TestFiles on your server and copy some files into it. Share this folder with the default share properties.
b. Create a second folder on your server. Call this folder DFSRoot and share it with the default share properties.
c. Create a stand-alone Dfs root. Specify DFSRoot as the share.
d. Create a new Dfs link for the root. Call the link Testing DFS and use the shared folder TestFiles.
e. Test the link by entering \\servername\DFSRoot in the Run dialog box.
7. Configure and adjust shadow copies and retrieve shadow copies of a document. a. Start the Computer Management console from Start, Administrative Tools, Computer
Management.
b. In the Computer Management console, click Disk Management.
c. In the right-hand pane, right-click an existing share, such as the TestFiles share you created in the last step and select Properties.
d. Click the Shadow Copies tab.
e. Click the Click here hyperlink. This help console describes the client software required for Volume Shadow Copy Services. Close the Shadow Copies of Shared Folders help console.
f. Under Select a Volume, select the volume your share is on (I’ll assume C:) and click Enable.
g. Click Yes. This may take a few minutes.
h. When shadow copy is finished enabling, click Settings.
i. In the Settings dialog, select the Use limit selected button and type 1000 in the MB space.
j. Click OK.
k. In the Testfiles (C:) Properties dialog, click Create now. This will create a current shadow copy of your share. Notice that a new shadow copy is now listed. l. Click OK.
8. Configuring Encryption
In this exercise, you will configure file encryption and then log on as a different user to see the results of encryption. Before you begin the lab enable the guest account, make the password “letmein” and make sure it never expires.
a. Create a text document C:\Text Document.
b. Open the file and type This file is an encrypted file. c. Save and Exit the file.
d. In the right pane of the Local Disk (C:) window, right-click the Encrypted.txt file, and click Properties.
e. In the Encrypted.txt Properties dialog box, click Advanced.
f. In the Advanced Attributes dialog box, in the General tab, select the Encrypt Contents To Secure Data check box, and then click OK.
g. In the Encrypted.txt Properties dialog box, click OK.
h. You have now successfully encrypted the Encrypted.txt file.
i. In the right pane of the Local Disk (C:) window, double-click the file named Encrypted.txt.
j. Can you open the file? Why or why not? k. Close Windows Explorer.
l. Log on as guest.
m. Browse to the Encrypted.txt file, and then click Properties. n. In the Encrypted.txt Properties dialog box, click the Security tab. o. Which permissions are assigned to the Encrypted.txt file?
p. In the Encrypted.txt Properties dialog box, click Cancel. q. In the right pane, double-click the Encrypted.txt file. r. Can you open the file? Why or why not?
You have successfully configured encryption for a file and then logged on as a different user.
Install DNS
a. The DNS server can be installed for the Add/Remove programs wizard or from the configure your server wizard
Create DNS forward and reverse lookup zones and include a forwarder.
b. In the console tree, right-click the Server node and then click Configure The Server. c. The Configure DNS Server Wizard appears.
d. Create a Forward Lookup Zone and a Reverse Lookup Zone and allow both secure and unsecure dynamic updates.
e. For the Forward Lookup Zone the name is region-x.com.
f. In the Reverse Lookup Zone dialog box, type 172.16.144 in the Network ID text box. g. In the properties of the DNS server, include a forwarder (for all other regions) to the
London-nwtraders server (172.16.144.1) Configure TCP/IP to use your DNS server
a. In the properties of your local Network Connection set the Preferred DNS Server to 172.16.144.X where X is server number.
b. Test the DNS service by pinging your own region and testing your Internet
connection.
Your DNS service must work before you can proceed
.Install the active directory service
a. The domain controller is for a new domain in a new forest b. The name of the domain is region-x.com where x is your region.
Verify that the required service (SRV) resource records have been registered in DNS a. Log on to Region-x as Administrator
b. Click Start, point to Programs, point to Administrative Tools, and then click DNS. c. In the console tree, expand the Servernode, and then expand the Forward Lookup
Zones node.
d. Expand the Region-x.com node.
e. What folders appear below your domain name?
f. Note: If the msdcs, _sites, _tcp, and _udp folders do not appear below the domain name, start and stop the netlogon service by using the net stop and net start commands. To start and stop the netlogon service, enter from the command
prompt: net stop netlogon and then net start netlogon. Stopping and restarting the netlogon service will force the creation of the folders below the domain name. g. Close the DNS console.
Verify that the shared system volume (SYSVOL) was created and shared
b. In the console tree, expand the System Tools node, expand the Shared Folders node, and then select the Shares node. In the Details pane, verify that SYSVOL appears in the list of shares.
c. Close the Computer Management console.
Verify that the Active Directory database files were created a. Click Start, and then click Run.
b. In the Open box, type %systemroot%\ntds, and then click OK. c. In the NTDS window, click Folder Options under the Tools menu. d. In the Folder Options dialog box, click the View tab.
e. In the Advanced Settings box, clear the Hide File Extensions For Known File Types check box, and then click OK.
