Assignment Overview
In this lab, students will deploy a small enterprise network using virtualization. Students will install Windows Server 2022 Datacenter (GUI) as a Domain Controller, create a domain, join two client machines (Windows 11 Pro and Fedora Linux) to the domain, create an Organizational Unit (OU), configure a shared folder, and provide domain access to client computers.
Marking Scheme
Requirement → Solution Map
View all 20 assignment requirements
- Create a virtualized environment using VMware Workstation or Oracle VM VirtualBox.
- Install Windows Server 2022 Datacenter (Desktop Experience/GUI).
- Configure a static IP address on the server.
- Install and configure Active Directory Domain Services (AD DS).
- Promote the server as a Domain Controller.
- Create a new domain named: cacc.local (or your own unique domain name).
- Create a Windows 11 Pro virtual machine.
- Create a Fedora Linux virtual machine.
- Configure both clients with proper network settings.
- Join both client machines to the Active Directory domain.
- Create an Organizational Unit (OU) called: Accounts.
- Create the following users inside the Accounts OU: Student01, Student02, Student03.
- Create a folder named: AuditFile.
- Share the folder on the server.
- Grant appropriate permissions to domain users.
- Verify access from both Windows 11 and Fedora clients.
- Log into the Windows 11 client using a domain account.
- Log into the Fedora client using a domain account.
- Access the AuditFile shared folder from both clients.
- Take screenshots proving successful completion of each task.
Build the Virtual Lab and Domain Controller
Step 1: Create Virtual Machines
- Create three VMs:
- DC01 - Windows Server 2022 Datacenter GUI
- WIN11 - Windows 11 Pro
- FEDORA - Fedora Workstation
- Recommended Resources:
- RAM: 4 GB minimum each
- CPU: 2 vCPUs
- Disk: Server 80 GB; Clients 50 GB
Step 2: Install Windows Server 2022
- Mount Windows Server 2022 ISO.
- Choose: Windows Server 2022 Datacenter Evaluation (Desktop Experience)
- Complete installation.
- Set Administrator password.
Step 3: Configure Static IP
- IP Address: 192.168.10.10
- Subnet Mask: 255.255.255.0
- Gateway: 192.168.10.1
- Preferred DNS: 192.168.10.10
- Verify: ipconfig /all
Step 4: Install Active Directory
- Open: Server Manager → Add Roles and Features
- Install: Active Directory Domain Services
- Install: DNS Server
- Promote this server to a domain controller
- Add a new forest
- Domain name: college.local
- Complete wizard and reboot.
Need help with a similar assignment or project?
Send your assignment brief, marking rubric or existing work for originality-focused support, technical review, troubleshooting and project guidance tailored to your requirements.
Create the OU, Users and Shared Folder
Step 5: Create Organizational Unit
- Open: Active Directory Users and Computers
- Right-click domain: New → Organizational Unit
- Create: Accounts
Step 6: Create Users
- Inside Accounts OU:
- Create: Student01
- Create: Student02
- Create: Student03
- Assign passwords.
- Example: Password123!
- Enable: User must change password at next logon (Optional)
Step 7: Create Shared Folder
- Create folder: C:\AuditFile
- Right-click: Properties → Sharing → Advanced Sharing
- Share Name: AuditFile
- Permissions: Domain Users = Read/Write
- NTFS Permissions: Modify; Read & Execute; Write
Install Windows 11 and Join the Domain
Step 8: Install Windows 11 Pro
- Create VM and install Windows 11 Pro.
- When Windows 11 reaches: Let's connect you to a network
- Press: Shift + F10
- Command Prompt opens.
- Run: OOBE\BYPASSNRO
- The system will reboot.
- After reboot select: I don't have Internet
- Then: Continue with Limited Setup
- Create a local account.
- Example: studentpc
- Complete installation.
Step 9: Join Windows 11 to Domain
- Configure DNS: 192.168.10.10
- Open: Settings → System → About
- Select: Rename this PC (Advanced)
- Click: Change
- Choose: Domain
- Enter: college.local
- Provide: Administrator credentials.
- Reboot.
- Test login: college\Student01
Install Fedora and Join Active Directory
Step 10: Install Fedora
- Install Fedora Workstation.
- Set Hostname: fedora01
- Configure DNS: 192.168.10.10
Step 11: Join Fedora to Active Directory
- Install required packages: sudo dnf install realmd sssd sssd-tools oddjob oddjob-mkhomedir adcli samba-common-tools -y
- Discover domain: realm discover college.local
- Join domain: sudo realm join college.local -U Administrator
- Verify: realm list
- Test: id Student01@college.local
Verify AuditFile Access from Both Clients
Step 12: Access Shared Folder from Windows 11
- Open Run: \\DC01\AuditFile
- Or: \\192.168.10.10\AuditFile
- Create a test file.
- Take screenshot.
Step 13: Access Shared Folder from Fedora
- Open Files Manager.
- Connect: smb://dc01/AuditFile
- Or: smb://192.168.10.10/AuditFile
- Authenticate using: Student01
- Create: test.txt
- Take screenshot.
Required Screenshot Evidence
Windows Server 2022 installed.
Static IP configuration.
Active Directory Domain Services installed.
Domain Controller configuration.
Accounts OU created.
User accounts created.
Windows 11 joined to domain.
Fedora joined to domain.
AuditFile share permissions.
Accessing AuditFile from Windows 11.
Accessing AuditFile from Fedora.
Successful domain login on both clients.
Verification Questions and Answers
It provides a centralized directory service to manage users, computers, and permissions, enabling Single Sign-On (SSO) and central security policies across a network.
Clients rely on the DC's IP for DNS and authentication; a changing IP would break DNS records and prevent domain logins.
A container within Active Directory used to logically organize users and computers to easily apply Group Policies and delegate admin control.
Share permissions apply only over the network, while NTFS permissions apply both locally and over the network. The most restrictive permission applies.
DNS uses specific Service (SRV) records to point clients to the exact IP address and port where the DC's authentication services are running.
Set the client’s DNS to the DC's IP, go to System Properties, select "Domain", enter the domain name, and provide Administrator credentials.
Set DNS to the DC, install packages (realmd, sssd, adcli), and run sudo realm join --user=Administrator <domain>.
On Windows, check System Properties for the domain name. On Linux, run realm list and look for "configured: kerberos-member."
It provides Single Sign-On (SSO), enforces centralized password policies, and allows administrators to instantly revoke network access in one place.
On Fedora, systemd-resolved failed to route queries for the .local domain, so I bypassed it by mapping the DC's IP in /etc/hosts and joining via IP