1.
Router Configuration
Open your browser i.e (chrome, ms edge, mozilla firefox).
Type the router ip address in the address bar (192.168.0.1).
Enter the default username (admin) and password (admin).
Navigate to Wireless and click wireless settings under wireless network name change the
ssid to (your name) click save.
Click wireless security and change the password to Css@12345 and click save.
Click DCHP under dchp setting disable dhcp server then click save.
Click Security and disable spi firewall then click save.
Click Network then click LAN change ip address to (192.168.2.1) click save and the router
will automatically reboot.
2. Client and server connection
Turn off firewall (client and server computer) - from start open "check firewall status", click
"turn windows defender on or off" turn off both private and public firewall, click ok.
Assigning IP address (client and server computer) - from start search for "control panel",
click "network and internet", click "network and sharing center" from the left tab click
"change adapter settings" right click "ethernet" and click "properties" double click "ip
address version 4", click use the following ip address:
Server ip configuration:
IP address: 192.168.2.2
Subnet mask: 255.255.255.0
Default gateway: 192.168.2.1
Preferred DNS server: 192.168.2.2
Client ip configuration:
IP address: 192.168.2.3
Subnet mask: 255.255.255.0
Default gateway: 192.168.2.1
Preferred DNS server: 192.168.2.2
Click ok, uncheck "ip address v6", click ok, right click "Ethernet" click "disable" right click again
and "enable".
From start open "cmd" run the command "ipconfig".
Your server computer should display something like this:
Your client server should display the same but with different ipv4 address:
Test the connection of both computers:
Run the following commands:
Server: ping 192.168.2.3
Client: ping 192.168.2.2
If both computers receive a reply, then they are both configured successfully.
3. Adding Roles and Features (Server computer)
Open "server manager" click "add roles and features", click next, click next, click next,
check "Active directory domain services", "DHCP server", "DNS server" and "Print and
Document Services", click next check "Windows Server Backup" click next, click next,
click next, click next, click install.
4. Renaming Server Computer
Press windows e, right click "This pc" click "properties", click "change settings”, under
"Computer Name" tab click "change" change "Computer Name" to "server", click ok,
close, and the computer will automatically restart.
5. Domain Controller Configuration
Open "server manager" click the notification and click "Promote this server to a domain
controller".
Select "add new forest" in the root domain name type "css.local" click next, in the
password type "Css@12345" click next, click next, dont change the netBios name click
next, click next, click next, click "install". The computer will automatically restart.
Click notification and click "complete DHCP configuration", click next, click commit, click
close.
6. DHCP configuration
Click "DHCP" from the left bar, right click "server" click "DHCP Manager".
Expand server.css.local, right click "ipv4" click "new scope" click next, in the name type
"css scope" click next, use the following ip address:
Starting ip address: 192.168.2.10
Ending ip address: 192.168.2.20
Click next, click next, click next, click next, use the router ip address: 192.168.2.1 and
click add select the added ip address and click next, select the server ip address and click
next, click next, click next, click finish.
After the computer restart login and change your prefered dns server to change, go to
control panel, network and internet, network and sharing center, change adapter
settings, right click ethernet and click properties, double click ipv4, change prefered dns
server from 127.0.0.1 to 192.168.2.2 right click ethernet disable and enable.
7. DNS Configuration
Open "server manager" click "DNS" from the left bar, right click the server and click
"DNS manager".
Expand server.css.local, expand "Forward lookup zones" click "css.local" and the very
bottom right click "server" click properties, check "Update associated pointer ptr
record" click apply, click ok.
Click and right click "Reverse lookup zones" click "new zone", click next, click next, click
next, click next, type "192.168.2" click next, click next, click finish.
Click and right click the added reverse lookup zone and click "New pointer (PTR)" under
"Host ip address " complete the ip address into "192.168.2.2" and click "browse" in
"record types "click "all records" double click server.css.local, double click "Forward
lookup zones", double click "css.local" click "Start of Authority (SOA)" and click ok, click
ok.
Click and right click "Reverse lookup zones" click "new zone", click next, click next, click
next, click next, type "127.0.0" click next, click next, click finish.
Click and right click the added reverse lookup zone and click "New pointer (PTR)" under
"Host ip address " complete the ip address into "127.0.01" and click "browse" in "record
types "click "all records" double click server.css.local, double click "Forward lookup
zones", double click "css.local" click "Start of Authority (SOA)" and click ok, click ok.
8. File and Storage Services Configuration
Open server manager, click "File and Storage Services", right click server, click "Add roles
and Features" click next, click next, click next, expand "File and Storage services",
expand "File and ISCI Services" check "File Server Resource Manager" click next, click
next, click install.
9. Joining Client Computer to Domain
Change the ip address of the client computer, open control panel, click network and
internet, click network sharing center, click change adapter settings, right click ethernet,
click properties, double click ipv4, click "obtain an ip address automatically, click ok.
Press windows e, right click "This pc" click "properties" click "advanced system settings"
under "Computer name" tab click "Change" Select "domain" and type "css.local" login
using the following user:
Username: Administrator
Password: Css@12345
Click ok, close, and restart now.
10. Creating User Accounts and Organizational Unit
Open server manager, click tools, click "Active Directory Users and Computers".
Expand "css.local"
right click "css.local" hover to "new" and click "organizational unit" name it "css"
Click "Users" from the left bar look for the "Administrator" and right click and click
"copy". Create 2 users: (your name) (your instructor's name)
Example: User1:
Firstname: Carlo
Lastname: Corpuz
User Logon name: carlo
User2:
Firstname: albert
Lastname: einstein
User Logon name: albert
Click next, in the password use the same password "Css@12345"
Check "user cannot change password"
Drag the 2 user accounts to your organizational unit, click yes.
11. Folder Redirection Configuration
On your "local disk: c" create a new folder named "Redirection".
Right click the folder and click "properties" under "sharing" tab click "Advanced sharing"
check "share this folder" click "permissions" click "Everyone" and click "Remove" click
"Add" under "Object name" type "au" click ok select both "Authenticated User" and
"Authentication authority asserted identity " and click ok select "Authenticated Users"
and check "Full control" select "Authentication authority asserted identity " and click full
control.
Click apply, click ok, click apply, click ok, copy the network path.
In the "security" tab, click "edit" click "add" type "au" select both "Authenticated User"
and "Authentication authority asserted identity " click ok select "Authenticated Users"
and check "full control" select "Authentication authority asserted identity " and check
"full control".
click apply, click ok click close.
12. Group Policy Object (GPO) Configuration
Open server manager, Open Group Policy Management
Expand "Forest" expand "Domains" expand "css.local" click "css" under "delegation" tab
click "Advanced" " click "Add" under "Object name" type "au" click ok select both
"Authenticated User" and "Authentication authority asserted identity " and click ok
select "Authenticated Users" and check "Full control" select "Authentication authority
asserted identity " and click full control, click apply, click ok.
Right click css, click "Create GPO in this domain and link it here." name it "css gpo" click
"css gpo" click ok, under "delegation" tab click "Advanced" click "Add" under "Object
name" type "au" click ok select both "Authenticated User" and "Authentication
authority asserted identity " and click ok select "Authenticated Users" and check "Full
control" select "Authentication authority asserted identity " and click full control, click
apply, click ok.
Right Click "css gpo" click "Enforced" right click again and click "edit" under "User
configuration" expand "policies", expand "Windows settings" expand "Folder
Redirection".
Right click "Desktop" click "properties" change "not configured" to "basic" in the "root
path" paste the path you copied from the redirection folder. (\\SERVER\Redirection). In
the "settings" tab uncheck "grant the user exclusive rights to documents" and "move the
contents of documents to the new location" click apply, click, yes, click ok, repeat this
steps for "documents" and "downloads".
Click "Default Domain Policy", click ok, under "Delegation" tab click "Advanced" click
"Add" under "Object name" type "au" click ok select both "Authenticated User" and
"Authentication authority asserted identity " and click ok select "Authenticated Users"
and check "Full control" select "Authentication authority asserted identity " and click full
control, click apply, click ok.
Right click "Default domain policy" click "enforced" Right click "Default domain policy"
click "edit" under "User configuration" expand "policies", expand "Windows settings"
expand "Folder Redirection".
Right click "Desktop" click "properties" change "not configured" to "basic" in the "root
path" paste the path you copied from the redirection folder. (\\SERVER\Redirection). In
the "settings" tab uncheck "grant the user exclusive rights to documents" and "move the
contents of documents to the new location" click apply, click, yes, click ok, repeat this
steps for "documents" and "downloads".
13. Testing File Sharing
log in to the client computer using your user account, click other users, use your logon
name and password example:
Username: Carlo@css.local
Password: Css@12345
After logging in, in the server computer, check your folder Redirection it should have a
new folder inside it with the name of the user account, for example "carlo" open it and
check if the folder "Desktop", "Documents", and "Downloads" is present.
In the client computer create a new folder name it, "myfolder" open your folder and
create a new "text document" name the text document "myinfo".
Double click your text document, type the following:
Name:
Address:
Age:
click save.
In the server computer, open your folder Redirection, open your user account, double
click "desktop", open the folder, open the text document.
14. Printer configuration
Connect the printer to the server computer, install the printer driver.
Open server manager, click tools, click "Print Management" double click "all printers"
right click the printer you installed, click "properties" under "sharing tab" click "share
this printer" under the "security" tab click "add", under "Object name" type "au" click ok
select both "Authenticated User" and "Authentication authority asserted identity " and
click ok select "Authenticated Users" and check "print", "manage this printer", and
"manage documents", select ""Authentication authority asserted identity " and check
"print", "manage this printer", and "manage documents", click appy, click ok.
On the client computer, press start and type \\server, right click the printer, and click
connect.
Open your text document, press ctrl p, click print. The printer should print the
document.
15. Backup and restore
In the server computer, open "server manager" click "tools" and click "Windows server
backup".
Click "local backup", click "backup once" click next, select "custom" and click next, click
"add items" expand "local disk c:" expand "redirection" check your folder e.g "carlo",
click ok, click next, click next, in "backup destination" select "recovery", click next, click
backup.
On the client computer delete the folder you created e.g "myfolder".
On the server computer, click "recover", click next, click next, click next, expand "server"
expand "local disk: c" expand "Redirection" select your name e.g "carlo" click next, click
next, click recover.
On the client computer, check if the deleted folder is recovered.