manager config added

This commit is contained in:
Gramzon
2025-01-14 11:53:34 +01:00
parent d8fbcbdcb4
commit 94bd71f58c
3 changed files with 81 additions and 1 deletions
+54
View File
@@ -9,3 +9,57 @@ Første obligatorisk øving Del 1 forts.
• Correct language on keyboard • Correct language on keyboard
• EXTRA: Try to make a small PowerShell script for later use. • EXTRA: Try to make a small PowerShell script for later use.
To-dos - Part 1 (Friday 10.01)
OpenStack ( skyhigh.iik.ntnu.no):
Deploy VMs from template (RAW Template URL).
Get access VMs through RDP
Username: Admin
Password: Found in OpenStack (retrieve password)
Create a Github Repo for DCST1005
Private, not visible for others
Public, easy for studass and teacher to view and help
Verify that DC1, MGR, SRV1 and CL1 has the following settings. (MarkDown How-to: Pre AD Install Check)
Correct time zone
Correct language on keyboard
EXTRA: Try to make a small PowerShell script for later use.
To-dos - Part 2 (Monday 13.01)
Active Directory on DC1
Use PowerShell to install Active Directory on DC1
Give it a suitable startup Domain Name.
NB! When AD is installed, you need to change login credentials when you want to RDP into that machine with an Domain Administrator.
Create your own domain admin user (adm_<yourUserName>). Username can be whatever you like, but make one that you remember.
Add user to Domain Admins group
Configure VMs and join domain
SRV1, CLI1 and MGR needs to join the domain for proper administration and management. Make sure they are configured as needed and joined the domain (configure DNS). Use newly created adm user to authenticate for the domain join.
Configure MGR: - Make sure to login to the MGR with your adm_<username> user account.
Install Chocolatey, PowerShell 7, Git and VS Code (with PowerShell extension). Make sure that it is possible to run PSRemote from MGR against all machines in the domain. Both PowerShell 5.1 and 7.x. NB! You need to be logged in as a doman admin on MGR.
Install RSAT on MGR (Remote Server Administrative Tools)
Install software on doman computers
Use MGR to remote install PowerShell 7 on all domain computers and domain controller.
What should the assignment delivery look like
Show TA the following:
VM's up and running in OpenStack
Show remote desktop login to MGR with a domain admin.
List all machines that are members of the domain
List all domain users.
*********************************************
+26
View File
@@ -0,0 +1,26 @@
################################################################################
# MAKE SURE YOUR ARE LOGED IN AS A YOUR DOMAIN ADMIN USER - NOT ADMINISTRATOR :D
################################################################################
# Installere Choco
# Hva er Choco: https://chocolatey.org/
Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
choco upgrade chocolatey
# Installere programvare med Choco
choco install -y powershell-core
choco install -y git.install
choco install -y vscode
#choco install -y sysinternals
# Konfigurer Git
git config --global user.name "NAVN"
git config --global user.email "EPOST@EPOST.EPOST"
#
# Check if computer is domain joined (CIM (Common Information Model))
Get-CimInstance -ClassName Win32_ComputerSystem | Select-Object -Property Name, Domain, PartOfDomain
# Remote Server Administrative Tools (RSAT)
# Installere RSAT - RSAT is a tool that allows you to manage roles and features in Windows Server remotely from a Windows 10/11 machine.
Add-WindowsCapability -Name Rsat.ActiveDirectory.DS-LDS.Tools -Online
+1 -1
View File
@@ -22,7 +22,7 @@ ipconfig /all
# Add the computer to the domain # Add the computer to the domain
$domainName = "RohanIT.sec" # replace with your domain name (e.g. InfraIT.sec) $domainName = "RohanIT.sec" # replace with your domain name (e.g. InfraIT.sec)
$cred = Get-Credential -UserName "<writeYourUserName>@$domainName" -Message 'Provide credentials for a domain admin' $cred = Get-Credential -UserName "Wormtongue@$domainName" -Message 'Provide credentials for a domain admin'
Add-Computer -Credential $cred -DomainName $domainName -PassThru -Verbose Add-Computer -Credential $cred -DomainName $domainName -PassThru -Verbose
Restart-Computer Restart-Computer