LAB 9 , 10 , AND 11

MANAGE FILES Compress the D:\Graphics folder Show Details Set the Compressed attribute Apply the attribute to all folders and files Hide the D:\Finances folder Set read-only on files Show Details Set read-only on 2010report.xls Set read-only on 2011report.xls Do not set read-only for the 2012report.xls file Explanation Edit the properties of the folder or file to modify its properties. Compress the D:\Graphics folder and all of its contents Hide the D:\Finances folder Make the following files read-only: D:\Finances\2010report.xls D:\Finances\2011report.xls Complete the following steps: Click Start/Computer. Double-click the D: drive. To set properties on the Graphics folder, right-click the Graphics folder and select Properties. On the General tab, click Advanced.... Select the attributes to apply to the folder. Click OK. Click OK. Select how you want the attributes to be applied, either to the folder only or to the folder and its contents. Click OK. To hide the Finances folder, right-click the Finances folder and select Properties. Select the attributes to apply to the folder. Click OK. To set files as read-only, double-click the Finances folder to view its contents. Right-click the file whose attributes you want to change and select Properties. Select the attributes to apply to the file. Click OK. Repeat steps 11 and 12 to configure attributes for additional files as required.

CONFIGURE NTFS PERMISSION Edit permissions for the D:\Day Data folder Show Details Turn off permission inheritance for the folder Convert existing permissions Remove Users Group Add the DayGroup group to the access control list Assign DayGroup allow Full Control permissions Edit permissions for the D:\Night Data folder Show Details Turn off permission inheritance for the folder Convert existing permissions Remove Users Group Add the NightGroup group to the access control list Assign NightGroup allow Full Control permissions Explanation To complete this lab, edit the NTFS permissions for the D:\Day Data and D:\Night Data folders. Turn off permissions inheritance, converting the existing permissions as explicit permissions. Remove the Users group from the ACL of each folder. Add the appropriate group to the folder ACL. Assign Full Control over each folder to the appropriate group. Do not change any other permissions assigned to other users or groups. Complete the following steps: Click Start/Computer. Double-click the Data (D:) drive. Right-click the folder whose permissions you want to modify and select Properties. Click the Security tab. To modify inherited permissions, click Advanced. Click Change permissions.... To prevent inherited permissions, deselect Include inheritable permissions from this object's parent. Click the Add button. To remove a group from the access control list, select the group and click Remove. Click OK. Click OK. To add a group to the access control list, click Edit. Click Add.... Type the name of the group you want to add, then click OK. With the group selected, check the boxes for the permissions to assign. Click OK. Click OK. Repeat steps 3 through 16 to modify the permissions for additional folders as required.

MANAGE USER GROUPS Create the Scott user account Show Details Create the user account Configure p@ssw0rd for the initial password Require the user to change the password at next logon Create the Ken user account Show Details Create the user account Configure p@ssw0rd for the initial password Require the user to change the password at next logon Create the Jed user account Show Details Create the user account Configure p@ssw0rd for the initial password Require the user to change the password at next logon Assign group memberships Show Details Make Scott a member of the Administrators and Users groups Make Ken a member of the Backup Operators and Users groups Make Jed a member of the Users group only Explanation In this lab, after creating the user accounts, assign group memberships as follows: Make the Scott account a member of the Administrators group. Make the Ken account a member of the Backup Operators group. All users should also be members of the Users group (this is done automatically when you create the user accounts). While you can create the user accounts through User Accounts in the Control Panel, you will need to use Local Users and Groups in Computer Management to complete the following tasks: Force users to change their passwords at next logon. Assign Ken as a member of the Backup Operators group. Complete the following steps: Click Start, then right-click Computer and select Manage. Under Local Users and Groups, right-click Users and select New User.... Type the user name, password, and confirm the password. Click Create. Repeat step 3 to create additional user accounts. After all user accounts are created, click Close. To make a user a member of a group, select the Groups node in the left pane. Right-click the group and select Add to Group.... Click Add.... Type the name of the user account to add to the group, then click OK. Click OK. Repeat steps 7 through 10 to assign additional users to other groups.

CONFIGURE REMOTE SERVICE Allow Remote Desktop connections Allow Susan to connect using Remote Desktop Open the firewall port for Remote Desktop (done automatically) Explanation Complete the following steps: To enable Remote Desktop, click Start, then right-click Computer and select Properties. Click the Remote settings link. Select either option to enable Remote Desktop connections. To authorize users for Remote Desktop, click Select Users.... Click Add.... Type the user account name and click OK. Click OK. Click OK. To verify the firewall port configuration, click Start/Control Panel. Click System and Security. Under Windows Firewall click the Allow a program through Windows Firewall link. Verify that Remote Desktop is checked (to open the port). (The corresponding port is opened or closed automatically when you enable or disable the service on the system properties). Click Cancel.

MANAGE FILES AND FOLDERS Create the D:\utilities\recover directory Delete the D:\software\arch98 directory Hide files Show Details Hide the D:\software\apconf.exe file Hide the D:\cmdstrt.cfg file Hide the D:\strt.bat file Make files read-only Show Details Make the D:\software\softcfg.cfg file read-only Make the D:\software\pixel.cfg file read-only Explanation To complete this lab: Use the md or mkdir command to create (make) a directory. Use the rd command to delete (remove) a directory. Use the /s switch to remove the directory and all of its contents at once. Use the attrib command to modify file attributes. Use + followed by the attribute letter (such as H for hidden or R for read-only) and the filename. Complete the following steps: At the command prompt, type d: or cd /d d: to change the working directory to the D: drive. To see the existing contents of the drive, type the dir command. How can you tell the difference between files and directories? To create the directory, type: md d:\utilities\recover Use the dir command to verify that the d:\utilities folder was created. To verify that the subfolder was created, use the following commands: cd utilities dir Type cd.. to change the working directory back to the root of the hard drive. To delete the arch98 directory, type: rd d:\software\arch98 Why can't you delete the directory? Type rd /? to see a list of switches that can be used with the command. To delete the directory an all of its contents, type: rd d:\software\arch98 /s Press Y to confirm. Use the attrib command to set file attributes. Type attrib /? to see the syntax for using the command. Use the attrib +H filename command to set a file to hidden. For example, type: attrib +H d:\software\apconf.exe Repeat step 12 to set additional files to hidden. Tip: Press the up arrow key to recall the last command, then modify the command to use a different filename. To verify that file attributes have been set, type attrib followed by the filename (such as attrib d:\software\apconf.exe). Use the attrib +R filename command to set a file to read-only. For example, type: attrib +R d:\software\softcfg.cfg Repeat step 15 to set additional files to read-only.

ENABLE VT IN BIOS Enable VT support in the BIOS on Office1 Explanation To complete this lab, enable Virtualization Technology (VT) by setting the following BIOS performance setting: Virtualization = On Complete the following steps: To restart the computer, click Start, then click the arrow next to the Shutdown button and select Restart. When you see the BIOS loading screen, press Delete to enter the BIOS. Press the down arrow on the keyboard and select the Performance category. Press Enter. Use the arrow keys to select the desired setting. Press Enter. To exit and save the changes, press the Esc key. Select Save/Exit and press Enter. The system reboots.

CONFIGURE VIRTUAL MEMORY Disable system-managed paging file settings Delete the paging file on the C: drive Create a custom paging file on the D: drive Reboot to apply the changes Do not create a paging file in the E: drive Explanation Complete the following steps: Click Start, then right-click Computer and select Properties. Click the Advanced system settings link. On the Advanced tab in the Performance section, click Settings.... Click the Advanced tab. Click Change.... To change the default settings, deselect Automatically manage paging file size for all drives. To delete a paging file, select the drive that holds the file. Select No paging file, then click Set. Click Yes. To add a paging file to a drive, select the drive in the box. Select Custom size: to manually configure the paging file settings. Type the initial and maximum size values and click Set. Click OK. Click OK. Click OK, then click OK again. Click the Restart Now button and wait for the computer to reboot

PREPARE DISKS FOR THE INSTALLATION Configure RAID for the SATA drive mode Create the RAID 0 array Show Details Define the logical disk Configure the array as RAID 0 Add two drives to the array Configure the array to use all of the space on the disks Create the RAID 1 array Show Details Define the logical disk Configure the array as RAID 1 Add two drives to the array Configure the array to use all of the space on the disks Change the boot order to CD-ROM, then hard drive Explanation Complete the following steps: When the lab starts, you will see the BIOS load screen. Press the Delete key to enter the CMOS editor. On the Main menu, use the up and down arrow keys to select Storage Configuration. Press Enter. Select OnChip SATA Type and press Enter. Select RAID and press Enter. Press Esc. Use the right and left arrow keys to select the Exit menu. Press Enter to exit and save the changes. Press Enter to confirm and exit. As the system boots, after the BIOS loads the RAID controller will load. Press F when you see the message on the screen. To define a logical disk, press 2. Select the logical disk you want to define and press Enter. Use the up and down arrow keys to select the properties necessary to define the logical disk. To modify the RAID level, select the RAID Mode and use the Spacebar to change the mode. To add a disk to the array, select the disk and press Y. When you are finished, press Ctrl + Y. Press Ctrl + Y to continue. Press any key to accept the default capacity and continue. Repeat steps 11 through 15 to define additional logical disks. Press Esc. Press Esc, then Y to restart. To modify the boot order, when the BIOS loads, press the Delete key. Select the Boot menu. With Boot Device Priority selected, press Enter. Select the first boot device and press Enter. Select the device to use for the first boot device. Press Enter. Select the second boot device and press Enter. Select the device to use for the second boot device. Press Enter. Press Esc. Select the Exit menu. Press Enter to exit and save the changes. Press Enter to confirm and exit.

SHARE AND SECURE FOLDER Share the D:\Finances folder Show Details Share the folder Allow Read/Write for Everyone Configure NTFS permissions for D:\Finances Show Details Remove inherited permissions Convert existing permissions for Administrators Convert existing permissions for CREATOR OWNER Convert existing permissions for SYSTEM Add Emily to the access control list Grant Emily Allow Full Control permissions Remove the Users group from the access control list Share the D:\Graphics folder Show Details Share the folder Allow Read/Write for Everyone Configure NTFS permissions for D:\Graphics Show Details Allow inherited permissions Add Sam to the access control list Grant Sam the Allow Modify permissions Explanation Share both folders and configure permissions as follows: Folder Share permissions NTFS permissions D:\Finances Everyone Read/Write Remove inherited permissions, converting existing permissions Remove the Users group from the access control list to prevent all users from having access Add the Emily user account and grant Allow Full Control permissions D:\Graphics Everyone Read/Write Do not modify inherited permissions (this gives all users Read access) Add the Sam user account and grant Allow Modify permissions Complete the following steps: Click Start/Computer. Double-click the Data (D:) drive. Right-click the folder you want to share and select Share with/Specific people.... Type or select the name of the user or group to allow access, then click Add. Under the Permission Level column, select the permissions to grant to the user or group. Click Share. Click Done. Repeat steps 3 through 7 to share additional folders as required. To configure NTFS permissions for the D:\Finances folder, right-click the folder and select Properties. Click the Security tab. To modify inherited permissions, click Advanced. Click Change Permissions.... To prevent inherited permissions, deselect Include inheritable permissions from this object's parent. Click Add. To remove a group from the access control list, select the group and click Remove. Click OK. Click OK. To add a user to the access control list, click Edit.... Click Add.... Type the name of the user you want to add, then click OK. With the user selected, check the boxes for the permissions to assign. Click OK. Click OK. Repeat steps 9 and 10 and 18 through 22 to modify the permissions for the D:\Graphics folder as required. (Do not remove inherited permissions from this folder.)

...

Prevent services from starting when the system boots Show Details Disable the Link-Layer Topology Discovery service Disable the FTP Publishing Service service Disable the SNMP Trap service Disable the Telephony service Prevent applications from running when the system boots Show Details Prevent Compy DVD Apps from running at startup Prevent DIRE Event Monitor from running at startup Prevent inTune from running at startup Prevent SM66 Win32 Utility from running at startup Start stopped services Show Details Start the Print Spooler service Start the Bluetooth Support service Start the Offline Files service Configure services to start automatically Show Details Start the Print Spooler service automatically Start the Bluetooth Support service automatically Start the Offline Files service automatically Configure compatibility mode settings for AccountWizard.exe Show Details Run in Windows 2000 compatibility mode Run at 640x480 Run as an administrator Explanation To complete this lab: Run Msconfig to prevent services and applications from running at system startup. You can also use the Services console to prevent services from running at startup, but you cannot prevent applications from running through the Services console. Use the Services console in Computer Management to start stopped services and to modify the startup type for the service. (Configuring a service to start at system startup in Msconfig is the same as configuring the startup type to Automatic in the Services console.) Edit the properties for the executable file to modify the compatibility mode settings. Complete the following steps: To prevent services from running at startup, click Start, then type Msconfig in the search box. Click the Services tab. Uncheck the box next to the services that you do not want to run. Click the Apply button. To prevent applications from running, click the Startup tab. Uncheck the box next to the applications that you do not want to run. Click OK. To start and modify services, click Start, then right-click Computer and select Manage. Select the Services node. To start a service and modify the startup type, right-click the service and select Properties. Modify the startup type, then click Apply. Click Start. Click OK. Repeat steps 8 through 11 for additional services. To modify compatibility settings for an application, click Start/Computer. Browse the file system to the location of the executable file. Right-click the executable file and select Properties. Click the Compatibility tab. Modify the compatibility settings as required. Click OK.

CONFIGURE WINDOWS UPDATE Check for updates Wednesday at 2 am Show Details Check for updates on Wednesday Check for updates at 2 am Include Recommended updates Allow any user to install updates Install drivers from Windows Update if it is not found on the computer Explanation To complete this lab: Edit the Windows Update settings to configure the system to check for and apply updates every Wednesday at 2 am. Include recommended updates. Edit the advanced system properties for the computer to configure Windows to install drivers from Windows Update if it is not found on the computer. Complete the following steps: To modify Windows Update settings, click Start/Control Panel. Click System and Security. Click Windows Update. On the left, click Change settings. Configure the update day and time. To include recommended updates, select Give me recommended updates the same way I receive important updates. To allow any user to install updates, select Allow all users to install updates on this computer. Click OK. To configure how Windows prompts for updated drivers, click Start, then right-click Computer and select Properties. On the left, click Advanced system settings. Click the Hardware tab. Click Device Installation Settings. Select the required update option, then click Save Changes. Click OK.

BACK UP COMPUTER Save the backup to the E: volume Back up all of the users' data files Back up the C: and D: volumes Include a system image for the C: volume Set the schedule for regular backups to happen every Sunday at 2 a.m. Explanation Complete the following steps: Click Start/Control Panel. Under System and Security, click Back up your computer. To perform a backup, click the Set up backup link. Select the location to save the backup, then click Next. Select Let me choose, then click Next. Select the data files and disks to include in the backup. Leave Include a system image of drives: selected. Click Next. To change the schedule for backups, click the Change schedule link. Select the frequency, day, and time for scheduled backups. Click OK. Click Save settings and run backup.

CREATE A RESTORE POINT Configure system protection on the C: volume Show Details Keep the current restore settings Set a maximum 5% of disk space for restore points Configure system protection on the D: volume Show Details Choose to only restore previous versions of files Set a maximum 5% of disk space for restore points Create a manual restore point Explanation Complete the following steps: To enable System Restore, click Start, then right-click Computer and select Properties. On the left, click System Protection. To configure system protection, select the disk and click the Configure... button. Select the system protection settings, and click OK. Repeat steps 3 and 4 for additional drives. To create a restore point, click the Create... button. Type a name for the restore point, then click Create. Click OK.