Scenario: ATEConsult Pte Ltd
ATEConsult Pte Ltd is a small consultancy firm located in Charlestown. ATEConsult’s IT
resources span a number of Windows 10 machines and a Windows Server 2019 server. You
are hired as the IT consultant to design the Active Directory logical structure for ATEConsult.
The following requirements are given to you with respect to ATEConsult:
- There are four major categories of users: Managers, Consultants, Administration Support
staff and IT Support staff
- Create appropriate user groups to provide access to resources of different user groups.
- All users should be able to logon to ATEConsult’s resources except the Domain
Controller’s. Only IT Support staff and Domain Administrators can log onto the server
locally.
- For security reasons, all users must use complex passwords (i.e. at least 10 characters) when
logging on the network.
- All users, except the IT Support staff, should not be able to access Control Panel or edit the
registry settings on Windows.
- Shared folders are maintained in the file server. Two folders “ConsultantShared” and
“SupportStaffDocuments” needs to be maintained where Consultants and Administration
Support staff members have read and write access to the folders respectively. Also, the
shared folders must be mapped as network drives to be easily accessible for users when they
log in.
- Managers have permissions of all resources of staff and customers except IT Support staff
(i.e. Consultants and Administration Support staff).
- The IT Support Staff are able to manage user accounts and reset passwords for Managers,
Consultants and Administration Support Staff.
ATEConsult will use a Windows Server 2019 NOS for its primary DC. Design an Active
Directory logical structure to support the above requirements. Illustrate your design using an
appropriate diagram and also provide explanation of how your design meets each of the
requirements stated above. You can use Visio to create the diagram. Ensure you use a legend
which defines the symbols used in your diagram.