In this lab, you will use a basic Active Directory Domain Services setup to simulate a domain. Using the administrative tools available, you will then work through the common actions associated with user and group functions, such as adding users and groups, modifying memberships, nesting groups, and even deleting and restoring user objects.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create Users and Groups
Launch the Active Directory Admin Center and create six unique users with the following criteria:
- Two with the suffix
-ea
- Two with the suffix
-da
- Two without any suffixes
- Two with the suffix
Using the ADAC, also create the following types of groups:
- Domain local
- Global
- Universal
Move all of the newly created users and groups to the
Users
folder.
- Modify Group Memberships
- Add
-ea
users into theEnterprise Admins
universal group and newly created universal group. - Add
-da
users into theDomain Admins
global group and newly created global group. - Add non-suffix users into the domain local group.
- Add
- Review Nesting Groups
Attempt the following actions:
- Global group into the universal group
- Global group into the domain local group
- Universal group into the domain local group
- Universal group into the global group
- Domain local group into the universal group
- Domain local group into the global group
- Review Advanced Features
- Reveal your PowerShell history.
- Set a new password for a user and require them to change it on their next logon.
- Set a user account to expire 30 days from the date you are doing this lab.
- Delete a user and restore the user using the Recycle Bin.