Win2008 Lab Basic

7/23/2019 Win2008 Lab Basic

1/177

TRUNG TM O TO MNG MY TNHNHT NGH105 B Huyn Thanh Quan 205 V ThSu , Q3, TP. HCM

Tel: 9322735 - 0913735906 Fax: 9322734 Website: www.nhatnghe.com

01-1

1. Xy dng Domain Controller tch hp DNS server(thc hin trn Server)

C TIU: Xy dng Domain Controller tch hp DNS server & Bsung dliu DNS

THC HIN:

Log on userAdministratorB1. Cu hnh thng sIP:Start > Settings > Network Connections

a sNetwork Connections: Click phicard CROSS > Properties

Smith Nguyen St

ttp://www.facebook.com/SmithNguyenStudio
http://www.nhatnghe.com/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.nhatnghe.com/


2/177



01-2

p thoi CROSS Properties:- Xa du check Internet Protocol

Version 6- Chn Internet Protocol Version 4

> Properties

p thoi Internet Protocol Version 4Properties: Nhp cc thng sIP nhhnhi > OK

Smith Nguyen St
http://www.nhatnghe.com/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.nhatnghe.com/


3/177



01-3

p thoi CROSS Properties: Closea sNetwork Connections: Click phicard LAN > Properties

p thoi LAN Properties:- Xa du check Internet Protocol

Version 6Chn Internet Protocol Version 4 >Properties

Smith Nguyen St



4/177



01-4

p thoi Internet Protocol Version 4Properties: Nhp cc thng sIPCh :

- IP address : 192.168.P.L

- Subnet Mask : 255.255.255.0- Default Gateway : 192.168.P.200Trong P: sphng lab, L: strn monitor PC V d: phng 15my s 23 s phi nhp ccthng s:

- IP address : 192.168.15.23- Subnet Mask : 255.255.255.0- Default Gateway : 192.168.15.200

Chn OK sau khi nhp cc thng s

p thoi LAN Properties: Closeng ca sNetwork Connections.

B2. Kim tra thng sIP:

Start > Run

Smith Nguyen St



5/177



01-5

p thoi Run: Nhp lnhcmd> OK

a sAdministrator...cmd.exe: Nhp cu lnhipconfig /all> nhn phm Enter

Quan st thng tin IP

ng ca sAdministrator...cmd.exe

B3. Ci t Active Directory Domain services v DNS service:Start > Runp thoi Run: Nhp lnhDCPROMO> OK

Smith Nguyen St



6/177



01-6

Chgiy lt khi hthng thc hin cc bc khi to

p thoi Welcome to the ActiveDirectory Domain ServicesInstallation Wizard: nh du chnUse advanced mode installation >

Next

p thoi Choose a DeploymentConfiguration: nh du chnCreate a new domain in a newforest > Next

Smith Nguyen St



7/177



01-7

p thoi Name the Forest RootDomain: Nhp tnNhatNgheI T.edu> Next

Chgiy lt khi hthng thc hin bc kim tra

p thoi Domain NetBIOS Name:Next

Smith Nguyen St



8/177



01-8

p thoi Set Forest FunctionalLevel: chn Windows Server 2008> Next

p thoi Additional DomainController Options: Gi nguynu check DNS server > Next

p thoi Active Directory DomainServices Installation Wizard: Yes

Smith Nguyen St



9/177



01-9

p thoi Location for Database,Log Files, and SYSVOL: Next

p thoi Directory ServicesRestore Mode AdministratorPassword: Ln lt nhp vo 02khung:P@ssword> Next

Smith Nguyen St



10/177



01-10

p thoi Summary: Quan st &kim tra cc thng tin khai bo >

Next

Chgiy lt h thng thc hinci t

p thoi Completing the ActiveDirectory Domain ServicesInstallation Wizard : Finish

Smith Nguyen St



11/177



01-11

p thoi Active Directory Domain ServicesInstallation Wizard: Restart Now

Khi server khi ng xong: Qu trnh ci t Active Directory Domain Services hon tt

B4. Bsung dliu DNS service:Log on userAdministratorStart > Programs > Administrative Tools > Server Manager

a sServer Manager: Chn Roles> Chgiy lt hthng cp nht thng tin

Smith Nguyen St



12/177



01-12

Theo ng dn nhhnh di > click phi Reverse Lookup Zone > New Zone

p thoi Welcome to the NewZone Wizard: Next

p thoi Zone Type: Gi nguyna chn Primary zone & Storethe zone in Active Directory >

Next

Smith Nguyen St



13/177



01-13

p thoi Active DirectoryReplication Scope: Next

p thoi Reverse Lookup ZoneName: Ch chn IPv4 ReverseLookup Zone > Next

p thoi Reverse Lookup ZoneName: Nhp Network ID:192.168.1> Next

Smith Nguyen St



14/177



01-14

p thoi Dynamic Update: ginguyn la chn Allow onlysecure dynamic update > Next

p thoi Completing: Finish

Start > Runp thoi Run: Nhp lnhcmd> OKa sAdministrator...cmd.exe: Nhp cu lnhipconf ig /registerdns> nhn phm Enter

ng ca sAdministrator...cmd.exe

Smith Nguyen St



15/177



01-15

a sServer Manager: Theo ng dn > click phi zone s1.168.192.in-addr.arpa > Refresh

Hon tt qu trnh bsung dliu DNS.

Smith Nguyen St



16/177



02-1

2. Ci t v cu hnh DHCP Server(thc hin trn Server)

C TIU:Ci t DHCP Server role; cu hnh DHCP scope & cc option

THC HIN:

Log on userAdministrator

B1. Ci t DHCP service:a sServer Manager: Click phi Roles > Add Roles

p thoi Before You Begin: Next

Smith Nguyen St



17/177



02-2

p thoi Select Server Roles: chn DHCP Server > Next

p thoi DHCP Server: Next

Smith Nguyen St



18/177



02-3

p thoi Select Network Connection Bindings: Ch nh du chn 192.168.1.1 > Next

p thoi Specify IPv4 DNS Server Settings: Nhp Preferred DNS:192.168.1.1> Verify

Smith Nguyen St



19/177



02-4

p thoi Specify IPv4 DNS Server Settings: Gi tr Preferred DNS:c xc nhn hp l(Valid) > Next

p thoi Specify IPv4 WINS Server Settings: Chn WINS is not required >Next

Smith Nguyen St



20/177



02-5

p thoi Add or Edit DHCP Scopes: Next

p thoi Configure DHCPv6 Stateless Mode: Chn Disable DHCPv6 stateless mode >Next

Smith Nguyen St



21/177



02-6

p thoi Authorize DHCP Server: Gila chn mc nh Use current credentials > Next

p thoi Confirm Installation Selections: Install

Smith Nguyen St



22/177



02-7

Qu trnh ci t

p thoi Installation Results: Close

Smith Nguyen St



23/177



02-8

B2. Cu hnh DHCP scopes:a sServer Manager: theo ng dn > Click phi pc.NhatNgheIT.edu > Authorize (Nuthy c lnh Unauthorize th bqua bc ny)

a sServer Manager: theo ng dn > Click phi Ipv4 > New Scope

Smith Nguyen St



24/177



02-9

p thoi Welcome to the NewScope Wizard: Next

p thoi Scope Name: Nhp tnLAN 1> Next

p thoi IP Address Range: Nhpdy IP nhhnh di > Next

Smith Nguyen St



25/177



02-10

p thoi Add Exclusion: Next

p thoi Lease Duration: Next

p thoi Configure DHCPOptions: Gi nguyn la chnYes, I want to > Next

Smith Nguyen St



26/177



02-11

p thoi Router (DefaultGateway: Nhp thng s192.168.1.1> Add > Next

p thoi Domain Name and DNSServer:

- Nhp Parent domain:NhatNgheIT.edu

- Nhp IP address:192.168.1.1> Add > Next

Smith Nguyen St



27/177



02-12

p thoi WINS Servers: Next

p thoi Activate Scope: Ginguyn la chn Yes, I want >

Next

Smith Nguyen St



28/177



02-13

p thoi Completing: Finish

t qu

Smith Nguyen St



29/177



03-1

3. Cu hnh WS thnh Domain Member (Join domain- thc hin trn WS)

C TIU:Cu hnh Client Windows Vista: Chuyn giao din thnh Classic, cu hnh IP ng& join domain

THC HIN:Log on userAdministratorChuyn giao din thnh ClassicClick phi Start > Properties

p thoi Taskbar and Start Menu Properties:Chn Classic Start Menu > OK

Smith Nguyen St



30/177



03-2

t qu

B1. Cu hnh WS xin IP tDHCP server:Start > Settings > Network Connections

Smith Nguyen St



31/177



03-3

a s Network Connections:Click phi card LAN > Disable

a s Network Connections:Click phi card CROSSS >Properties

Smith Nguyen St



32/177



03-4

p thoi CROSS Properties:- Xa du check Internet Protocol

Version 6- Chn Internet Protocol Version 4 >

Properties

p thoi Internet Protocol Version 4Properties:

- nh du chn Obtain an IPaddress automatically

- nh du chn Obtain DNS serveraddress automatically > OK

p thoi CROSS Properties: Close

Smith Nguyen St



33/177



03-5

B2. Quan st kt qu:Start > Runp thoi Run: Nhp lnhcmd> OKa sAdministrator...cmd.exe: Nhp cu lnhipconfig /all> nhn phm Enter

B3. Khai bo Domain:Trn Desktop: Click phi icon Computer > Properties

Smith Nguyen St



34/177



03-6

p thoi System: Chn Change settings

p thoi System Properties: tab Computer Name > Change

Smith Nguyen St



35/177



03-7

p thoi Computer Name / DomainChanges: Chn Domain > nhp domainname:NhatNgheIT .edu> OK

p thoi Windows Security: Nhp usernameKT1& passwordP@ssword> OK

p thoi Computer Name / DomainChanges: OK

p thoi Computer Name / DomainChanges: OK

Smith Nguyen St



36/177



03-8

p thoi System Properties: Close

p thoi Microsoft Windows: RestartNow

Sau khi WS khi ng xong, qu trnh gianhp domain hon tt.

Smith Nguyen St



37/177



04-1

4. To cc domain object (thc hin trn Server)

C TIU:- o Organizational Unit (OU), User, Group- Add user vo group

- Qun l OUTHC HIN:Log on userAdministratorB1.To Organizational Unit User Group

a sServer Manager: theo ng dn > click phi NhatNgheIT.edu > New > OrganizationalUnit.

p thoi New Object - Organizational Unit: Nhp tn Lab> OK

Smith Nguyen St



38/177



04-2

a sServer Manager: click phi Lab > New > User

p thoi New Oiect - User: Nhp ccthng tin nhhnh di > Next

Smith Nguyen St



39/177



04-3

p thoi New Oiect - User: Nhppassword v confirm password: P@ssword> B du check User must change

password at next logon > Next

p thoi New Oiect - User: Quan stthng tin nhhnh di > Finish

Smith Nguyen St



40/177



04-4

o thm 01 user vi cc thng tin:- First name: Ti- Last name: Tran Van- User logon name: NS1

- Password: P@ssword(Ch : Bdu check User must change password at next logon)a sServer Manager: click phi Lab > New > Group.

p thoi New Object - Group: Nhp Group Name: KT> OK

ng t, to group vi group name: NS

Smith Nguyen St



41/177



04-5

B2.Cu hnh user thnh member ca Groupa sServer Manager: theo ng dn > click phi Teo Nguyen Van> Add to a group.

p thoi Select Groups: Nhp KT >Check Names > OK > OK

Smith Nguyen St



42/177



04-6

ng t, Cu hnh userTi Tran Vanthnh member ca Group NSStart > Run > Hp thoi Run: DSA.MSC> OK

a sActive Directory Users and Computers: theo ng dn > click phi Bom Le Van> Addto a group.

p thoi Select Group: nhp print>Check Names

Smith Nguyen St



43/177



04-7

t qu> OK

ng t, cho userKT1(Teo Nguyen Van) thnh member ca group Prin t Operators

a sActive Directory Users and Computers: theo ng dn > click phi Prin t Operators>Properties

Smith Nguyen St



44/177



04-8

p thoi Print Operators Properties > Tab Members > Quan st kt qu

B3.To cu trc OU lng trong OU.o OU KeToantrong OU Lab: Click phi OU Lab> New > Organizational Unit.

Smith Nguyen St



45/177



04-9

p thoi New Object - Organizational Unit: Nhp tn KeToan> OK

ng t, to OU NhanSutrong OU Labo 01 user vi cc thng tin:

- First name: Bom- Last name: Le Van- User logon name: Bom- Password: P@ssword(Ch : Bdu check User must change password at next logon)

Smith Nguyen St



46/177



05-1

5. Thit lp quyn truy cp ti nguyn ca user trn hthmc:(thc hin trn Server)

C TIU:HoSo: Kton & Nhn s: quyn cHoSoChung : Kton & Nhn s: ton quynHoSoKeToan : Kton: ton quynHoSoNhanSu: Nhn s: ton quyn

THC HIN:

B1.Xy dng ti nguynMy Computer > Click phi > New > Folder > NhpHoso

FolderHoSo> Click phi > New > Text Document > NhpDuli eu.txt

Smith Nguyen St



47/177



05-2

o folderHoSoChungtrong folderHoSoClick phiDu lieu.txt> Copy

Smith Nguyen St



48/177



05-3

Click phi FolderHoSoChung> Paste

Click phiHoSoChung> Copy

Smith Nguyen St



49/177



05-4

Click phi vo vng trng > Paste (thc hin 2 ln)

Click phiHoSoChung Copy (2)> Rename > NhpHoSoKeToan

Smith Nguyen St



50/177



05-5

Lm tng t c kt qunhhnh

B2.Thit lp quyn truy cp trn thmcHoSoYu cu ca cng ty trn hthmc:

HoSo: Kton & Nhn s: quyn cHoSoChung : Kton & Nhn s: ton quynHoSoKeToan : Kton: ton quynHoSoNhanSu: Nhn s: ton quyn

B2.1. Hy quyn tha:

Click phiHoSo>Properties

Smith Nguyen St



51/177



05-6

p thoi HoSo Properties: Advanced

p thoi Advanced Security Settings for HoSo > Edit

Smith Nguyen St



52/177



05-7

chn Include inheritable permission from this objects parent > Copy

Kim tra kt qunhhnh > OK

Smith Nguyen St



53/177



05-8

> OK

B2.2. Phn quyn cho Kton & Nhn strnfolderHoSop thoi HoSo Properties: Edit

Smith Nguyen St



54/177



05-9

p thoi Permissions for HoSo: ChnUsers>Remove

p thoi Permissions for HoSo:Add

p thoi Select Users, Computers,or Groups: Object Types

Smith Nguyen St



55/177



05-10

p thoi Object Types: Chgiliu chn Groups > OK

p thoi Select Users, Computers, orGroups: NhpKT;NS> Check Names> OK

p thoi Permissions for HoSo: ClickKT> Kimtra cc Permission cp choKT

Smith Nguyen St



56/177



05-11

p thoi Permissions for HoSo: ClickNS> Kimtra cc Permission cp choNS> OK > OK

t qutrn hp thoi HoSo Properties

Smith Nguyen St



57/177



05-12

B3.Thit lp quyn truy cp trn thmcHoSoChung

B3.1. Hy quyn tha k: Thc hin trn folderHoSoChungtng tbc 2.1a sWindows Explorer: Click phiHoSoChung> Propertiesp thoi HoSoChung Properties: tab Security > Advanced

p thoi Advanced Security Settings for HoSoChung > Edit

Smith Nguyen St



58/177



05-13

chn Include inheritable permission from this objects parent > Copy > OK >OK

B3.2. Phn quyn cho Kton & Nhn strn folderHoSoChungp thoi HoSoChung Properties: Tab Security > Edit

Smith Nguyen St



59/177



05-14

p thoi Permission for HoSoChung:- Chn group KT > Click Modify ct Allow

- Chn group NS > Click Modify ct Allow > OK

Smith Nguyen St



60/177



05-15

Kim tra kt qu: Hp thoi HoSoChung Properties: Xem li cc Permission cp cho GroupKT v NS > OK

B4.Thit lp quyn truy cp trn thmcHoSoKeToan

B4.1. Hy quyn tha k: Thc hin trnfolderHoSoKeToantng tbc 3.1

B4.2. Phn quyn cho K ton v removeNhn strn folderHoSoKeToanp thoi HoSoKeToan Properties: TabSecurity > Editp thoi Permission for HoSoKeToan:

- Chn group KT > Click Modify ctAllow

Chn group NS > Remove > OK > OK

B5.Thit lp quyn truy cp trn thmcHoSoNhanSuB5.1. Hy quyn tha k: Thc hin trn folderHoSoNhanSutng tbc 3.1B5.2. Phn quyn cho Nhn sv remove Kton trn folderH oSoNhanSup thoi HoSoNS Properties: Tab Security > Editp thoi Permission for HoSoNS:

- Chn group NS > Click Modify ct Allow- Chn group KT > Remove > OK > OK

Smith Nguyen St



61/177



05-16

B6.Share foldeHoSo

Click phi folderHoso> Properties

p thoi Hoso Properties > Tab Sharing >Advanced Sharing

Smith Nguyen St



62/177



05-17

p thoi Advanced Sharing: Chn Share thisfolder > Permissions

p tho

i Permission for HoSo: Ch

n Everyone> Click Full Control ct Allow > OK > OK >

OK

Kim tra folder Hoso c Share

Smith Nguyen St



63/177



06-1

6. To Home Folder cho 01 user(thc hin trn Server)

C TIU:u hnh HomeFolder (t ng gn a mng cho user khi logon)

THC HIN:

B1. To folderH omeFolder& share (shared nameHF)a sWindows Explorer: a C > Click phi vng trng > New > Folder > Nhp tnHomeFolder

Smith Nguyen St



64/177



06-2

Click phiHomeFolder> Properties

p thoi HomeFolder Properties: AdvancedSharing

Smith Nguyen St



65/177



06-3

p thoi Advanced Sharing Nhp ShareNameHF> Permissions

p thoi Permission for HF: Chn Everyone

> Check Allow - Full Control > OK > OK >OK

Smith Nguyen St



66/177



06-4

B2. To HomeFolder cho userTeo Nguyen Vana sServer Management: Theo ng dn > Click phi UserTeo Nguyen Van> Properties

p thoi Teo Nguyen Van Properties > Tab

Profile > Khung Home Folder: Chn Connect> Chn Z: > Dng To: Nhp thng s\\192.168.1.1\HF\%username%> Apply

Smith Nguyen St



67/177



06-5

Kim tra:%username%chuyn thnhKT1

Lm tng tcho UserNS1a sWindows Explorer: TrongH omeFolder> Xut hin 2 folderKT1vNS1

Kim tra kt qu: Trn WS: Log onKT1> MMy Computer > Vo aZ

- o folderHoSo-KT1- o file textBaoCaoKeToan.txt- Log off KT1

Trn Server: Log onKT1> MMy Computer > Vo a Z: Tn ti folderHoSo-KT1v file textBaoCaoKeToan.txt

Smith Nguyen St



68/177



06-6

7. User Template:

C TIU: Copy user account mu to mi 01 user accountTHC HIN:

a sServer Management: Theo ng dn > Click phi User Teo Nguyen Van > Copy

Nhp thng snhhnh > Next > Nhp Password:P@ssword> Finish

t qu: Click phi UserAt L e Van> Properties > Tab Profile

Smith Nguyen St



69/177



06-7

Kim tra xut hin thng strong khung To

Tab Member Of: Kim tra c GroupKT

Smith Nguyen St



70/177



06-8

8. Roaming Profile:

C TIU:o roaming profile cho userTHC HIN: Trn my server

B1. To folder & shareTrn a C: To folerRoamingProfil e. Share folder va to vi Shared Name lRPCh : Thit lp Permission: Everyone Allow - Full Control (tham kho bc 1 phn 6)

B2. Cu hnh roaming profile cho usera sServer Management: Theo ng dn > Click phi UserBom Le Van> Properties

Smith Nguyen St



71/177



06-9

p thoi Bom Le Van Properties: Khung Profile path: Khai bo thng s Profile Path:\\192.168.1.1\RP\%username%> Apply

Kim tra:%username%chuyn thnhGD

Kim tra kt qu: Trn WS: Log onGD> trn Desktop c folderBom Le Van> Vo folderBom Le Van

- o folderHoSo-GD- o file textHopDong.txt- Log off GD

Trn Server: Log onGD> trn Desktop cng c folderBom Le Van> Vo folderBomLe Van:Tn ti folderHoSo-GDv fileHopDong.txt

Smith Nguyen St



72/177



07-1

7. Thit lp GPO trin khai phn mm MS Office t ng ty theo ngi dng

C TIU: ng ci t phn mm MS Office cho ngi dungTHC HIN:Log on userAdministratorB1.Share folder Office:a s Windows Explorer: Click phi folderOffice > Properties > Tab Sharing > AdvancedSharing > Check vo Share this folder > OK

Quan st kt qu

Smith Nguyen St


9. Group Policy Objects

9.1


73/177



07-2

B2.Thit lp GPOa sServer Manager > Click phi Group Policy Objects > New

p thoi New GPO > nhp Deploy MS Off iceper User> OK

a sServer Manager > Click phi Deploy MS Off ice per User> Edit

Smith Nguyen St



74/177



07-3

a sGroup PolicyManagement Editor: Theong dn > Click phiSoftware installation > New

> Package

p thoi Open >

Nhp

ng d

n\\192.168.1.1\OFF ICE

> Enter > Chn filePRO11> Open

p thoi Deploy Software > Chn Assigned> OK

Smith Nguyen St



75/177



07-4

Quan st kt qu

B3. Link OU vi GPOa sServer Manager: Theo ng dn > Click phi NhanSu > Chn Link an Existing GPO

Smith Nguyen St



76/177



07-5

p thoi Select GPO: Chn Deploy MSOffice per User > OK

Quan st kt qu

Start > Run > Nhp GPUPDATE /FORCE>OK

Smith Nguyen St



77/177



07-6

B4.a cc object vo OU.a sServer Manager > Click phi cc user & group nhhnh > Move

p thoi Move > Chn NhanSu > OK

Smith Nguyen St



78/177



07-7

Quan st OU NhanSu

ng t, move cc userTeo Nguyen Van, At Le Vanv group KTvo OU KeToanQuan st OU KeToan

Smith Nguyen St



79/177



07-8

Quan st OU Lab

Kim tra: Trn WS- Log on user NS1> userNS1c Office- Log on user KT1> userKT1khng c Office

Smith Nguyen St



80/177



08-1

8. Thit lp GPO gim st hot ng ng nhp

C TIU: Gim st skin ng nhp ca User

THC HIN: trn server

B1.u chnh GPO Default Domain Controller Policya sServer Manager: theo ng dn > Click phi Default Domain Controllers Policy>Edit

Smith Nguyen St


9.2


81/177



08-2

a sGroup Policy Management Editor: theo ng dn > Chn Audit Policy > Click phiAccount Logon Events > Properties

p thoi Audit object access > Chn Success v Failure > OK

Smith Nguyen St



82/177



08-3

t qu

Start > Run > NhpGPUPDATE /FORCE> OK

Smith Nguyen St



83/177



08-4

B2.Lu log file v xa skin hin thStart > Programs > Administrative Tools >Event Viewer

Smith Nguyen St



84/177



08-5

p thoi Event Viewer: theo ng dn > Click phi Security > Clear log

a sEvent Viewer > Save and Clear

Smith Nguyen St
http://www.nhatnghe.com/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.nhatnghe.com/


85/177



08-6

u li file SecEvt071128.evtx

Thnghim trn WS: Trn mn hnh Logon: UserName:KT1, Password:BAYBA(ctnh nhpsai gilp trng hp d password).

Kim tra: Trn Serverp thoi Event Viewer: theo ng dn > Click phi Security > Refresh

Smith Nguyen St



86/177



08-7

Thy trong Log ghi nhn qu trnh ng nhp v chng thc ca user KT1: Failed

Smith Nguyen St



87/177



09-1

9. Thit lp GPO gim st hot ng truy cp ti nguyn

C TIU: Gim st vic truy cp thnh cng, tri php v xa ti nguyn

THC HIN: trn Server

B1.u chnh GPO Default Domain Controllers Policya sServer Manager: theo ng dn > Click phi Default Domain Controllers Policy>Edit

Smith Nguyen St


9.3


88/177



09-2

a sGroup Policy Management Editor: theo ng dn > Chn Audit Policy > Click phiAudit object access > Properties

p thoi Audit object access > Chn Success v Failure > OK

Smith Nguyen St



89/177



09-3

t qu

Smith Nguyen St



90/177



09-4

B2.Khai bo i tng v hnh ng cn gim st trn ti nguyna sWindows Explorer: Click phi thmc HoSo > Properties

p thoi HoSo properties > Tab Security > Advanced

Smith Nguyen St



91/177



09-5

p thoi Advanced Security > Tab Auditing > Edit

p thoi Advanced Security > Add

Smith Nguyen St



92/177



09-6

p thoi Select user > Nhp Ever > Check Names > OK

p thoi Auditing Entry > nh du checkDelete subfolders and files v Delete: SuccessfulList Folder / Read data: Failed

OK

Smith Nguyen St



93/177



09-7

p thoi Advanced Security > Check Replace all exiting > OK > OK > OK

B3.Thnghim xa dliu:p thoi Event Viewer: theo ng dn > Security > Click phi ln dng c Event ID l 4656 >Event Properties

Smith Nguyen St



94/177



09-8

Quan st kt quthy NS1 Deletefile Dulieu.txt

Smith Nguyen St



95/177



09-9

p thai Event Viewer: theo ng dn > Security > Click phi Refesh

Smith Nguyen St



96/177



09-10

p thai Event Viewer: theo ng dn > Security > Click phi ln dng c Event ID l 4656 >Event Properties

Quan st kt qu

thy NS1 truy cpkhng c folderHoSoKeToan

Smith Nguyen St



97/177



09-11

Smith Nguyen St



98/177



10-1

10. Cu hnh mt user khng chu tc ng ca GPO (thc hin trn Server)

C CH:c nhin, mi object thuc Organizational Unit (OU) u chu tc ng ca ccGPO link vi OU. Cn cu hnh sao cho mt (hoc mt s) user thuc OU khng chu tc ng.

THC HIN:Log on userAdministratora sServer Manager: Theo ng dn > Chn Deploy MS Office per User > Avanced

p thoi Deploy MS Office per User Security Settings > Add

Smith Nguyen St


9.4


99/177



10-2

p thoi Select Users, Computers, or Groups > Nhp NS2> Check Names > OK

p thoi Deploy MS Office per User Security Settings > Check vo Read ti ct Deny > OK

p thoi Windows Security > Yes

Smith Nguyen St



100/177



10-3

Quan st kt qu

Kim tra: Trn WS: Log on userNS2> userNS2khng c Office

Smith Nguyen St



101/177



11-1

11. Ci t printer & thit lp permission

C CH: Ci t, phn quyn v chia smy in

THC HIN:trn Server

Start > Settings > Printers

B1.Ci t & share printer

a sPrinters: Double Clickvo biu tng Add Printer

Smith Nguyen St



102/177



11-2

p thoi Choose a local ornetwork printer: Add a localPrinter

p thoi Choose a printerport: Chn Use an existingport > chn LPT1 > Next

p thoi Install a printerdriver: Khung Manufacturer:Chn HP Khung Printers: HP2500C Series Printer > Next

Smith Nguyen St



103/177



11-3

p thoi Type a printer name:ginguyn thng smc nh> Next

p thoi Printer Sharing:Chn Share this printer >

Nhp Shared name:HP2500C> Next

Smith Nguyen St



104/177



11-4

p thoiYouvesuccessfully ..

> Finish

Smith Nguyen St



105/177



11-5

B2.Phn quyn trn printer

a sPrinters: Click phi vo biung Printer > Properties

p thoi HP 2500C Series PrinterProperties: Tab Security > ChnEveryone > Remove > Add

Smith Nguyen St



106/177



11-6

Nhp KT;NS> Check Name > OK >OK

Smith Nguyen St



107/177



11-7

B3.Khai bo thm 03 port IP cho 03 print device HP2500C

p thoi HP 2500C Series PrinterProperties: Tab Ports > Add Port

p thoi Printer ports: chnStandard TCP/IP port > New Port

p thoi Welcome : Next

Smith Nguyen St



108/177



11-8

p thoi Add Port: Nhp thng snhhnh

p thoi Additional PortInformation Required: ChnStandard > Generic Netword Card> Next > Finish

Smith Nguyen St



109/177



11-9

ng t, khai bo thm 02 port vi thng s:- Printer Name or IP Address : 192.168.1.253- Port Name : I P-253- Printer Name or IP Address : 192.168.1.252- Port Name : I P-252

B4.Dng printer HP2500C u khin 04 print device ti 04 portp thoi HP 2500C Series Printer Properties: Tab Ports > Check Enable Printer Pooling >check thm cc port IP-254, IP-253 v IP-252

Smith Nguyen St



110/177



11-10

Apply > Quan st kt qu> OK

Smith Nguyen St



111/177



10-1

12. Cu hnh RRAS role cc my trm c thtruy cp internet (thc hin trn Server)

C CH: Cit Routing and Remote Access Servive role & cu hnh NAT cc WS cthtruy cp internet.

THC HIN:Log on userAdministrator

B1.Cit Routing and Remote Access Servive rolea sServer Manager: Click phi Roles > Add Roles

p thoi Before You Begin: Nextp thoi Select Server Roles: chn Network Policy and Access Services

Smith Nguyen St



112/177



10-2

p thoi Network Policy and Access Services: Nextp thoi Select Role Services: chn Routing and Remote Access Services

p thoi Confirm Installation Selections: Next

Smith Nguyen St



113/177



10-3

p thoi Installation Result: Close

Smith Nguyen St



114/177



10-4

a s Server Manager: Theo ng dn> Click phi > Configure and Enable Routing andRemote Access

p thoi Welcome: Next

p thoi Configuration: chnCustom configuration > Next

Smith Nguyen St



115/177



10-5

p thoi Custom Configuration:chn NAT & LAN routing > Next

p thoi Copleting: Finish

p thoi Routing and Remote Access: Start service

Smith Nguyen St



116/177



10-6

B2.Cu hnh NAT (Network Address Translation)a sServer Manager: Theo ng dn> Click phi NAT> New Interface

p thoi New Interface for IP NAT: chn

CROSS > OK

Hp thoi Network Address Translation

Properties - CROSS Properties: Chn Privateinterface > OK

Smith Nguyen St



117/177



10-7

a sServer Manager: Theo ng dn> Click phi NAT> New Interface

p thoi New Interface for IP NAT: chnLAN > OK

Hp thoi Network Address TranslationProperties LAN Properties: Chn Publicinterface & nh du chn Enable

NAT > OK

t qu: Sau bc ny WS c thtruy cp internet.

Smith Nguyen St



118/177



12-1

T STNH NNG VT TRI TRN WINDOWS VISTA

*************

1. Windows Firewall with Advanced Security Snap-in

Log on userAdministrator

Start > Settings > Control Panel

a s Control panel, ClickSystem and Maintenance

Smith Nguyen St



119/177



12-2

a s System and Maintenance, ClickAdministrative Tools

a s Aministrative Tools, ClickWindows Firewal with Advanced Security

Smith Nguyen St



120/177



12-3

a s Windows Firewal with Advanced Security, Click phi Outbound Rules chn NewRule

p thoi Rule Type, chn Custom > Next

Smith Nguyen St



121/177



12-4

p thoi Program,chn This program path > Browse > duyt theo ng dn:C:\Program F iles\I nternet Explor er> Double click file iexplore.exe.

t qu trong khung This program path: %Program Files%\InternetExplorer\iexplore.exe > clickNext

p thoi Protocol and Ports:

- Ch

n Protocol type: TCP

Smith Nguyen St



122/177



12-5

- Chn Remote port: Specific Ports

- Bn di Remote portnhp gi tr 80

Smith Nguyen St



123/177



12-6

p thoi Scope:

- Phn Which local Ip address does this rule match > chn Any Ip Address

- Phn Which Remote Ip address does this rule match >chn These IP address> ClickAdd

p thoi IP Address, chn This IP address or subnet> nhp : 210.245.22.171> OK

Smith Nguyen St



124/177



12-7

p thoi Scope: Next

p thoi Action, chn Block the connection> Next

Smith Nguyen St



125/177



12-8

p thoi Profile:ginguyn cc la chn mc nh > Next

p thoi Name: Nhp vo khung Name: Block Websitehttp://nhatnghe.com> Finish

Smith Nguyen St

http://www.nhatnghe.com/http://nhatnghe.com/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://nhatnghe.com/http://www.nhatnghe.com/


126/177



12-9

Trvca s Windows Fi rewal with Advanced Secur itym bo l Rule c to.

trnh duyt Internet Explorer,nhp: http://nhatnghe.com> Trang web ny khng hin th

Smith Nguyen St

http://www.nhatnghe.com/http://nhatnghe.com/http://nhatnghe.com/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://nhatnghe.com/http://www.nhatnghe.com/


127/177



12-10

Trvhp thoi Windows F irewal with Advanced Securi ty: Click phi Rule Block Websitehttp://nhatnghe.com, chn Disable Rule

Trli trnh duyt Internet Explorer, truy cp li trang web: http://nhatnghe.com.> Kt qu: Mttrang web honh trng hin th.

Smith Nguyen St

http://www.nhatnghe.com/http://nhatnghe.com/http://nhatnghe.com/http://nhatnghe.com/http://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://www.facebook.com/SmithNguyenStudiohttp://nhatnghe.com/http://nhatnghe.com/http://www.nhatnghe.com/


128/177



12-11

2. Windows Defender

Logon Administrator

Start > Settings > Control Panel

a sControl Panel > ClickSecurity

a s Security> ClickWindows Defender

Smith Nguyen St

ttp://www.f

Documents

Win2008 Lab Basic