NSM Notes - Unit 5.pdf

NETWORK SECURITY & MANAGEMENT UNIT-5 NETWORK PLANNING AND IMPLEMENTATION 5.1 NETWORK NEEDS A computer network is a collection of interconnected computers, servers, and other devices that can communicate with each other, either wir...

NETWORK SECURITY & MANAGEMENT UNIT-5 NETWORK PLANNING AND IMPLEMENTATION 5.1 NETWORK NEEDS A computer network is a collection of interconnected computers, servers, and other devices that can communicate with each other, either wirelessly or through physical connections like cables or fiber optics. These interconnected devices can share resources such as files, printers and internet connections, and they can also facilitate communication through email, messaging, and other means. Computer networks can vary in size and complexity, ranging from small local networks within a home or office to large-scale global networks like the Internet. Networks serve various purposes and fulfill multiple needs for individuals, businesses and organizations. Some of the key needs of a network include: 1) Communication: Networks enable communication between individuals, devices and systems regardless of their physical location. This includes email, instant messaging, voice and video calls and data sharing. 2) Resource Sharing: Networks allow for the sharing of hardware resources such as printers, scanners and storage devices, as well as software resources like applications and databases. 3) Data Transfer and Access: Networks facilitate the transfer of data between devices and provide access to shared data repositories, allowing users to retrieve, store and manipulate information. 4) Collaboration: Networks support collaboration among users by enabling them to work together on projects, share documents and coordinate tasks in real-time, regardless of their geographical location. 5) Remote Access: Networks enable remote access to resources and services, allowing users to connect to their organization's network from external locations securely. 6) Internet Access: Networks provide connectivity to the Internet, allowing users to access a vast array of online resources, services and information. 7) Centralized Management: Networks allow for centralized management of resources, user accounts, security policies and network configurations, streamlining administration and maintenance tasks. 8) Backup and Disaster Recovery: Networks facilitate backup and replication of data to remote locations, ensuring data integrity and enabling disaster recovery in case of hardware failures, natural disasters or cyberattacks. 9) Scalability: Networks can be scaled to accommodate the growth of an organization by adding additional devices, expanding infrastructure capacity, and adapting to changing requirements. 10) Security: Networks provide security mechanisms such as firewalls, encryption, access controls and intrusion detection systems to protect against unauthorized access, data breaches and cyber threats.  NETWORK SECURITY & MANAGEMENT 5.2 INSTALL AND CONFIGURE WINDOWS SERVER Windows Server 2012 R2 Hardware Requirements: As with previous Windows versions, your hardware must meet certain requirements for Windows Server 2012 R2 to function properly. First of all, Windows Server 2012 R2 requires a 64-bit processor. Component Minimum Requirement Microsoft Recommended Processor 1.4 GHz 2 GHz or faster Memory 512 MB RAM 2 GB RAM or greater Available Disk Space 32 GB 40 GB or greater Optical Drive DVD-ROM drive DVD-ROM drive Display Super VGA (800x600) monitor XGA (1024x768) monitor In addition, you must have the usual I/O peripherals, including a keyboard and mouse or compatible pointing device and a wired or wireless network interface card (NIC). If you can connect to a network location on which you have copied the contents of the Windows Server 2012 R2 DVD-ROM, you are not required to have a DVD-ROM drive on your computer. Microsoft recommends that you also perform the following actions before installing Windows Server 2012 R2: 1) Disconnect uninterruptible power supply (UPS) devices 2) Back up data 3) Disable antivirus software 4) Provide mass storage drivers if needed 5) Note that Windows Firewall is on by default 6) Prepare your Active Directory environment for Windows Server 2012 R2 Steps to install Windows Server 2012: 1. Insert the Windows Server 2012 R2 DVD-ROM and turn on your computer. You should see a message informing you that Windows is copying temporary files; if not, you should access the BIOS setup program included with your computer and modify the boot sequence so that the computer boots from the DVD.  NETWORK SECURITY & MANAGEMENT 2. Once booted, you should see Windows loading the necessary setup files. 3. In the Windows Setup dialog, set the language, time and currency format, keyboard and input method then press Next. 4. Click on Install now  NETWORK SECURITY & MANAGEMENT 5. Select the operating system that you wish to install. Regardless if you install the Server 2012 R2 Datacenter or the 2012 R2 Standard version, you want the installing package that includes the GUI. Otherwise, you end up with just the Server 2012 Core and no GUI. 6. Accept the license agreement.  NETWORK SECURITY & MANAGEMENT 7. Select Custom Install Windows only (advanced). 8. Click Next.  NETWORK SECURITY & MANAGEMENT 9. Server 2012 R2 beings the file copy process. 10. The server will restart automatically and installation will continue further. 11. Before Server 2012 will allow you to log in, you must configure the password for the administrator account. 12. Click Finish. Welcome to Windows Server 2012 R2!  NETWORK SECURITY & MANAGEMENT The steps to Change the Server Name are: 1. Open Server manager 2. Click on Configure this local server  NETWORK SECURITY & MANAGEMENT 3. Click on default Computer name which was given while server 2012 was installed. 4. Click Change in System Properties window  NETWORK SECURITY & MANAGEMENT 5. Give a new Computer name which is easy to remember. 6. Click OK and Restart your computer.  NETWORK SECURITY & MANAGEMENT 7. After Restarting your computer server name will be changed 5.3 STEPS TO CREATE DOMAIN CONTROLLER Set a static IP address To start, you’ll want to ensure your domain controller has a static IP address (that isn’t in a DHCP range either) to ensure it cannot change automatically. Install the Role From the Server Manager click Manage > Add Roles and Features this will open up the Add Roles and Features Wizard. Once open, click next until you reach the Server Roles section. Once there click the check box next to Active Directory Domain Services. Another window should open asking if you want to install Active Directory Administrative Center and the AD DS Snap-in and Command Line Tools. We recommend you accept this and click the Add Features button with the Include Management tools (if applicable) box checked as well. That will be the only role to include this time so you can click next and you can also click next through the features section as well.  NETWORK SECURITY & MANAGEMENT Once you reach the confirmation section it will display the list of roles and features to be installed; it should match the image below. Click install and now we wait! Promoting Server 2012 R2 to a Domain Controller Once the Active Directory Domain Services role has been installed, we can promote our server to a Domain Controller by following the below steps. 1. When we return to Server Manager, there is an information message waiting for us. This is the second part of the role installation that converts the server to a domain controller. 2. Click on Notification you will see the option “Promote this server to a domain controller.” Click on this link for role promotion. If we click on the message, “Promote this server to a domain controller” the second wizard will start.  NETWORK SECURITY & MANAGEMENT 3. Click on the “Add a new forest” radio button and enter the name of the new root domain. Click Next 4. If we did not have DNS installed, the option to install DNS would be provided. Check the box to install DNS as it is a requirement for Active Directory. If it is grayed out, you already have it installed and running. Leave the function for Server 2012 R2 as is. If we had server 2008 running on the network, we downgrade the function to accommodate the need for a backward capability. Type the Directory Services Restore Mode (DSRM) password in the Domain Controller Options window.  NETWORK SECURITY & MANAGEMENT 5. Uncheck the box DNS delegation if authoritative zone is available. Click next.  NETWORK SECURITY & MANAGEMENT 6. Setup will find the NetBIOS domain name. Once found, click on Next. 7. Confirm the location of the database, log files and SYSVOL folders.  NETWORK SECURITY & MANAGEMENT 8. Review the summary and click Next to promote the server to Domain Controller. 9. Once prerequisites have passed successfully, click on Install. 10. The system may restart once the installation is completed. Be patient! When the machine restarts and comes back up, you will have an Active Directory Domain controller. To verify if Active Directory tools have been installed, click on the start button, and the Administrative Tools tile. Check out your  NETWORK SECURITY & MANAGEMENT Active Directory tools! The main snap-in for managing users and computers is the Active Directory Users and Computers snap-in. 5.3 ADDING FILE SERVER AND PRINTER SERVER Printer Server 1. Go to Server Manager → Manage → Add Roles and Features → Next → Check on the Role- based or feature-based installation box and → Check on Select a server from the server pool and then → Next. Once it is done then, at the list of the roles find Print and Document Services → A popup window will open.  NETWORK SECURITY & MANAGEMENT 2. Click on Add features and then → Next → Next → Next. 3. Check on the Print Server box and → Next.  NETWORK SECURITY & MANAGEMENT 4. Click Install. File Server 1. Go to Server Manager → Manage → Add Roles and Features → Next → Check on the Role-based or feature-based installation box → Check on the Select a server from the server pool box → Next. Then, at the list of the roles find File and Storage Services and expand it. After this, expand the Files and iSCSI Services → Check on the File Server Resource Manager box and then a pop-up window will open.  NETWORK SECURITY & MANAGEMENT 2. Click on Add features and then → Next. 3. Click the Next button.  NETWORK SECURITY & MANAGEMENT 4. Click the Install button. Now that we installed the File Server Resource Manager, let us open it by following the path given below. 1. Click on Server Manager → Tools → File Server Resource Manager. To set quota to a folder, we should follow the steps as below.  NETWORK SECURITY & MANAGEMENT 2. On the left panel click on Quota Management → expand Quota Templates → click on Create Quota Template… on the right-hand side panel as shown in the screenshot given below. 3. A new table will be opened, where the most important aspect to put is Space Limit depending on the need. Here, we will put 2GB and then → OK. 4. You must put the threshold for it and once the folder reaches the capacity, it will send you a notification where you will have an option to put the email.  NETWORK SECURITY & MANAGEMENT 5. Click OK.  NETWORK SECURITY & MANAGEMENT 6. Then to attach this quota to a folder – Right Click on the template → click on Create Quota from Template. 7. Click on Browse… and then select your folder → Create.  NETWORK SECURITY & MANAGEMENT 8. To put a file restriction to your folders, you can go to the left pane File Screening Management → File screening templates → Click on the left panel Create File Screen Template.  NETWORK SECURITY & MANAGEMENT 9. Click on Browse… and find the folder that you want → Create.