70-680 LAB SETUP

PREREQUISITES
Removable external hard disk for each student in the classroom. Virtual machine environment (e.g. VMware, already installed in labs).

CONFIGURATION SUMMARY
The lab setup consists of one server running Microsoft Windows Server 2008 two workstations running Windows Vista All computers are located on an isolated network, configured as an Active Directory Domain Services (AD DS) domain separate from the rest of the school or organization network. The server machine functions as an Active Directory Domain Services domain controller, as well as performing a number of other roles at various times throughout the course. The lab uses the following information for the AD DS and server configuration:

Active Directory Domain Services domain name: contoso.com Fully qualified domain name (FQDN): rwdc01.contoso.com Server name: RWDC01

This document includes a setup procedure that configures the server to provide all of the infrastructure services required throughout the course. Once you have completed the initial setup, no further modifications to the lab server should be necessary. The workstations in the lab are named NYC-CLa and NYC-CLb. Each workstation will be a member of the contoso.com domain throughout most of the exercises, and also have a local administrative account called Student.

Before starting, copy the necessary ISO files to your external drive from the V:\ISO\OS folder.
For the purposes of this lab, all server and workstation passwords will be set to Pa$$w0rd. This is obviously not a secure practice in a real-world situation.

The initial two workstations to be setup will consist of standard Windows Vista installations, and the joining of the computers to the contoso.com domain. During the course of future labs, the students will be responsible for installing Windows 7 on the workstations, modifying the domain membership as needed for each exercise, and performing any other configuration tasks required to complete the exercises.

Some of the lab exercises have dependencies on previous exercises, as noted in the lab manual and the instructor notes for each exercise. Students should perform the lab exercises in order, and might have to complete any exercises they have missed due to absence before proceeding to the next lab.

Server Requirements
The computer running Windows Server 2008 in the classroom requires the following hardware and software: Software Requirements

Microsoft Windows Server 2008 Enterprise Evaluation edition ISO Windows 7 Enterprise Edition Evaluation edition ISO Windows 7 Automated Installation Kit Windows 7 Upgrade Advisor Windows Easy Transfer for transferring from Windows Vista to Windows 7 Microsoft Deployment Toolkit 2010 Remote Server Administration Tools for Windows 7

The students will install each of the above software at various points in the course.

Hardware Requirements

Minimum: 1.4 GHz processor Minimum: 512 MB RAM (1 GB recommended) Minimum: 32 GB DVD drive Network interface adapter Minimum: Super VGA (800x600) display Keyboard Mouse

As a virtual machine will be used, follow the instructions from your Windows Server Lab Setup Guide to create the server virtual machine up to page 13. The virtual machine name must be RWDC01, and the password is Pa$$w0rd.

Completing Initial Server Configuration Tasks

Overview Complete the following configuration tasks before you install Active Directory Domain Services or any other roles on the server.

Log on to the server , then using the Administrator account and use the password Pa$$w0rd. The Initial Configuration Tasks window appears. 2

Configuring Date and Time Settings

1. 2. In the Initial Configuration Tasks window, click Set time zone. The Date and Time dialog box appears. If the time and/or date shown in the dialog box are not correct, click Change date and time and, in the Date and Time Settings dialog box, set the correct date and time and click OK. If the time zone is not correct for your location, click Change time zone and, in the Time Zone Settings dialog box, set the correct time zone (UTC +03:00) and click OK.

3.

Configuring TCP/IP Settings

1. 2. 3. 4. In the Initial Configuration Tasks window, click Configure networking. The Network Connections window appears. Right click the Local Area Connection icon and, from the context menu, select Properties. The Local Area Connection Properties sheet appears. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties sheet appears. Select the Use the following IP address option and configure the following settings:

5. 6. 7.

IP address: 10.10.0.2 Subnet mask: 255.0.0.0 Default gateway: Leave blank Preferred DNS server: 10.10.0.2 Alternate DNS server: Leave blank

Click OK to close the Internet Protocol Version 4 (TCP/IPv4) Properties sheet. Click Close to close the Local Area Connection Properties sheet. Close the Network Connections window.

Naming the Server

1. 2. 3. 4. 5. 6. In the Initial Configuration Tasks window, click Provide computer name and domain. The System Properties sheet appears. Click Change. The Computer Name/Domain Changes dialog box appears. In the Computer name text box, type RWDC01 and click OK. A Computer Name/Domain Changes message box appears, stating that you must restart the computer. Click OK. Click Close to close the System Properties dialog box. A Microsoft Windows 3

message box appears, instructing you to restart the computer again. 7. Click Restart Now. The system restarts.

Installing Server Roles

Overview After configuring the Windows server, you can begin to install the server roles needed to support the student workstation, as described in the following sections.

Installing Active Directory Domain Services

1. Log on to the server using the Administrator account and the password Pa$$w0rd. The Initial Configuration Tasks window appears. 2. 3. 4. 5. 6. Under Customize This Server, click Add roles. The Add Roles Wizard appears. Click Next to bypass the Before You Begin page. The Select Server Roles page appears. Select the Active Directory Domain Services check box. Click Next. The Confirm Installation Selections page appears. Click Install. The Installation Results page appears. Click Close this wizard. Click Start and type dcpromo then hit enter. The Active Directory Domain Services Installation Wizard appears. Click Next to bypass the Welcome page. The Operating System Compatibility page appears.

7. 8.

9. Click Next. The Choose a Deployment Configuration page appears. 10. Select the Create a new domain in a new forest option and click Next. The Name the Forest Root Domain page appears. 11. In the FQDN of the forest root domain text box, type contoso.com and click Next. The Set Forest Functional Level page appears. 12. In the Forest functional level drop-down list, select Windows Server 2008 and click Next. The Additional Domain Controller options page appears. 13. Click Next. An Active Directory Domain Services Installation Wizard message box appears. 14. Click Yes. The Location for Database, Log Files, and SYSVOL page appears. 15. Click Next. The Directory Services Restore Mode Administrator Password page appears. 16. In the Password and Confirm password text boxes, type Pa$$w0rd and click 4

Next. The Summary page appears. 17. Click Next. The wizard installs Active Directory Domain Services. The Completing the Active Directory Domain Services Installation Wizard page appears. 18. Click Finish. Then click Restart Now. The computer restarts.

Installing Active Directory Certificate Services

1. 2. 3. 4. 5. 6. Log on to the server using the Administrator account and the password Pa$$w0rd. The Initial Configuration Tasks window appears. Under Customize This Server, click Add roles. The Add Roles Wizard appears. Click Next to bypass the Before You Begin page. The Select Server Roles page appears. Select the Active Directory Certificate Services check box and click Next. The Introduction to Active Directory Certificate Services page appears. Click Next. The Select Role Services page appears. Select the Certification Authority Web Enrollment check box. The Add role services and features required for Certification Authority Web Enrollment? dialog box appears. Click Add Required Role Services. Then click Next. The Specify Setup Type page appears. Click Next to accept the default Enterprise option. The Specify CA Type page appears. Click Next to accept the default Root CA option. The Set Up Private Key page appears.

7. 8.

9.

10. Click Next to accept the default settings. The Configure Cryptography for CA page appears. 11. Click Next to accept the default settings. The Configure CA Name page appears. 12. Click Next to accept the default settings. The Set Validity Period page appears. 13. Click Next to accept the default settings. The Configure Certificate Database page appears. 14. Click Next to accept the default settings. The Web Server (IIS) page appears. 15. Click Next. The Select Role Services page appears. 16. Click Next to accept the default settings. The Confirm Installation Selections page appears. 17. Click Install. The wizard installs the selected role services and the Installation Results page appears.

18. Click Close.

Installing DHCP Server

1. 2. In the Initial Configuration Tasks window, under Customize This Server, click Add roles. The Add Roles Wizard appears. Click Next to bypass the Before You Begin page. The Select Server Roles page appears. Select the DHCP Server check box and click Next. The Introduction to DHCP Server page appears. Click Next. The Select Network Connection Bindings page appears. Click Next to accept the default settings. The Specify IPv4 DNS Server Settings page appears. Add the IP 10.10.0.2 to the list. Click Next to accept the default settings. The Specify IPv4 WINS Server Settings page appears. Click Next to accept the default settings. The Add or Edit DHCP Scopes page appears. Click Add. The Add Scope dialog box appears. Complete the fields in the dialog box using the following values and click OK:

3. 4. 5. 6. 7. 8. 9.

Scope name: contoso.com Starting IP address: 10.10.0.100 Ending IP address: 10.10.0.199 Subnet mask: 255.0.0.0 Default gateway (optional): Leave blank

10. Click Next. The Configure DHCPv6 Stateless Mode page appears. 11. Click Next to accept the default settings. The Specify IPv6 DNS Server Settings page appears. 12. Click Next to accept the default settings. The Authorize DHCP Server page appears. 13. Click Next to accept the default settings. The Confirm Installation Selections page appears. 14. Click Install. The wizard installs the role and the Installation Results page appears. 15. Click Close.

Install Windows Deployment Services

1. In the Initial Configuration Tasks window, under Customize This Server, click Add roles. The Add Roles Wizard appears. 6

2. 3. 4. 5.

Click Next to bypass the Before You Begin page. The Select Server Roles page appears. Select the Windows Deployment Services check box and click Next. The Introduction to Windows Deployment Services page appears. Click Next. The Select Role Services page appears. Click Next to accept the default settings. The Confirm Installation Selections page appears. Click Install. The wizard installs the role and the Installation Results page appears. Click Close. Click Start. Then click Administrative Tools > Windows Deployment Services. The Windows Deployment Services console appears. Expand the Servers node.

6. 7. 8. 9.

10. Right click the RWDC01.contoso.com node and, from the context menu, select Configure Server. The Windows Deployment Services Configuration Wizard appears. 11. Click Next to bypass the Before You Begin page. The Remote Installation Folder Location page appears. 12. Click Next to accept the default setting. A warning box appears. 13. Click Yes to continue. The DHCP Option 60 page appears. 14. Select the Do not listen on port 67 and Configure DHCP option 60 to PXEClient check boxes and click Next. The PXE Server Initial Settings page appears. 15. Select the Respond to all client computers (known and unknown) option and click Next. The Operation Complete page appears. 16. Leave the Add images to the server now check box selected and click Finish. The Add Image Wizard appears, displaying the Image File page. 17. Insert the Windows 7 Enterprise installation ISO into the virtual machines DVD drive. An Autoplay window appears. Close the Autoplay window and DO NOT START WINDOWS 7 INSTALL. 18. In the Path text box, type D:\ where D is the drive letter assigned to the computers DVD drive. Then click Next. The Image Group page appears. 19. Click Next to accept the default setting. The Review Settings page appears. 20. Click Next. The Task Progress page appears as the wizard adds the images from the disk to the WDS server. 21. Click Finish. 7

22. Close the Windows Deployment Services console.

Preparing the Server File System

Overview Using the software defined below, complete the following procedure.

You must have correctly installed Guest Additions in order for the following steps to work. 1. Open Windows Explorer in the virtual machine and create a new folder on the C:\ drive called downloads. 2. Copy the contents of V:\Windows 7\Software to the c:\downloads folder. You can drag and drop if you have Guest Additions installed. 3. Share the downloads folder by right-clicking it and choosing Properties. In the Sharing tab click the Advanced Sharing button. Enable the Share this folder option and click the Permissions button. 4. Assign the Full Control share permission to the Everyone special identity. Click OK, then OK again, then close. 5. Create a subfolder called win7ent under the c:\downloads folder you created earlier. 6. Copy the entire contents of the Windows 7 Enterprise DVD in your D: drive into the c:\downloads\win7ent folder. 7. Insert the Windows 7 Automated Installation kit.iso file into the virtual machines DVD drive. 8. Create a subfolder called win7aik under the c:\downloads folder you created earlier.

9. Copy the entire contents of the Windows 7 AIK disk to the c:\downloads\win7aik
folder.

Workstation Requirements
Each of the two required workstations requires a virtual machine with the following hardware and software: Hardware Requirements

Minimum: 1 GHz 32-bit (x86) Minimum: 1 GB RAM (32-bit) Minimum: 40 GB hard drive DVD drive Network interface adapter Minimum: Super VGA (800x600) display Keyboard Mouse

Software Requirements All of the software listed below is required for the course:

Windows Vista Enterprise Edition 32-bit Windows 7 Enterprise Edition 32-bit DVD drive Network interface adapter Minimum: Super VGA (800x600) display Keyboard Mouse

WORKSTATION SETUP INSTRUCTIONS

1. Create two new virtual machines using the previous steps for the server virtual machine. Use the names NYC-CLa and NYC-CLb and insert the Windows Vista Enterprise ISO and serial. For the user name text box, type Student. For the password text box, type Pa$$w0rd. 2. The Windows Vista Setup program loads, and installs Windows Vista. 3. Log on using the Student account and the password Pa$$w0rd. The Welcome Center window appears.

4. If the time zone is not correct for your location, select the correct zone in the Time zone
drop-down list (GMT +03:00). 5. If the time and/or date shown are not correct, set the correct date and time and click Next. The Set your computers current location page appears. 6. Make sure to change the computer names for both machines to NYC-CLa and NYC-CLb by right-clicking on Computer and choosing the change settings link.. 7. Guest Additions should install automatically in the same way previously done for the Server virtual machine.

Joining a Workstation to a Domain

Overview After installing Windows Vista , you must join the workstation to your networks Active Directory Domain Services domain. To perform the following steps, the server virtual machine should be running and fully configured as previously detailed.

1. 2. 3. 4. 5. 6. 7. 8. 9.

Click Start. Right-click Network and choose Properties. Click View Status, then click the Properties button. Click Start. Then click Control Panel. The Control Panel window appears. Click System and Maintenance. Click System. Click Change settings. The System Properties sheet appears. Click Change . Select the Domain option, and type contoso in the text box. Then click OK. A Windows Security dialog box appears. Authenticate with the username Administrator and the password Pa$$w0rd and click OK. A message box appears, welcoming you to the domain. Click OK. Another message box appears, prompting you to restart the computer. Click OK. Click Close to close the System Properties dialog box.

10. A You must restart your computer to apply these changes message box appears. Click Restart Now..

10