6425A_bg_Ox

6425A: Configuring and Troubleshooting Windows Server® 2008 Active Directory® Domain Services Virtual Machine Build Guide

Contents: Setup Requirements 1

Parent or Monolithic Drives 8

Differencing Drives 8

Learning product number: 6425A

Vendor contact email: [email protected]

Vendor support contract expiration: 12/08

Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious, and no association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

The names of manufacturers, products, or URLs are provided for informational purposes only and Microsoft makes no representations and warranties, either expressed, implied, or statutory, regarding these manufacturers or the use of the products with any Microsoft technologies. The inclusion of a manufacturer or product does not imply endorsement of Microsoft of the manufacturer or product. Links are provided to third party sites. Such sites are not under the control of Microsoft and Microsoft is not responsible for the contents of any linked site or any link contained in a linked site, or any changes or updates to such sites. Microsoft is not responsible for webcasting or any other form of transmission received from any linked site. Microsoft is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement of Microsoft of the site or the products contained therein.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

Copyright © 2008 Microsoft Corporation. All rights reserved.

Microsoft, Access, Active Directory, Internet Explorer, MS-DOS, Outlook, SharePoint, Visual SourceSafe, Windows, Windows Vista, and WinFX are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Virtual Machine Build Guide 1

Setup Requirements Virtual Hard Disks

Virtual Hard Disks Drive Type Parent (if applicable)

File name The role of the VHD: Parent, Differencing, Parent/Differencing, or Stand Alone

If the drive is a differencing drive, list the file name of its parent drive.

Base08A.vhd Base

Base05D.vhd Base

Base08C.vhd Base

Base08B.vhd Base

6425A-NYC-DC1.vhd Differencing Base08A.vhd

6425A-NYC-DC2.vhd Differencing Base08A.vhd

6425A-MIA-RODC.vhd Differencing Base08B.vhd

6425A-NYC-SVR1.vhd Differencing Base08A.vhd

6425A-NYC-SVR2.vhd Differencing Base08B.vhd

6425A-LON-DC1.vhd Differencing Base08A.vhd

6425A-NYC-RAS.vhd Differencing Base08A.vhd

6425A-VAN-DC1.vhd Differencing Base05D.vhd

6425A-NYC-CL1.vhd Differencing Base08C.vhd

2 6425A: Configuring and Troubleshooting Windows Server® 2008 Active Directory® Domain Services

Virtual Hard Disk Settings

Virtual Hard Disks (Bootable only) OS

Set Bomb (For XP or W2k Only)

Rearm (For Vista or W2k8 Only)

Date of set bomb or Date of Rearm

File name The operating system used

Yes /No – # of days until locked

Yes/No – # of times run

The date when set bomb was run or date when rearm was run last

6425A-NYC-DC1.vhd

Windows Server 2008 Enterprise Edition

N/A Yes – 1 03/10/08

6425A-NYC-DC2.vhd


N/A Yes – 1 03/10/08

6425A-MIA-RODC.vhd

Windows Server 2008 Enterprise Edition Server Core

N/A Yes – 1 03/10/08

6425A-NYC-SVR1.vhd


N/A Yes – 1 03/10/08

6425A-NYC-SVR2.vhd

Windows Server 2008 Enterprise Edition Server Core

N/A Yes – 1 03/10/08

6425A-NYC-RAS.vhd


N/A Yes – 1 03/10/08

6425A-LON-DC1.vhd


N/A Yes – 1 03/10/08

6425A-VAN-DC1.vhd

Windows Server 2003 Yes – 30

03/10/08

6425A-NYC-CL1.vhd

Windows Vista N/A Yes – 1 03/10/08


Virtual Machines

Virtual Machine Settings Description

File name of the virtual machine

List all the relevant settings for the virtual machine. Be sure to include the following: Memory: Hard Disk 1: Hard Disk 2: Undo Disks: Networking:

Describe the role of the virtual machine in the learning product.

6425A-NYC-DC1.vhd

Memory: 512 MB

Network: Local Only

Hard Disk 1: 6425A-NYC-DC1.vhd

Hard Disk 2: 6425A-NYC-DC1-Allfiles.vhd

Undo Disks: Enabled

Windows Server 2008 Enterprise

Domain Controller – WoodgroveBank.com

DNS

6425A-NYC-DC2.vhd

Memory: 384 MB

Network: Local Only

Hard Disk: 6425A-NYC-DC2.vhd

Undo Disks: Enabled


Domain Controller – WoodgroveBank.com

DNS

6425A-MIA-RODC.vhd

Memory: 384 MB

Network: Local Only

Hard Disk: 6425A-MIA-RODC.vhd

Undo Disks: Enabled

Windows Server 2008 Enterprise Server Core

Read-only domain controller – WoodgroveBank.com

6425A-NYC-SVR1.vhd

Memory: 384 MB

Network: Local Only

Hard Disk: 6425A-NYC-SVR1.vhd

Undo Disks: Enabled


Standalone server


(continued)

Virtual Machine Settings Description

File name of the virtual machine

List all the relevant settings for the virtual machine. Be sure to include the following: Memory: Hard Disk 1: Hard Disk 2: Undo Disks: Networking:

Describe the role of the virtual machine in the learning product.

6425A-NYC-RAS.vhd

Memory: 256 MB

Network: Local Only


Undo Disks: Enabled


Member server, RRAS server

6425A-NYC-SVR2.vhd

Memory: 384 MB

Network: Local Only


Undo Disks: Enabled

Windows Server 2008 Enterprise Server Core

Standalone Server

6425A-LON-DC1.vhd

Memory: 384 MB

Network: Local Only

Hard Disk: 6425A-LON-DC1.vhd

Undo Disks: Enabled


Domain Controller – EMEA.WoodgroveBank.com

DNS

6425A-VAN-DC1.vhd

Memory: 384 MB

Network: Local Only

Hard Disk: 6425A-VAN-DC1.vhd

Undo Disks: Enabled


Domain Controller – Fabrikam.com

DNS

6425A-NYC-CL1.vhd

Memory: 384 MB

Network: Local Only

Hard Disk: 6425A-NYC-CL1.vhd

Undo Disks: Enabled

Windows Vista® SP1

Client computer in the Woodgrovebank.com domain


Classroom Configuration

Virtual Machine Name Computer Name

Internet Protocol (IP) Address

Domain Name System (DNS) Server

Default Gateway

6425A-NYC-DC1.vmc NYC-DC1 10.10.0.10/16 10.10.0.10

10.10.0.11

10.10.0.1

6425A-NYC-DC2.vmc NYC-DC2 10.10.0.11/16 10.10.0.10

10.10.0.11

10.10.0.1

6425A-MIA-RODC.vmc MIA-RODC 10.10.0.12/16 10.10.0.10 10.10.0.1

6425A-NYC-SVR1.vmc NYC-SVR1 10.10.0.24/16 10.10.0.10 10.10.0.1

6425A-NYC-SVR2.vmc NYC-SVR2 10.10.0.25/16 10.10.0.10 10.10.0.1

6425A-LON-DC1.vmc LON-DC1 10.10.0.110/16 10.10.0.110

10.10.0.10

10.10.0.1

6425A-NYC-RAS.vmc NYC-RAS 10.10.0.1/16

10.20.0.1/16

10.30.0.1/16

192.168.0.1/24

10.10.0.10

6425A-VAN-DC1.vmc VAN-DC1 10.20.0.10/16 10.20.0.10 10.20.0.1

6425A-NYC-CL1.vmc NYC-CL1 10.10.0.50 10.10.0.10 10.10.0.1

Software The following table shows all the software needed to set up the virtual machines for this learning product, including the version, whether the version that was tested for the learning product is retail or evaluation, and where the software can be obtained.


The table also includes a column to track whether the product group has approved inclusion of the software for the life of the product and a column to track compliance with application programming interface (API) and GDI+ policies.

Software Package PG Approval OK to Distribute CPx Release ID #

CPx policy Complete Yes/no

Group Policy Log View

Download from http://go.microsoft.com/fwlink/?LinkId=117157

User Accounts The following table lists all of the user or group accounts required for this learning product. These accounts should be localized using MILS-approved names.

User or Group Name

Logon Name (include location)

Password (not applicable for group accounts) Other Account Properties

Help Desk Create a global security group in the ITAdmins OU

Kiosk Computers Create in the Computers container


Setup Files The following table lists all installation files that are not already listed in the software section, and that are required for the creation of the virtual machines. If application source files are required, they will also be listed here.

File or Folder Name Path in Microsoft Visual SourceSafe® or Source Depot

SetupWoodgrove.bat Longhorn\BaseImageBuildFiles\WoodgroveSetup

SetupWoodgrove.csv Longhorn\BaseImageBuildFiles\WoodgroveSetup

ResetPasswordWoodgrove.vbs Longhorn\BaseImageBuildFiles\WoodgroveSetup

MIA-RODCInstall.txt Longhorn\BaseImageBuildFiles\RODCSetup

SetupEMEA.bat Longhorn\BaseImageBuildFiles\EMEASetup

SetupEMEA.csv Longhorn\BaseImageBuildFiles\EMEASetup

ResetPasswordEMEA.vbs Longhorn\BaseImageBuildFiles\EMEASetup

SetupFabrikam.bat Longhorn\BaseImageBuildFiles\FabrikamSetup

SetupFabrikam.csv Longhorn\BaseImageBuildFiles\FabrikamSetup

ResetPasswordFabrikam.vbs Longhorn\BaseImageBuildFiles\FabrikamSetup


Parent or Monolithic Drives This section lists any parent or monolithic drives created for this learning product. This does not include Microsoft Learning base images.

Create 6425A-NYC-DC1-Allfiles Drive 1. On the Virtual Server Administration Web site, under Virtual Disks, click

Create, and then click Dynamically Expanding Virtual Hard Disk.

2. In the Virtual Hard Disk file name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC1-AllFiles.vhd.

3. On the Virtual Hard Disk Size page, change the size for the virtual hard disk to 16GB, and then click Next.

4. Click Create.

Note: After this drive is attached to NYC-DC1, copy the contents of the Allfiles directory in Source Depot to this drive.

Differencing Drives This section lists the differencing drives that are specific to this learning product.

Create a section for each differencing drive, each containing the following three subsections.

Important: The differencing drives for this course are based on the differencing drives that Microsoft Learning provides. The setup instructions below include the setup steps used to create the differencing drives. The section at the end of each differencing drive description, entitled “Modify the Microsoft Learning differencing drive”, describes the changes made to the differencing drive for this course.


Differencing Drive: 6425A-NYC-DC1.vhd

1. Create the differencing drive 1. On the Virtual Server Administration Web site, under Virtual Disks, point to

Create, and then click Differencing Virtual Hard Disk.

2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-DC1.vhd.

3. In the Fully qualified path to parent virtual hard disk, type C:\Program Files\Microsoft Learning\Base08A.vhd, and then click Create.

2. Create the virtual machine 1. On the Virtual Server Administration Web site, under Virtual Machines,

click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-DC1.

3. In the Virtual machine memory box, type 768.

4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-DC1.vhd.

5. In the Virtual network adapter section, in the Connected to list, click Internal Network, and then click Create.

6. Click the Hard disks link.

7. Select the check box next to Enable undo disks, and then click OK.

3. Configure the virtual machine

To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-NYC-DC1, and

then click Turn On.

2. Connect to the xxxxy-NYC-DC1 virtual machine by using Virtual Machine Remote Control (VMRC) client.

3. Log on as Administrator using a password of Pa$$w0rd.


To complete the Setup Wizard 1. In the Set Up Windows dialog box, select the appropriate options for Country

or region, Time and currency, and Keyboard layout, and then click Next.

2. On the Type your product key for activation page, leave the product key field blank.

3. Clear the Automatically activate Windows when I’m online check box, and then click Next.

4. Select the I accept the license terms check box, and then click Next.

5. In the Type a computer name box, type NYC-DC1, and then click Start.

6. The server will prompt you to change the Administrator account password. On the screen, click OK.

7. In the New password and Confirm password boxes, type Pa$$w0rd, press ENTER, and then click OK.

To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxy-NYC-DC1, and

then click Edit Configuration.

2. Under “xxxy-NYC-DC1” Configuration, click Virtual Machine Additions.

3. In “xxxy-NYC-DC1” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

4. In the Virtual Machine Remote Control Client (VMRC) connected to xxxy-NYC-DC1, click Run Setup.exe.

5. In the Virtual Machine Additions dialog box, click Remove.

6. On the Setup Completed page, click Finish.

7. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot. After the server reboots, log on as administrator using the password Pa$$w0rd.

8. On the Virtual Server Administration Web site, click xxxy-NYC-DC1, and then click Edit Configuration.




11. In the Virtual Machine Remote Control Client (VMRC) connected to xxxy-NYC-DC1, click Run Setup.exe.

12. In the Virtual Machine Additions dialog box, click Next.


14. In the Virtual Machine Additions dialog box, click Yes. The virtual machine will reboot.

To configure Network Settings 1. After the server restarts, log on as Administrator using the password

Pa$$w0rd.

2. On the Initial Configuration Tasks page, click Configure networking.

3. Right-click Local Area Connection, and then click Properties.

4. In the Local Area Connection Properties dialog box, click Internet Protocol Version 4 (TCP/IPv4), and then click Properties.

5. In the Internet Protocol (TCP/IP) Properties dialog box, configure the network settings as listed in the previous Classroom Configuration table.



8. Click Advanced, remove any IP addresses other than the IP address specified in the IP addresses box, and then click OK twice.

9. Close the open windows, including the Initial Configuration Tasks window.

To install Active Directory Domain Services 1. In Server Manager, under Roles Summary, click Add Roles.

2. Install the Active Directory Domain Services role, and then click Close.

3. In Server Manager, click Go to Active Directory Domain Services.

4. Click Run the Active Directory Domain Services Installation Wizard.


5. On the Welcome page, click Next.

6. On the Operating System Compatibility page, click Next.

7. Click Create a new domain in a new forest, and then click Next.

8. In the Full DNS name box, type WoodgroveBank.com, and then click Next.

9. In the Forest functional level box, click Windows Server 2003, and then click Next.

10. On the Set Domain Functional Level page, click Next.

11. Verify that DNS server is selected as an additional option, and then click Next.

12. In the Static IP assignment dialog box, click Yes.

13. Click Yes to continue when warned about creating a delegation for this DNS server.

14. Click Next to accept the default file locations.

15. In the Password and Confirm password boxes, type Pa$$w0rd, and then click Next.

16. Review the settings, and then click Next.

17. Select the Reboot on completion check box.

18. After the system reboots, log on as Administrator with the password Pa$$w0rd.

19. Select the Do not show this window at logon check box, and then click Close.

To create the user and group accounts 1. Create a new folder named Setup on the C:\drive on the virtual machine.

2. Copy the files in the WoodgroveSetup folder to the C:\Setup folder.

3. Double-click SetupWoodgrove.bat.

4. Open Active Directory Users and Computers. In the Users container, right-click Administrator, and then click Properties.

5. On the Account tab, select the Password never expires check box, and then click OK.

6. Close Active Directory Users and Computers.


To configure miscellaneous settings for the Administrator account 1. Right-click the desktop, and then click Personalize.

2. Click Screen Saver. On the Screen Saver tab, set the Screen saver to None, and then click OK.

3. Click Display Settings. Ensure that the display settings are configured to 800 x 600.

4. Click Windows Color and Appearance, click Effects, clear all check boxes, and then click OK twice.

5. Close the Personalization window.

6. Open the Server Manager, and then click Change System Properties.

7. On the Advanced tab, in the Performance section, click Settings, click Adjust for Best Performance, and then click OK.

8. Under Startup and Recovery, click Settings. In the Write debugging information list, click (none), and then click OK twice.

9. On the Server Manager page, click Configure Updates.

10. On the Windows Update page, click Change settings.

11. Click Never check for updates (not recommended), and then click OK.

12. Close Windows Update.

13. Right-click the Taskbar, and then click Properties.

14. On the Start Menu tab, clear the Store and display a list of recently opened programs check box.

15. On the Notification tab, clear all check boxes, and then click OK.

16. Open Microsoft Internet Explorer®.

17. Click Tools, and then click Internet Options.

18. On the General tab, click Use blank.

19. Under Browsing History, click Delete all.

20. Select the Also delete files and settings stored by add-ons check box, click Yes, and then click OK.


21. Close Internet Explorer.

22. On the Start menu, right-click Command Prompt, and then click Run as administrator.

23. At the command prompt, type cd C:\Windows\Inf, and then press ENTER.

24. Type del *.pnf, press ENTER, and then close the command prompt.

25. Open a Windows Explorer window.

26. On the Tools menu, click Folder Options.

27. On the View tab, clear the Hide extensions for known file types check box, and then click OK.

28. Close Windows Explorer.

To add keyboard layouts 1. Click Start, click Control Panel, and then double-click Regional and

Language Options.

2. On the Keyboards and Languages tab, click Change keyboards.

3. On the General tab, click Add, and then add the following languages:

• Chinese (Simplified, PRC) – Chinese (Simplified) – Microsoft Pinyin IME

• Chinese (Traditional, Hong Kong S. A. R.) – US

• Czech (Czech Republic) – Czech

• Danish (Denmark) – Danish

• Dutch (Netherlands) – Dutch

• English (United Kingdom)

• French (France) – French

• French (Canada) – Canadian French

• French (Switzerland) – Swiss French

• German (Germany) – German

• German (Switzerland) – Swiss German

• Italian (Italy) – Italian

• Japanese (Japan) – Japanese


• Korean (Korea) – Korean

• Polish (Poland) – Polish (214)

• Portuguese (Brazil) – Brazilian ABNT

• Portuguese (Portugal) – Portuguese

• Russian (Russia) – Russian

• Spanish (Spain, International Sort) – Spanish

• Spanish (Argentina) – Latin America

• Swedish (Sweden) – Swedish

4. Click OK three times, and then close Control Panel.

To prepare the virtual machine 1. Copy VMClean version 1.0.37 to the computer desktop.

2. Run VMClean as an administrator. On the Development page, select all available options, and then click Clean.

3. Click Exit and Delete.

4. Shut down the virtual machine, and save all changes.

4. Modify the Microsoft Learning differencing drive 1. On the host computer, create the C:\Program Files\Microsoft

Learning\6425\Drives folder.

2. Copy the xxxxy-NYC-DC1.vhd file to the Drives folder.

3. Rename the xxxxy-NYC-DC1.vhd file to 6425A-NYC-DC1.vhd.

To create the virtual machine 1. On the Virtual Server Administration Web site, under Virtual Machines,

click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC1.



4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC1.vhd.



7. Select the check box next to Enable undo disks.

8. Click Add Disk, and then in the Known virtual hard disks list, click C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC1-Allfiles.vhd.

9. Click OK, and then click OK again.

To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-NYC-DC1, and

then click Turn On.

2. Connect to the 6425A-NYC-DC1 virtual machine by using the VMRC client.

3. Log on as Administrator with the password Pa$$w0rd.

To configure the hard disks 1. In Server Manager, expand Storage, and then click Disk Management.

2. In the Initialize Disk dialog box, click OK.

3. Right-click CD-ROM 0, click Change Driver Letter and Path, and then change the drive letter to E:.

4. Right-click the space beside Disk 1, and then click New Simple Volume. Create a new simple volume using all the space on the disk, using the drive letter D:, and a volume label of AllFiles. Perform a quick format.

5. Create a folder named 6425 on the root of D: drive. Copy the contents of the Allfiles directory in Source Depot into the 6425 folder.


To complete the lab preparation 1. Open Active Directory Users and Computers.

2. In the ITAdmins OU, create a new global security group named HelpDesk.

3. Add the following users to the ITAdmins group:

• Betsy Stadick

• Darren Gehring

• Markus Breyer

• Roland Wacker

• Thomas Andersen

4. Right-click NYC, and then click Delegate Control.

5. On Welcome page, click Next.

6. On the Users and Groups page, click Add, type Helpdesk, click OK, and then click Next.

7. On the Tasks to Delegate page, select both the Create, delete and manage user accounts, and Create, delete and manage groups check boxes, click Next, and then click Finish.

8. On the View menu, click Advanced Features.

9. Expand NYC, right-click BranchManagers, and then click Properties.

10. On the Security tab, click Add.

11. Type Markus, click OK, and then click Yes.

12. In the Permissions for Markus Breyer section, select the Deny check box for Full control, and then click OK.

13. On the View menu, click Advanced Features.


To install and configure Windows PowerShell 1. Open Server Manager, and then click Add Features.

2. In the Select Features page, select the Windows PowerShell check box.

3. Click Next, click Install, and then click Close.


4. Click Start, click All Programs, click Windows PowerShell 1.0, and then click Windows PowerShell.

5. At the PS prompt, type set-executionpolicy unrestricted, and then press ENTER.

6. Close the Windows PowerShell window.

To complete the lab preparation 1. In a Windows Explorer window, browse to the D:\6425 folder.

2. In the 6425 folder, create a new folder named ExecData.

3. In the ExecData folder, create three sub-folders named HeadOffice, Branch, and Corp.

4. In the 6425 folder, create a folder named GPOBackup.

5. In the 6425 folder, create a shared folder named Scripts. In the File Sharing dialog box, type Authenticated Users, and then click Add. Set the Permission Level for Authenticated Users to Contributor, click Share, and then click Done.

6. Copy the Map.bat file from Source Depot to the Scripts shared folder.

7. In the 6425 folder, create a folder named Data. Right-click the folder and then click Share.

8. In the File Sharing dialog box, type Authenticated Users, and then click Add. Set the Permission Level for Authenticated Users to Contributor, click Share, and then click Done.

9. Open Active Directory Users and Computers, and create a global security group in the Computers container named Kiosk Computers.


11. Click Start, point to Administrative Tools and then click Group Policy Management.

12. Expand Forest: WoodgroveBank.com, expand Domains, and then expand WoodgroveBank.com.

13. Right-click Group Policy Objects, and then click New.

14. In the New GPO dialog box, in the Name field, type Lab 11A.


15. Repeat the previous two steps to create three more GPOs named Lab 11B, Lab 11C, and Lab 11D.

16. Right-click Lab 11A, and then click Edit.

17. Under User Configuration, expand Policies, expand Windows Settings, click Scripts, and double-click Logon.

18. In the Logon Properties dialog box, click Add. In the Add a Script dialog box, in the Script Name field, type \\NYC-DC1\Scripts\Map.bat, and then click OK twice.

19. Close Group Policy Management Editor.

20. Right-click Lab 11B, and then click Edit.

21. Under User Configuration, expand Policies, expand Administrative Templates, and then click Control Panel.

22. Double-click Prohibit access to the Control Panel, click Enabled, and then click OK.


24. On the Delegation tab of the Lab 11B policy, click Advanced to open the Security Settings, and then add the MIA_BranchManagersGG. In the Permissions area, select the Deny check box for the Apply group policy permission, click OK, and then click Yes.

25. Right-click Lab 11C, and then click Edit.

26. Under User Configuration, expand Policies, expand Administrative Templates, and then click Start Menu and Taskbar.

27. Double-click Add the Run command to the Start Menu, click Enabled, and then click OK.


29. Right-click Lab 11D, and then click Edit.

30. Under Computer Configuration, expand Policies, expand Administrative Templates, expand System, and then click Group Policy.

31. Double-click User Group Policy loopback processing mode, click Enabled, and then click OK.

32. Under User Configuration, expand Policies, expand Windows Settings, expand Security Settings, and then click Software Restriction Policies.


33. Right-click Software Restriction Polices, and click New to create a new policy.

34. Right-click Additional Rules, and then create a new path rule with a path of C:\Program Files\Internet Explorer\Iexplore.exe. Set the Security Level to Disallowed, and then click OK.


36. In the Group Policy Objects folder, right-click Lab 11A, and then click Back Up. In the Location field, type D:\6425\GPOBackup, click Back Up, and then click OK.

37. Repeat the previous step to back up the Lab 11B, Lab 11C and Lab 11D Group Policy Objects (GPOs).

38. In the Group Policy Objects folder, delete the four lab 11 GPOs.

39. Close Group Policy Management.

40. Download and install the Group Policy Log View Tool. Accept all defaults during the installation.

Note: Before shutting down the 6425A-NYC-DC1 virtual machine, complete the configuration of the other virtual servers for this course.

To prepare the virtual machine for build 1. Open Internet Explorer.






7. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

8. At the command prompt, type slmgr –ipk 4BTYB-J6KK3-8DDDP-B9WYG-3VQH9, and then press ENTER. After approximately two minutes, the Windows Script Host dialog box appears.


9. In the Windows Script Host dialog box, click OK.

10. At the command prompt, type slmgr –rearm, and then press ENTER.


12. Close the command prompt.

13. Copy VMClean version 1.0.36 to the computer desktop.



16. Shut down the virtual machine, and commit all changes.

Differencing Drive: 6425A-NYC-DC2.vhd

1. Create the Differencing drive 1. On the Virtual Server Administration Web site, under Virtual Disks, point to


2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-DC2.vhd.



click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\ xxxx\Drives\xxxxy-NYC-DC2.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-DC2.vhd.






To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-NYC-DC2, and

then click Turn On.

2. Connect to the xxxxy-NYC-DC2 virtual machine by using Virtual Machine Remote Control Client (VMRC).



2. On the Type your product key for activation page, leave the product key field blank.

3. Clear the Automatically activate Windows when I’m online check box, and then click Next.


5. In the Type a computer name box, type NYC-DC2, and then click Start. When the server prompts you to change the Administrator account password, click OK.



To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxy-NYC-DC2, and


2. Under “Base08A” Configuration, click Virtual Machine Additions.

3. In “Base08A” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

4. In the VMRC connected to xxxy-NYC-DC2, click Run Setup.exe.




8. On the Virtual Server Administration Web site, click xxxy-NYC-DC2, and then click Edit Configuration.



11. In the VMRC connected to xxxy-NYC-DC2, click Run Setup.exe.




To configure network settings 1. Close the Initial Configuration page.

2. In the Server Manager window, click View Network Connections.


4. Click Internet Protocol Version 4 (TCP/IPv4), and then click Properties.


5. Configure the IP address, Subnet mask, Default gateway, and Preferred DNS server based on the settings listed in the previous Classroom Configuration table.

6. Click Advanced, and then remove any IP addresses other than the address specified in the IP addresses box, and then click OK.

7. Close all open windows except Server Manager.


2. Install the Active Directory Domain Services role.

3. In Server Manager, click Go to Roles, click Go to Active Directory Domain Services, and then click Run the Active Directory Domain Services Installation Wizard.



6. Click Existing forest and then click Next.

7. On the Network Credentials page, type WoodgroveBank.com, and then click Set.

8. Type Administrator as the User name, and Pa$$w0rd as the password, click OK, and then click Next three times.

9. On the Additional Domain Controller Options page, click Next.


11. Click Yes to continue when warned about creating a delegation for this DNS server.


13. In the Password and Confirm password boxes, type Pa$$w0rd and then click Next.




16. After the system reboots, log on as WoodgroveBank\Administrator with the password Pa$$w0rd.

17. Click the Do not show this window at logon check box, and then click Close.




4. Click Windows Color and Appearance, and then click Effects. Clear all check boxes, and then click OK twice.




8. Under Startup and Recovery, click Settings, in the Write debugging information list, click (none), and then click OK twice.





13. Right-click the taskbar, and then click Properties.



16. Open Internet Explorer.





20. Select the Also delete files and settings stored by add-ons check box, click Yes, and then Click OK.




24. Type del *.pnf, and then press ENTER.





29. Close the Windows Explorer window.


Language Options.

























4. Click OK three times, and then close the Control Panel.




4. Shut down the virtual machine.

4. Modify the Microsoft Learning Differencing drive 1. On the host computer, create the C:\Program Files\Microsoft


2. Copy the xxxxy-NYC-DC2.vhd file to the Drives folder.

3. Rename the xxxxy-NYC-DC2.vhd file to 6425A-NYC-DC2.vhd.



click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC2.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-DC2.vhd.





then click Turn On.




















Differencing Drive: 6425A-MIA-RODC.vhd



2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-MIA-RODC.vhd.

3. In the Fully qualified path to parent virtual hard disk, type C:\Program Files\Microsoft Learning\Base08B.vhd, and then click Create.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\ xxxx\Drives\xxxxy-MIA-RODC.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-MIA-RODC.vhd.






To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC, and

then click Turn On.

2. Connect to the xxxxy-MIA-RODC virtual machine by using VMRC.



2. In the Product key box, type a valid product key. Clear the Automatically activate Windows when I’m online check box and then click Next.

3. Select the I accept the license terms check box and then click Next.

4. In the Type a computer name box, type MIA-RODC, and then click Start.

5. Log on as Administrator using a blank password.

6. When the server prompts you to change the Administrator account password, click OK.


To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC and


2. Under “xxxxy-MIA-RODC” Configuration, click Virtual Machine Additions.

3. In “xxxxy-MIA-RODC” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.


4. In the VMRC, connected to xxxxy-MIA-RODC, at the command prompt, type D:, and then press ENTER.

5. Type CD Windows, and then press ENTER.

6. Type Setup.exe, and then press ENTER.




10. After the computer reboots, log on as Administrator using the password Pa$$w0rd.

11. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC, and then click Edit Configuration.

12. Under xxxxy-MIA-RODC Configuration, click Virtual Machine Additions.

13. In xxxxy-MIA-RODC Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

14. In the VMRC connected to xxxxy-MIA-RODC, at the command prompt, type D:, and then press ENTER.


16. Type Setup.exe, and then press ENTER.





To join the computer to the WoodgroveBank.com domain 1. In the command prompt window, type Netsh interface ipv4 show interfaces,

and record the Idx value assigned to the Local Area Connection.

2. Type netsh interface ipv4 set address name="ID" source=static address=10.10.0.12 gateway=10.10.0.1 mask=255.255.0.0 (where ID is the IDx number assigned to the Local Area Connection), and then press ENTER.


3. Type netsh interface ipv4 add dnsserver name="ID" address=10.10.0.10 index=1 (where ID is the number assigned to the Local Area Connection), and then press ENTER.

4. In the command prompt window, at the command prompt, type netdom join MIA-RODC /domain:Woodgrovebank.com /Userd:Administrator /passwordD:*, and then press ENTER.

5. Type Pa$$w0rd, and then press ENTER.

6. Type shutdown /r /t 0, and then press ENTER.

7. Wait for the server to reboot, and then log on as WoodgroveBank\administrator with the password Pa$$w0rd.

To configure the server as a read only domain controller in the WoodgroveBank.com domain 1. At the command prompt, type mkdir c:\Setup, and then press ENTER.

2. Copy the MIA-RODCInstall.txt file to the c:\setup folder.

3. At the command prompt, type dcpromo /unattend:c:\setup\MIA-RODCinstall.txt, and then press ENTER.

4. The server will be promoted to a domain controller, and then it will restart. Wait for the server to reboot, and then log on as WoodgroveBank\administrator with the password Pa$$w0rd.

5. At the command prompt, type cd c:\setup, and then press ENTER.

6. Type Del *.*, and then press ENTER. Type Y, and then press ENTER

7. Type CD\, and then press ENTER.

8. At the command prompt, type rmdir c:\setup, and then press ENTER.

To add keyboard layouts 1. At the command prompt, type intl.cpl.

2. In the Regional and Language Options dialog box, on the Keyboards and Languages tab, click Change keyboards.
























To clear the event logs 1. At the command prompt, type Wevtutil.exe sl Application /ms:1052672, and

then press ENTER.

2. At the command prompt, type Wevtutil.exe sl Security /ms:1052672, and then press then ENTER.

3. At the command prompt, type Wevtutil.exe sl Setup /ms:1052672, and then press ENTER.

4. At the command prompt, type Wevtutil.exe sl System /ms:1052672, and then press ENTER.


5. At the command prompt, type Wevtutil.exe cl System, and then press ENTER.

6. At the command prompt, type Wevtutil.exe cl Security, and then press ENTER.

7. At the command prompt, type Wevtutil.exe cl Application, and then press ENTER.

8. At the command prompt, type Wevtutil.exe cl Setup, and then press ENTER.

To configure screen saver settings 1. At the command prompt, type Regedit, and then press ENTER.

2. Browse to HKEY_CURRENT_USER\Control Panel\Desktop.

3. Double click ScreenSaveActive, and set the value to 0.

4. Close Registry Editor.

To save changes to the virtual machine • Shut down the virtual machine and commit changes.



2. Copy the xxxxy-MIA-RODC.vhd file to the Drives folder.

3. Rename the xxxxy-MIA-RODC.vhd file to 6425A-MIA-RODC.vhd.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-MIA-RODC.



4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-MIA-RODC.vhd.


6. Click the Hard disks link, select the check box next to Enable undo disks, and then click OK.

To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-MIA-RODC, and

then click Turn On.

2. Connect to the 6425A-MIA-RODC virtual machine by using the VMRC client.


To prepare the virtual machine for Build 1. At the command prompt, type Wevtutil.exe cl System, and then press ENTER.











Differencing Drive: 6425A-NYC-SVR1.vhd



2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-SVR1.vhd.



click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\ xxxx\Drives\xxxxy-NYC-SVR1.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-SVR1.vhd.


6. Click the Hard disks link, select the check box next to Enable undo disks, and then click OK.


To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-NYC-SVR1, and

then click Turn On.

2. Connect to the xxxxy-NYC-SVR1 virtual machine by using Virtual Machine Remote Control Client (VMRC).




2. In the Product key box, type a valid product key, clear the Automatically activate Windows when I’m online check box, and then click Next.


4. In the Type a computer name box, type NYC-SVR1, and then click Start.



To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxy-NYC-SVR1, and


2. Under “xxxy-NYC-SVR1” Configuration, click Virtual Machine Additions.

3. In “xxxy-NYC-SVR1” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

4. In the VMRC connected to xxxy-NYC-SVR1, click Run Setup.exe.




8. On the Virtual Server Administration Web site, click xxxy-NYC-SVR1, and then click Edit Configuration.

9. Under “xxxy-NYC-SVR1” Configuration, click Virtual Machine Additions.

10. In “xxxy-NYC-SVR1” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.


11. In the VMRC connected to xxxy-NYC-SVR1, click Run Setup.exe.








5. Configure the IP address, Subnet mask, Default gateway, and Preferred DNS server, using the settings listed in the previous Classroom Configuration table.

6. Click OK twice, and then click Close.




10. Close the open windows.

To configure the local user accounts 1. Open Server Manager.

2. Expand Configuration, expand Local Users and Groups, and then click Users.

3. Right-click Administrator, and then click Rename.

4. Type LocalAdmin, and then press ENTER.

5. Right-click Users, and then click New User.


6. In the New User dialog box, type Student as the User Name, and Pa$$w0rd in both the Password and Confirm password dialog boxes.

7. Clear the User must change password at next logon check box, select the Password never expires check box, and then click Create.

8. Click Close, and log off the computer.

9. Log on as Student using the password Pa$$w0rd.

To configure miscellaneous settings for the Student account 1. Right-click the desktop, and then click Personalize.













14. Close Internet Explorer, and then log off.


To configure miscellaneous settings for the LocalAdmin account 1. Log on as LocalAdmin using the password Pa$$w0rd.

2. On the Initial Configurations Tasks dialog box, click Do not show this window at logon, and then click Close.

3. Right-click the desktop, and then click Personalize.



6. Click Windows Color and Appearance, and then click Effects. Clear all check boxes and then click OK twice.




















25. At the command prompt, type rmdir /s /q c:\Windows\Panther, and then press ENTER.




29. Open Windows Explorer.

30.- On the Tools menu, click Folder Options.

31. On the View tab, clear the Hide extensions for known file types check box, and click OK.



Language Options.

























4. Click OK twice.

5. On the Language Bar, click Hidden, and then click OK.

6. Close the Control Panel.

To clear the event logs 1. On the Start menu, point to Administrative Tools, and then click Event

Viewer.

2. In the Event Viewer dialog box, expand Windows Logs.

3. Right-click Application, click Clear Log, and then click Clear.

4. Right-click Security, click Clear Log, and then click Clear.

5. Right-click Setup, click Clear Log, and then click Clear.

6. Right-click System, click Clear Log, and then click Clear.

7. Right-click Forwarded Events, click Clear Log, and then click Clear.

8. Close Event Viewer.

9. Close Control Panel.





4. Shut down the virtual machine and commit all changes.



2. Copy the xxxxy-NYC-SVR1.vhd file to the Drives folder.

3. Rename the xxxxy-NYC-SVR1.vhd file to 6425A-NYC-SVR1.vhd.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-SVR1.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-SVR1.vhd.





To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-NYC-SVR1, and

then click Turn On.

2. Connect to the 6425A-NYC-SVR1 virtual machine by using the VMRC client.



















Differencing Drive: 6425A-NYC-SVR2.vhd



2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-SVR2.vhd.

3. In the Fully qualified path to parent virtual hard disk, type C:\Program Files\Microsoft Learning\Base08B.vhd, and then click Create.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\ xxxx\Drives\xxxxy-NYC-SVR2.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-SVR2.vhd.





To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-NYC-SVR2, and

then click Turn On.

2. Connect to the xxxxy-NYC-SVR2 virtual machine by using VMRC.






4. In the Type a computer name box, type NYC-SVR2, and then click Start.

5. Log on as Administrator using a blank password.



To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC and



3. In “xxxxy-MIA-RODC” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions and then click OK.

4. In the Virtual Machine Remote Control Client (VMRC) connected to xxxxy-MIA-RODC, at the command prompt, type D: and then press ENTER.

5. Type CD Windows, and then press ENTER. Type Setup.exe and then press ENTER.





10. On the Virtual Server Administration Web site, click xxxxy-MIA-RODC, and then click Edit Configuration.



12. In “xxxxy-MIA-RODC” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

13. In the VMRC connected to xxxxy-MIA-RODC, at the command prompt, type D:, and then press ENTER.


15. Type Setup.exe and then press ENTER.





To configure network settings 1. In the command prompt window, type Netsh interface ipv4 show interfaces.

Record the Idx value assigned to the Local Area Connection.

2. Type netsh interface ipv4 set address name="ID" source=static address=10.10.0.25 gateway=10.10.0.1 mask=255.255.0.0 (where ID is the IDx number assigned to the Local Area Connection), and then press ENTER.

3. Type netsh interface ipv4 add dnsserver name="ID" address=10.10.0.10 index=1 (where ID is the number assigned to the Local Area Connection), and then press ENTER.

4. Type shutdown /r /t 0, and then press ENTER.

5. Wait for the computer to restart, and then log on as Administrator.

To configure the Administrator password to never expire • At the command prompt, type net accounts /maxpwage:unlimited, and then

press ENTER.


To add keyboard layouts 1. At the command prompt, type intl.cpl.

2. In the Regional and Language Options dialog box, on the Keyboards and Languages tab, click Change keyboards.























4. Click OK three times.


Miscellaneous settings 1. At the command prompt, type rmdir /s /q c:\Windows\Panther and then

press ENTER.



To clear the event logs 1. At the command prompt, type Wevtutil.exe sl Application /ms:1052672, and

then press ENTER.

2. At the command prompt, type Wevtutil.exe sl Security /ms:1052672, and then press ENTER.

3. At the command prompt, type Wevtutil.exe sl Setup /ms:1052672, and then press ENTER.

4. At the command prompt, type Wevtutil.exe sl System /ms:1052672, and then press ENTER.

5. At the command prompt, type Wevtutil.exe cl System, and then press ENTER.




To save changes to the virtual machine 1. On the Virtual Server Administration Web site, click Master Status.

2. Right-click xxxxy-NYC-SVR2, and then click Merge Disks.




2. Copy the xxxxy-NYC-SVR2.vhd file to the Drives folder.

3. Rename the xxxxy-NYC-SVR2.vhd file to 6425A-NYC-SVR2.vhd.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-SVR2.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-SVR2.vhd.




To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-NYC-SVR2, and

then click Turn On.

2. Connect to the 6425A-NYC-SVR2 virtual machine by using the VMRC client.



To configure desktop settings 1. At the command prompt, type regedit, and then press ENTER.

2. Browse to HKEY_CURRENT_USER\Control Panel\Desktop, double-click ScreenSaveActive, and then change the value to 0.

3. Close the Registry Editor.

To prepare the virtual machine for Build 1. At the command prompt, type slmgr –ipk 4BTYB-J6KK3-8DDDP-B9WYG-

3VQH9, and then press ENTER. After approximately two minutes, the Windows Script Host dialog box appears.





Differencing Drive: 6425A-LON-DC1.vhd



2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-LON-DC1.vhd.



click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\ xxxx\Drives\xxxxy-LON-DC1.



4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-LON-DC1.vhd.





To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-LON-DC1, and

then click Turn On.

2. Connect to the xxxxy-LON-DC1 virtual machine by using VMRC.





4. In the Type a computer name box, type LON-DC1, and then click Start.




To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxy-LON-DC1, and


2. Under “xxxy-LON-DC1” Configuration, click Virtual Machine Additions.

3. In “xxxy-LON-DC1” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

4. In the VMRC connected to xxxy-LON-DC1, click Run Setup.exe.




8. On the Virtual Server Administration Web site, click xxxy-LON-DC1, and then click Edit Configuration.

9. Under “xxxy-LON-DC1” Configuration, click Virtual Machine Additions.

10. In “xxxy-LON-DC1” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

11. In the VMRC connected to xxxy-LON-DC1, click Run Setup.exe.









5. Configure the IP address, Subnet mask, Default gateway, and Preferred DNS server based on the settings listed in the Classroom Configuration table.

6. Click OK twice, and then click Close.



9. Click Advanced, and remove any IP addresses other than the IP address specified in the IP addresses box.

10. Click OK twice, and then close the open windows.


2. Install the Active Directory Domain Services role.

3. In Server Manager, click Go to Manage Roles, and then click Go to Active Directory Domain Services.

4. Click Run the Active Directory Domain Services Installation Wizard.



7. Click Existing forest, click Create a new domain in an existing forest, and then click Next.

8. On the Network Credentials page, type WoodgroveBank.com, and then click Set.

9. Type Administrator as the User name, and Pa$$w0rd as the password, click OK, and then click Next.

10. In the FQDN of the parent domain box, type WoodgroveBank.com.

11. In the Single-label DNS name of the child domain box, type EMEA, and then click Next.

12. In the Domain functional level box, click Windows Server 2003, and then click Next twice.

13. On the Select a Site page, click Next.


14. On the Additional Domain Controller Options page, verify that DNS server is selected as an additional option, and then click Next.



17. In the Password and Confirm password boxes, type Pa$$w0rd, and then click Next.



20. After the system reboots, log on as Administrator with the password Pa$$w0rd.

To create the user and group accounts 1. Create a new folder named Setup on the virtual machine C:\drive.

2. Copy the files in the EMEASetup folder to the C:\Setup folder.

3. Double-click SetupEMEA.bat.

4. Delete the c:\Setup folder.






























29. Close the Windows Explorer window.



Language Options.
























4. Click OK three times, and then close the Control Panel.





4. Shut down the virtual machine.

4. Modify the Microsoft Learning differencing drive 1. Copy the xxxxy-LON-DC1.vhd file to the Drives folder.

2. Rename the xxxxy-LON-DC1.vhd file to 6425A-LON-DC1.vhd.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-LON-DC1.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-LON-DC1.vhd.




To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-LON-DC1, and

then click Turn On.

2. Connect to the 6425A-LON-DC1 virtual machine by using the VMRC client.



Differencing Drive: 6425A-NYC-RAS.vhd



2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-RAS.vhd.



click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\ xxxx\Drives\xxxxy-NYC-RAS.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-NYC-RAS.vhd.




8. Click the Network Adapters link.

9. Click Add Network Adapter, configure the network adapter to connect to the Internal Network, and then click OK.



To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-NYC-RAS, and

then click Turn On.

2. Connect to the xxxxy-NYC-RAS virtual machine by using VMRC.



2. In the Product key box, clear the Automatically activate Windows when I’m online check box, and then click Next.


4. In the Type a computer name box, type NYC-RAS, and then click Start.



To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, click xxxy-NYC-RAS, and


2. Under “xxxy-NYC-RAS” Configuration, click Virtual Machine Additions.

3. In “xxxy-NYC-RAS” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

4. In the Virtual Machine Remote Control Client (VMRC) connected to xxxy-NYC-RAS, click Run Setup.exe.





8. On the Virtual Server Administration Web site, click xxxy-NYC-RAS, and then click Edit Configuration.

9. Under “xxxy-NYC-RAS” Configuration, click Virtual Machine Additions.

10. In “xxxy-NYC-RAS” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

11. In the VMRC connected to xxxy-NYC-RAS, click Run Setup.exe.








5. Configure the IP address, Subnet mask, and Preferred DNS server based on the settings listed in the Classroom Configuration table, and then click OK.




9. Right-click Local Area Connection 2, and then click Properties.



11. Configure the IP address and Subnet mask based on the settings listed in the Classroom Configuration table, and then click OK.

12. Close all open windows except Server Manager.

To configure the local user accounts 1. Open Server Manager.

2. Expand Configuration, expand Local Users and Groups, and then click Users.

3. Right-click Administrator, and then click Rename.

4. Type LocalAdmin, and then press ENTER.

5. Right-click LocalAdmin, and then click Properties.

6. Select the Password never expires check box, and then click OK.

7. Right-click Users, and then click New User.

8. In the New User dialog box, type Student as the User Name, and Pa$$w0rd in the Password and Confirm password dialog boxes.

9. Clear the User must change password at next logon check box, select the Password never expires check box, and then click Create.

10. Click Close, and log off the computer.

11. Log on as Student using the password Pa$$w0rd.

To configure miscellaneous settings for the Student account 1. Right-click the desktop, and then click Personalize.



4. Click Windows Color and Appearance, click Effects, clear all check boxes, and then click OK twice.



6. Right-click the taskbar and then click Properties.








14. Close Internet Explorer, and then log off.

To configure miscellaneous settings for the LocalAdmin account 1. Log on as LocalAdmin using the password Pa$$w0rd.

2. On the Initial Configurations Tasks dialog box, click Do not show this window at logon, and then click Close.

3. Right-click the desktop, and then click Personalize.























25. At the command prompt, type rmdir /s /q c:\Windows\Panther, and then press ENTER.





30 On the Tools menu, click Folder Options.


32 Close the Windows Explorer window.



Language Options.

























4. Click OK twice.



To clear the event logs 1. On the Start menu, point to Administrative Tools, click Event Viewer.

2. In the Event Viewer dialog box, expand Windows Logs.

3. Right-click Application, click Clear Log, and then click Clear.

4. Right-click Security, click Clear Log, and then click Clear.

5. Right-click Setup, click Clear Log, and then click Clear.

6. Right-click System, click Clear Log, and then click Clear.

7. Right-click Forwarded Events, click Clear Log, and then click Clear.


9. Close Control Panel.

To add the computer to the WoodgroveBank.com domain 1. In Server Manager, click Change System Properties.

2. On the Computer Name tab, click Change.

3. Select Domain, type WoodgroveBank.com, and then click OK.

4. In the Windows Security dialog box, type Administrator for the User Name, and Pa$$w0rd as the Password, and then click OK.

5. In the Computer Name/Domain Changes dialog box, click OK twice.

6. Click Close, and then click Restart Now.

7. After the computer reboots, log on as Woodgrove\Administrator using the password Pa$$w0rd.

8. Close the Initial Configuration page.

To install the Routing and Remote Access Server Role 1. In the Server Manager window, under Roles Summary, click Add Roles.



3. On the Select Server Roles page, select the Network Policy and Access Services check box, and then click Next twice.

4. On the Select Role Services page, select the Routing and Remote Access Services check box, and then click Next.

5. Accept all defaults to install the Routing and Remote Access role. When the installation finishes, click Close.

6. Close Server Manager.





























28. On the View tab, clear the Hide extensions for known file types check box, and click OK.


To add keyboard layouts 1. Click Start, and then click Control Panel. Double-click Regional and

Language Options.

























4. Click OK twice.






4. Shut down the virtual machine and commit all changes.




2. Copy the xxxxy-NYC-RAS.vhd file to the Drives folder.

3. Rename the xxxxy-NYC-RAS.vhd file to 6425A-NYC-RAS.vhd.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-RAS.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-RAS.vhd.




8. Click the Network Adapters link.

9. Click Add Network Adapter, and configure the network adapter to connect to the Internal Network.

10. Repeat the previous step two more times to configure a total of four network adapters, and then click OK.


then click Turn On.




To complete the lab preparation 1. In the Server Manager window, click View Network Connections.



4. Configure the IP address, Subnet mask, and Preferred DNS server based on the settings listed in the Classroom Configuration table, and then click OK.

5. Repeat steps 2-4 for Local Area Connections 2-4.

6. Click OK, and then close all open windows.

7. Click Start, point to Administrative Tools, and then click Routing and Remote Access.

8. Right-click NYC-RAS, and then click Configure and Enable Routing and Remote Access.


10. On the Configuration page, click Custom configuration, and then click Next.

11. On the Custom Configuration page, select the LAN routing check box, click Next, and then click Finish.

12. Click Start service.

13. Close Routing and Remote Access.

To prepare the virtual machine for Build 1. Open Internet Explorer.




5. Select the Also delete files and settings stored by add-ons check box, and then click Yes.

6. Click OK, and close Internet Explorer.












Differencing Drive: 6425A-VAN-DC1.vhd



2. In the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-VAN-DC1.vhd.

3. In the Fully qualified path to parent virtual hard disk, type C:\Program Files\Microsoft Learning\Base\Base05D.vhd, and then click Create.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-VAN-DC1.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\xxxx\Drives\xxxxy-VAN-DC1.vhd.






To start the virtual machine 1. On the Virtual Server Administration Web site, click xxxxy-VAN-DC1, and

then click Turn On.

2. Connect to the xxxxy-VAN-DC1 virtual machine by using VMRC.

3. Log on to the server using a user account of Administrator and the password Pa$$w0rd.

To activate the virtual machine 1. In the Windows Product Activation alert box, click Yes.

2. On the Let’s activate Windows page, click Yes, I want to telephone a customer service representative to activate Windows, and then click Next.

3. On the Activate Windows by phone page, click Change Product Key.

4. On the Change Product Key page, type the product key provided by Microsoft Learning, and then click Update.

5. On the Activate Windows by phone page, in the Step 1 list, click your location.

6. Dial the telephone number that is displayed in Step 2.

7. Follow the telephone instructions to activate Microsoft Windows®. This will take a few minutes.


To configure network settings 1. On the Start menu, point to Control Panel, point to Network Connections,

and then click Local Area Connection.

2. In the Local Area Connection Status dialog box, click Properties.

3. In the Local Area Connection Properties dialog box, click Internet Protocol (TCP/IP), and then click Properties.

4. In the Internet Protocol (TCP/IP) Properties dialog box, in the IP address, Subnet Mask, Default gateway, and Preferred DNS Server boxes, type the IP address specified the table in the Setup Requirements section, and then click OK.

5. Clear the check box next to Notify me when this connection has limited or no connectivity.

6. Click Close to close the Local Area Connection Properties dialog box.

7. Click Close to close the Local Area Connection Status dialog box.

To install Virtual Machine Additions 13.813 1. On the Virtual Server Administration Web site, edit the configuration for

xxxxy-VAN-DC1.

2. Under “xxxxy-VAN-DC1” Configuration, click Virtual Machine Additions.

3. In “xxxxy-VAN-DC1” Virtual Machine Additions Properties, select the check box next to Install Virtual Machine Additions, and then click OK.

4. Using VMRC, connect to xxxxy-VAN-DC1, and follow the wizard to install Virtual Machine Additions.

5. Restart xxxxy-VAN-DC1 as needed.

To generate a new security identifier (SID) and rename the computer 1. Copy the newsid.exe program to the virtual machine desktop, and then

double-click newsid.exe.

2. In the NewSID – Sysinternals: www.sysinternals.com dialog box, click Next.

3. On the Choose a SID page, ensure that Random SID is selected, and then click Next.


4. On the Rename the Computer page, select the Rename the computer to check box. In the Rename the computer to box, type the computer name specified in the Setup Requirements section, and then click Next.

5. On the Ready to Apply SID page, click Next. The computer SID will be changed, and the computer will restart. This might take several minutes.


7. In the Shutdown Event Tracker dialog box, in the Comment box, type newsid, and then click OK.

8. On the guest operating system desktop, click newsid.exe, and then press the DELETE key.

9. In the Confirm File Delete dialog box, click Yes.

10. Empty the Recycle Bin.

To configure the virtual machine as a domain controller 1. Click Start, click Run, in the Open box, type DCPromo, and then press

ENTER.

2. Install Active Directory® directory service on the computer using the following settings and options:

• Domain controller for a new domain

• Domain in a new forest

• Domain DNS Name: Fabrikam.com

• Domain NetBIOS name: Fabrikam

• Restore Mode Password: Pa$$w0rd

• Allow DCPromo to install and configure DNS.

To create the User and Group accounts 1. Create a new folder on the virtual machine C:\drive, named Setup.

2. Copy the files in the FabrikamSetup folder to the C:\Setup folder.

3. Double-click SetupFabrikam.bat.

4. Delete the c:\Setup folder.


To add keyboard layouts 1. Click Start, point to Control Panel, and then click Regional and Language

Options.

2. On the Languages tab, select the Install files for East Asian languages check box, and then click OK.

3. When prompted, restart the computer. Log on as Fabrikam\administrator with the password Pa$$w0rd.

4. Click Details, click Start, point to Control Panel, and then click Regional and Language Options.

5. On the Languages tab, click Details.

6. On the Settings tab, click Add, and then add the following languages:

• Chinese ( PRC) – Chinese (Simplified) – Microsoft Pinyin IME


• Czech – Czech

• Danish – Danish



















4. Click OK twice.

To clear the event logs 1. On the Start menu, point to Administrative Tools, click Event Viewer, right-

click Application, and then click Properties.

2. In the Log Properties dialog box, in the Maximum log size (KB) box, type 512, and then click OK.

3. In the Event Viewer dialog box, click OK.

4. Right-click Security, and then click Properties.

5. In the Log Properties dialog box, in the Maximum log size (KB) box, type 512, click OK.


7. Right-click System, and then click Properties.

8. In the Log Properties dialog box, in the Maximum log size (KB) box, type 512, and then click OK.


10. Right-click Application, click Clear All Events, and then click No.

11. Right-click Security, click Clear All Events, and then click No.

12. Right-click Directory Service, click Clear All Events, and then click No.

13. Right-click System, click Clear All Events, and then click No.

14. Right-click File Replication Service, click Clear All Events, and then click No.



Miscellaneous settings 1. On the Start menu, in the Start Search box, type regedit, and then press

ENTER.

2. In Registry Editor, navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SessionManager\MemoryManagement, and then double-click ClearPageFileAtShutdown.

3. In the Edit DWORD dialog box, in the Value Data box, type 1, and then click OK.

4. Ensure that the display settings are configured to 800 x 600.

5. Configure Automatic Updates to Notify me but don’t automatically download or install.

6. Open Internet Explorer, and set the default home page to blank.

To deactivate the virtual machine 1. Deactivate and clean up the virtual machine by using VMClean, version 1.0.36.

2. Shut down the virtual machine, and commit all changes to the hard drive.

4. Modify the Microsoft Learning differencing drive 1. Copy the xxxxy-VAN-DC1.vhd file to the Drives folder.

2. Rename the xxxxy-VAN-DC1.vhd file to 6425A-VAN-DC1.vhd.


click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-VAN-DC1.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-VAN-DC1.vhd.





To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-VAN-DC1, and

then click Turn On.

2. Connect to the 6425A-VAN-DC1virtual machine by using the VMRC client.


To prepare the virtual machine for build 1. Copy VMClean, version 1.0.36 to the computer desktop.

2. Run VMClean as an administrator. On the Development page, select all available options except the option to deactivate the computer, and then click Clean.



Differencing Drive: 6425A-NYC-CL1.vhd

1. Create the Differencing drive 1. On the Virtual Server Administration Web site, under Virtual Disks, click


2. Next to the Virtual hard disk name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-CL1.vhd.

3. In the Fully qualified path to parent virtual hard disk, type C:\Program Files\Microsoft Learning\Base\Base08D.vhd, and then click Create.



click Create.

2. In the Virtual machine name box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-CL1.


4. Click Use an existing virtual hard disk, and then in the File name (.vhd) box, type C:\Program Files\Microsoft Learning\6425\Drives\6425A-NYC-CL1.vhd.



7. Select the Enable undo disks check box, and then click OK.


To start the virtual machine 1. On the Virtual Server Administration Web site, click 6425A-NYC-CL1, and

then click Turn On.

2. Connect to the 6425A-NYC-CL1 virtual machine by using the VMRC client.

To activate the virtual machine 1. Log on as LocalAdmin with the password Pa$$w0rd.

2. In the Windows Activation dialog box, enter your Product key, and then click Next.

3. At the User Account Control prompt, click Continue.

4. Follow the steps to activate the product by telephone, changing the product code to the one from your Certified Partner for Learning Solutions or Microsoft Certified Trainer product key.


To configure the virtual machine 1. Log on to 6425A-NYC-CL1 as LocalAdmin with the password Pa$$w0rd.

2. Click Start, right-click Network, and then click Properties.

3. In the Tasks list, click Manage network connections.

4. In Network Connections, right-click Local Area Connection, and then click Properties.


6. In the Local Area Connection Properties dialog box, double-click Internet Protocol Version 4 (TCP/IPv4).

7. In the Internet Protocol Version 4 (TCP/IPv4) Properties dialog box, configure the network settings as indicated in the Classroom Configuration table.

8. Close Network Connections.

9. Close Network and Sharing Center.

To join the computer to the WoodgroveBank.com domain 1. Click Start, right-click Computer, and then click Properties.

2. In System, in the Tasks list, click Advanced system settings.


4. In the System Properties dialog box, click the Computer Name tab, and then click Change.

5. In the Computer Name field, type NYC-CL1, and then click OK.

6. Click Domain. In the Domain box, type WoodgroveBank.com, and then click OK.

7. In the Windows Security dialog box, in the User name box, type Administrator, and in the Password box, type Pa$$w0rd, and then click OK.

8. At the Computer Name/Domain Changes welcome prompt, click OK.

9. At the Computer Name/Domain Changes restart prompt, click OK.

10. In the System Properties dialog box, click Close, and then click Restart Now.


Miscellaneous settings 1. Right-click the desktop, and then click Personalize.




5. Click Start, right-click Computer, and then click Properties.

6. In the Tasks list, click Advanced system settings.

7. On the Advanced tab, in the Performance section, click Settings, click Adjust for Best Performance, and then click OK twice.

8. On the System page, click Windows Updates.




12. On the Start Menu tab, clear the Store and display a list of recently opened programs and the Store and display a list of recently opened files check boxes, and then click OK.

13. Open Internet Explorer, and set the default home page to blank.

14. In the task bar, right-click Windows Sidebar, and then click Properties.

15. In the Windows Sidebar Properties dialog box, clear the Start Sidebar when Windows starts check box, and then click OK.

To prepare the virtual machine 1. Click Start, point to All Programs, click Accessories, right-click Command

Prompt, and then click Run as administrator.

2. At the command prompt, type slmgr –ipk 6DG8Y-246YP-KWYMD-Y82HX-KKGG9, and then press ENTER. After approximately two minutes, the Windows Script Host dialog box appears.





6. Close the Command prompt.

7. Copy VMClean, version 1.0.36 to the computer desktop.




6425A_bg_Ox

Documents

Transcript of 6425A_bg_Ox