Assessment Tasks:

1. Create Bootable Flashdrive for Server 2012 r2

2. Start Creating Network Cable
3. Configure BIOS of Server Computer set Bootable FD as first boot device
4. Install Server 2012 r2
5. Perform Partitioning (Ask the Assessor)
6. Continue Creating Network Cable
7. Perform Network Physical Connection
8. Configure Router
a. Obtain IP for the Network Adapter
b. WAN (ISP IP address: x.x.x.your number)
c. Wi-Fi
d. Change Device Password
e. LAN (ask the assessor for the IP class, IP address: x.x.x.1)
9. Configure Access Point
a. Assign Static IP for the Network Adapter
b. Wi-Fi
c. Change Device Password
d. LAN (IP address: x.x.x.4)
e. Change Network Adapter IP address
10. Perform MAC Filtering for Router and Accesspoint
11. Configure Server
a. Assign Static IP Address for the Network Adapter
b. Enable Remote Desktop
c. ADD ROLES
i. Active Directory Domain Services
ii. DHCP
iii. DNS
iv. Print and Document Services
v. Remote Desktop Services
vi. Network Policy and Access Services
vii. File and Storage Services
d. Promote The server to a Domain Controller
e. Create Organizational Unit, Group and Users
f. Create Group Policy
i. Remove Recycle Bin
ii. Folder Redirection
iii. Printer Deployment
g. Configure Client then Assign Static IP Address
h. Enroll Client to Domain
i. Log-in Users the check the created Group Policy
j. Perform Remote Desktop Connection
k. Print Documentation
l. Unenroll Client From Domain
COC 1: Install and Configure Computer System
12 Occupational Health and Safety Procedures

1. Do not work alone so that there’s someone who can take care of you in case of an emergency.
2. Always power off the computer and unplug the computer before working on it.
3. Take away any liquid near your working area to avoid getting electrocuted or accidentally damaging computer parts.
4. Be careful with tools that may cause a short circuit.
5. Always ground or discharge yourself before touching any part of the computer.
6. Do not use excessive force if things don’t quite slip into place.
7. Clean the area before and after using it to maintain sanitation and prevent accidents.
8. Hold the components on the edges and do not touch the Integrated Circuit (IC) parts.
9. Always wear personal protective equipment (PPE) in accordance with the organization’s OHS procedures and
practices.
10. Make sure that the pins are properly aligned when connecting a cable connector.
11. Contingency measures during workplace accidents, fire, and other emergencies are recognized.
12. Use a brush, compressed air, or blower in cleaning the computer system.

5S Principles

Seiri (sort), Seiton (set in order), Seiso (shine), Seiketsu (standardize), and Shitsuke (sustain)

1. Create Bootable Flashdrive

1. Open rufus
2. Select ISO (server 2012 r2)
3. Start
4. Eject flashdrive then plug into the server computer

2. Configure BIOS of the server computer

1. Turn-on or restart the computer

2. Press ESC, F2, Del to access BIOS
3. Configure the BOOT order
4. Assign the Bootable flashdrive as the First boot device
5. Save configuration then wait for the computer to reboot

3. Install Windows Server 2012 r2

1. Press any key

2. Start installation
3. Select the Server 2012 r2 Standard with GUI
4. Perform Partitioning (ask the assessor for your partition)
5. Install OS

4. Install Drivers (have a copy of the drivers software installer then install it)
COC 2: Install and Configure Computer Networks
T568B Cabling Standard:

White-orange, Orange, White-Green, Blue, White-Blue, Green, White-Brown, Brown

Network Physical Connection:

Patch Panel T568B color coding: White-Blue, Blue, White-Orange, Orange, White-Green, Green, White-Brown-Brown
Configure Router

Remove Connection of the Access Point

1. Reset the Router

2. Obtain Network Adapter (NCPA.CPL)
3. Check Default IP address/ Default Gateway (Open CMD run IPConfig /All)
4. Open Browser (Internet Explorer or Google Chrome)
5. Enter IP/Default Gateway into the Address Bar
6. Login username and password
7. Configure WAN / Internet

IP Address: follow ISP then change the last number with your assigned number x.x.x.
Subnet: (use the subnet for the ISP IP address, ex. 255.255.255.0 for class C)
Default Gateway: ISP IP Address
DNS1: ISP IP Address
8. Configure WiFi / Wireless
SSID: Lastname_RTR
Password: Ask the assessor
9. Change Device Password
10. Configure LAN
Ask the assessor for the IP address Class

IP Address: follow IP Address Class then last number will be .1

Subnet: (use the subnet for the IP address class, ex. 255.255.255.0 for class C)

Please make sure DHCP is Enabled.

Configure Accesspoint

Remove Connection of the Access Point

1. Reset the AP
2. Assign Static IP Address in the Network Adapter (NCPA.CPL)
IP Address: Enter the IP address of the AP change the last number.
Subnet: Enter Subnet
Default Gateway: Enter the IP address of the AP.
3. Open Browser (Internet Explorer or Google Chrome)
4. Enter IP/Default Gateway into the Address Bar
5. Login username and password
6. Configure WiFi / Wireless
SSID: Lastname_AP
Password: Ask the assessor
7. Change Device Password
8. Configure LAN
Follow Routers IP address Class

IP Address: x.x.x.4
Subnet: (use the subnet for the IP address class, ex. 255.255.255.0 for class C)
Default Gateway: Routers IP Address
DNS1: Routers IP Address

Please make sure DHCP is Enabled.

Range x.x.x.100 - x.x.x.200
Default Gateway: AP IP Address
DNS1: AP IP Address
Perform MAC Filtering for Router and Accesspoint
1. Connect the Laptop to you router (first then) Access points WiFi.
2. Look for Wireless MAC Filtering or MAC Filtering in the Router and AP settings.
3. Select the option Enable then DENY…
4. Add the Laptop MAC address
Some Router or AP provides wireless statistics or the list of connected devices to the wifi, access that then
copy the MAC address from there.
5. Enable MAC Filtering, the show the assessor that the laptop is disconnected or unable to access the internet.
6. Disable MAC Filtering, then show the assessor that the laptop can connect and access the internet.
COC 3: Set-Up Computer Server
Assign Static IP Address
IP Address: x.x.x.2
Subnet:
Default Gateway: x.x.x.1
DNS Server: x.x.x.1
• Rename the server
• Disable Firewall
• Enable Remote Desktop
ADD ROLES:
1. Active Directory Domain Services
2. DHCP
3. DNS
4. Print and Document Services
5. Remote Desktop Services
6. Network Policy and Access Services
7. File and Storage Services
Let the server restart, allow the server to continue the configuration

Promote the server to a Domain Controller

1. Click Notification then click Promote this to a domain controller
2. Add new forest (ask assessor for the Root domain name) sample itaran.nhs, click next
3. Enter DSRM password, Css_2025, click next then next again
4. Check NetBIOS domain name if same with the domain name, sample ITARAN, then click next
5. Just click few more Next then click Install
6. Wait for it to finish then wait for the server to restart.
*complete DHCP configuration also in the notification
Create Organizational Unit, Group then User
Organizational Unit User Group Policy
OU1 User1 No recycle bin
OU2 User2 Folder Redirection
OU3 Group: PrinterGroup Printer Deployment
User3
1. Access Active Directory Users and Computers in the Server Manager tools
2. Right Click the domain name, select New > Organizational Unit
3. Enter Organizational Unit name, follow the table above
4. Right click the created OU, select New > User, enter name and user logon name > check option2 & 3 only>
Put Password Css_2025
5. Repeat the process until all OU and users are created.
6. For the Group in the OU3, right click the OU3 > select New > Group > Enter Group name > ok
7. Right click the Group > select members tab > Add > User3 > check name > ok > ok
Create Group Policy
 1. Access Group Policy Management in the Server Manager Tools
2. Expand the forest in the left panel until the Domain Name is shown
No Recycle bin Policy
1. Right click the OU for the No recycle bin policy > click Create a GPO in this domain …
2. Enter GPO name, follow the table above
3. Right click the policy created > select edit
4. User Configuration > Policies > Administrative Template > Desktop > Remove Recycle Bin form Desktop
> right click edit > click Enable > ok ..
Folder Redirection Policy
1. Create a shared folder
a. Create new folder
b. Right click > properties > sharing tab > advanced sharing > check share this folder > click
permissions > Add everyone, administrator then user2 > make sure Allow full control is checked >
ok..
c. Click Security Tab > Edit > add everyone and administrator > make sure Allow full control is
checked > ok
d. Highlight then Copy the Network Path
e. Go back to Group Policy Management
f. Right click the OU for the Folder redirection > click Create a GPO in this domain …
g. Enter GPO name, follow the table above
h. Right click the policy created > select edit
i. User configuration > Policies > Windows Settings > Folder Redirection > Right click Desktop >
Properties > Settings: Basic > Paste link in the Root Path field > click settings tab > uncheck Grant
user exclusive rights to desktop > check also apply redirection policy to windows 2000 … > ok ..
j. Repeat the step i for all the folders that need to be redirected.
Printer Deployment
PLEASE TAKE NOTE OF THE PRINT SERVER IP ADDRESS and PRINTER MODEL.
Also, Install the driver software for the printer first.

Method 1:

1. Access Print Management in the Server Manager Tools

2. Expand Print Servers
3. Right click Printers > Add Printer > Add a TCP/IP by IP address > uncheck auto detect the printer driver to
use > enter the Print Server IP address in the Hostname or IP address > click next > select the
Manufacturer and printer model (make sure to install first the driver software of the printer) > click few
more next until the installation of printer < finish
4. right click the installed printer > properties > sharing port > check the List in the directory > ok
5. Go back to Group Policy Management
6. Right click Group Policy Objects> new ..
7. Enter GPO name, follow the table above
8. Right click the policy created > select edit > User Configuration > Preferences > Control Panel Settings >
Printers > Right click > Shared Printer > Browse(…) for the share path > Select the printer at the bottom >
click ok > click common tab > check Item-Level targeting > click Targeting > click New Item > select
Security Group > click browse(…) group > enter Group name > check names > ok …
REMOTE DESKTOP CONNECTION

Client Computer

1. Search and open for Allow Remote connections to this computer

2. Log-in Administrator Account
3. Make sure Change settings to allow remote connections to this computer is checked then
4. Click show settings > Login Administrator account
5. Thick Allow Remote connections to this computer
6. Uncheck Allow connections only from computer running remote desktop ….

Server Computer

1. Search and open for Allow Remote connections to this computer

2. Thick Change settings to allow remote connections to this computer
3. Uncheck Allow connections only from computer running remote desktop …. > ok