PROCEDURES OF UC 3

First click START go to NETWORK (right click) choose properties, find

WINDOWS FIREWALL turn it all to off, change ip address (click change
adapter settings) LAN,right click properties, choose IPV 4 (it must be start
with 192.168.2. you will be the one to decide what’s the last number) then
put your ip add to your dns, then close. Go to COMPUETR(right click)
properties click remote settings choose Allow connections in the middle
then okay, select users, add, advanced, find now, then okay. Change setting,
change, type your computer name then okay and restart.
Create three folders, on desktop name the folder(s) to USER1, USER2
and FOLDER REDIRECTION (share the folder). Then add the 5 roles. First
ADUC together with the dcpromo and DNS. All three will be together File
services, DHCP Server, Print and Document Services. After the roles proceed
to ADUC, make new OU(Organizational Unit) name it to USER1/USER2 or
OU1/OU2, click + sign(domain), right click to your domain, new, OU, right the
name, make another OU just follow the first one, double click users,
Administrator(right click), copy then fill up the dialogue box, Guest(right
click), copy and fill up the dialogue box.Then proceed to GPM (Group Policy
Management) here you will be having the FOLDER REDIRECTION and
BLOCKING APPS. Click + sign(forest),click + sign (domain), click + sign (main
domain), click + sign (USER1) right click, Create GPO, name GPO1,right click,
enforced, right click, edit, click + sign policies under User Configuration, click
+ sign Windows setting, click + sign Folder Redirection, choose Desktop,
Documents, Downloads. Close. Click + sign USER2, right click, Create GPO2,
right click enforced, right click edit, click + sign policies under User
Configurtion, click + sign Windows settings, click + sign security settings, click
+ sign Software Restriction, double click security level, right click disallowed,
set as default, okay, double click Additional Rules, right click anywhere in the
dialogue box, new hush rule, browse, file C, Windows, System 32, calc,
disallowed, OK, right click again, new hush rule, browse, notepad,
disallowed, OK, right click new hush rule, browse, file C, Program Files,
Windows NT, Accessories, word pad, disallowed, OK, right click new hush
rule, file C, Program Files, Internet Explorer, iexplorer, disallowed, OK, click +
sign Administrative Templates, double click Control Panel, choose the
Prohibit access to the Control Panel(right click),edit, enabled, OK, click + sign
System, choose Prevent access to the command prompt, right click, edit,
enabled, OK.
Go to START choose Print Management, click + sign Printer Servers,
click + sign(domain), double click printers, right click(name of the
printer),deploy with group policy,browse,USER1,OK,OK, check the box (The
users that this GPO applies to (per user),add, OK, OK, then close.