Restrict Windows Server Access to a Specific Active Directory Group

1 hour
  • 3 Learning Objectives

About this Hands-on Lab

You are working on securing your Windows Servers, and as part of the effort, you want to make sure that only the correct people can log into them. You want to make sure that the employees on the sales team cannot access the servers via remote desktop. In order to do this, in this hands-on lab, you are going to create a Group Policy to deny access to any user in the **Sales** group if they try to log in.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Configure the Active Directory Domain Services Environment
Restrict Access to Domain Controller Using Group Policy Object
Confirm Sales User Cannot Remotely Connect to Domain Controller
  • Log in to the VM
  • Attempt to remote into the domain controller virtual machine using the Sales user account
  • Confirm that the settings have been applied by the GPO

Additional Resources

Lab Prerequisites

You should be familiar with the following to use this hands-on lab:

  • Active Directory Domain Services
  • Group Policy

Lab Setup

This lab will require the use of an Active Directory domain, so the first thing that will need to be done will be to configure the domain. Because this environment will be set up on Azure Virtual Machines, there will be a few Azure-specific steps that will need to be taken and will be delineated in the lab objectives.

Lab Files

The lab files needed for configuring the Active Directory Domain Services environment can be accessed via the GitHub repository for this lab.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?