Computer Science & Engineering

✅ Active Directory Basic Setup on Windows Server 2019

⸻

🔧 Post-Installation Configuration
• Rename server & reboot
• Enable Remote Desktop
• Disable IE Enhanced Security
• Allow File & Printer Sharing (Outbound) in Windows Firewall
• Set Static IP & DNS using ipconfig / ncpa.cpl

⸻

🏗️ AD DS Installation & Domain Setup
• Installed AD DS role via Server Manager
• Promote to Domain Controller
• Create new forest
• Set DSRM password and completed config

⸻

👤 User & OU Management
• Create users via ADUC / ADAC
• Configure client DNS to point to DC
• Create OUs (e.g., IT, Sales, Marketing) & assigned users/groups

⸻

🔐 Top 10 Essential GPOs
1. Password Policy – Enforce strong passwords
2. Account Lockout – Lock after failed logins
3. Disable USB – Block removable devices
4. AppLocker – Restrict unauthorized apps
5. Firewall Rules – Standardize Windows Firewall
6. User Rights Assignment – Control login access
7. Windows Update – Centralized update policy
8. Drive Mapping – Auto map network drives
9. Desktop Restrictions – Lock down UI access
10. Logon Banner – Show security/legal notice

⸻

Networking—Packet Flow Diagram