LAB C

MONITOR
PERFORMANCE &
USER
ADMINISTRATION
Download this Lab instruction file for this class from Blackboard under assignments.
Save your Lab worksheet to your USB drive. When your assignment is complete,
you must submit the Lab worksheet to Blackboard under Project Submission by the
due date listed on your syllabus for full credit.
Follow the steps for each exercise in your “Windows 7 Configuration Lab
Manual”. The steps listed below are the changes from the steps in the printed lab
manual. You must complete ALL Exercises, Lab Review questions, and Lab Challenge
Exercises that are listed in this lab worksheet.

LAB 10
CONFIGURING
APPLICATIONS
Exercise 10.1 Installing Remote Server Administration Tools
Overview Before you can configure AD DS Group Policy settings from
your Windows 7 workstation, you must install and enable the
Remote Server Administration Tools, which includes the Group
Policy Management console.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 10 minutes

2. REPLACE STEP 2 in Lab Manual. Start, search,

\\rwdc01\downloads\x86fre_GRMRSAT_MSU.msu
11. REPLACE STEP 11 in Lab Manual Click Start, All programs, Administrative
Tools, Group Policy Management
15.Take a screen shot of the Group Policy Management console, showing
the GPO you created, by pressing Alt+Prt Scr, and then it below by
pressing Ctrl+V.

Will the Group Policy settings you configure in your new GPO have an
Questio immediate effect on your network? Why?
n 1 The settings will not have any immediate effect because the GPO is not
yet linked to an Active Directory Domain Services object.
Exercise 10.2 Configuring IE8
Overview The director of IT at Contoso, Ltd. wants to prevent the
company’s Windows 7 users from modifying the default
Internet Explorer configuration by installing additional
software, such as add-ons and accelerators. She also wants to
ensure that the company intranet pages, designed several
years ago for a previous IE version, display properly in IE8.
Finally, the director wants to ensure that all Internet browsing
activity on the network is logged for later examination. Your
job is to configure the appropriate Group Policy settings to
implement these requirements in your GPO.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 10 minutes

Why would you want to enable the Use policy accelerators policy in this
Questio
case, rather than the Turn off accelerators policy?
n 2
to keep people form accessing some accelerators
Why is it necessary to disable the Turn on Internet Explorer Standards
Questio
Mode for Local Intranet policy?
n 3
so all intranet pages are displayed i ie7 configuration
Why, in this case, is it necessary to enable both the Prevent Deleting Web
sites that the User has Visited policy and the Turn off InPrivate Browsing
Questio
policy?
n 4
to keep track of what users are looking at and allow their personal settings to
stay in place
Questio Why isn’t it necessary to enable the Turn off InPrivate Filtering as well?
n 5 so the users cannot control who looks at their stuff
Step 14: HINT: minimize the Group Policy Management Editor that you have
been working with & follow the rest of this step.
16.Take a screen shot of the Group Policy Management console displaying
all of the policy settings you configured in this exercise by pressing
Alt+Prt Scr, and then paste it below by pressing Ctrl+V.

Exercise 10.3 Using AppLocker

Overview Your IT director wants to begin using the new AppLocker
feature in Windows 7 to restrict the applications that users
are able to run on their workstations. She wants standard
users to able to run all of the executables included with
Windows except for the Registry Editor. Members of the IT
support staff, however, who are all members of the Group
Policy Creator Owners group, must be able to run the Registry
Editor to service other users’ computers.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 10 minutes

Based on the default rules that appear in the Executable Rules folder,
what programs can a typical user run on a Windows 7 workstation? What
Questio
programs can members of the Administrators group run?
n 6
Users can run any programs in the windows and program files folders
Admins can use all files
Based on the default rules that appear in the Windows Installer Rules
folder, what Windows Installer files can a typical user run on a Windows 7
Questio workstation? What Windows Installer files can members of the
n7 Administrators group run?
Users only digitally signed installer files and those in Installer folder
Admins all Windows Installer files
Why is it necessary to create the additional rule for the Group Policy
Questio
Creator Owners group?
n 8
so that the user who is restricting access can use that folder

18.Take a screen shot of the Group Policy Management Editor console

displaying the contents of the Executable Rules container by pressing
Alt+Prt Scr, and then paste it below by pressing Ctrl+V.
PastePrintscreenHere

LAB CHALLENGE: SUPPRESSING COMPATIBILITY WARNINGS

Completion 15 minutes
time

The Windows 7 users at Contoso, Ltd. are restricted to a predefined set

of applications, all of which have been recently updated and carefully
tested for compatibility. To prevent users from attempting to run
downlevel applications, you have been instructed to disable the
Windows 7 compatibility mode controls using Group Policy. To complete
this challenge, you must locate and configure the appropriate Group
Policy settings to accomplish these goals in the GPO you created in
Exercise 10.1. Write out the procedure you used to configure the
 settings, and then take a screen shot of the container where the
settings are located by pressing Alt+Prt Scr, and paste it below by
pressing Ctrl+V.

Enter admin tools click on Group Policy Manager. Right click on NYC-CLa Policies and under
Policies\Administrative Templates\Windows Components\Internet Explorer\Computability
View
double click Turn off Compatibility View and enable it.

PastePrintscreenHere

LAB CHALLENGE: DEPLOYING GROUP POLICY OBJECTS

Completion 15 minutes
time

To deploy a GPO like the one you have created in this lab, you must link it
to a Active Directory Domain Services domain, site, or organizational unit
object. However, for the purposes of this lab, it is necessary for the
settings in your GPO to be applied to your workstation only, and not any of
the other computers on the network. To complete this challenge, you must
configure your GPO so that its settings apply only to the NYC-CLa computer
and then link it to the contoso.com domain object in the AD DS tree. Write
out the procedure you used to complete the challenge, and then take a
screen shot showing the configuration that limits the scope of the GPO
by pressing Alt+Prt Scr, and paste it below by pressing Ctrl+V.

Enter admin tools click on Group Policy Manager. Right click on NYC-CLa Policies and under
Policies\Windows Settings\Security Settings\Application Control Policies\Applocker right click
Executable Rules Create new rule. follow the steps allowing the group owners to only have
access to program files.
PastePrintscreenHere

Make snapshot of VM

Close out of your VM.

Click on VM, Snapshot and Take Snapshot…

Type in the name: After Ex10 with a description of Exercise 10 activities

complete & click on OK.
LAB 11
MANAGING AND
MONITORING
PERFORMANCE
Exercise 11.1 Using Event Viewer
Overview In Exercise 11.1, you demonstrate some methods for isolating the
most important events in the Windows 7 logs.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 10 minutes

Step 2: Click Start, Right click on Computer, Click on Manage, then double
click on Event Viewer.
Questio How many events appear in the System log?
n 1 2656
Questio How many events appear in the System log now?
n2 31
Questio How many events appear in the Critical & Warning custom view?
n 3 4

12. Take a screen shot of the Event Viewer console, showing the Critical &
Warning custom view, by pressing Ctrl+Prt Scr and then paste it below by
pressing Ctrl+V.
PastePrintscreenHere

Exercise 11.2 Creating Event Subscriptions

Overview In Exercise 11.2, you demonstrate some methods for isolating
the most important events in the Windows 7 logs.
Complete this on the VM you created NYC-CLa, NYC-CLb, and
WinServer2008_RWDC01
Completion time 20 minutes

22. Take a screen shot of the Event Viewer console, showing the new
subscription you created, by pressing Ctrl+Prt Scr and then paste it below
by pressing Ctrl+V.
PastePrintscreenHere

23. NOTE: the forwarded events is in the left column of the Event Viewer.

Exercise 11.3 Using Performance Monitor

Overview The technical specialists at Contoso, Ltd. routinely use the
Performance Monitor tool to examine the performance
levels of Windows 7 workstations. However, each
technician uses Performance Monitor in a different way. The
IT director wants to create a standard set of performance
counters that are easily visible in a single Performance
Monitor line graph that would enable the support staff to
compare the performance levels of different computer
models. You have been given the task of selecting the
performance counters for this standard Performance
Monitor configuration and testing their visibility on the
graph.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 15 minutes

Questio What counter appears in the Performance Monitor display by default?

n 4 % processor time
Questio What happens?
n 5 The Queue Length counter is added to the System Monitor graph.
Does this selection of counters make for an effective graph? Why or why
Questio
not?
n 6
Yes, because all of the counters have approximately similar values.
 How would using the report view instead of the line graph view affect the
compatibility of the performance counters you select?
Questio
In report view, each counter is displayed numerically, so there is no need
n 7
to consider the similarity of the data produced by the various
performance counters, as is the case in graph view.
What effect does launching the programs have on the Performance
Questio
Monitor graph?
n 8
the graphs shot up

13. Take a screen shot of the Performance Monitor console showing the line
graph by pressing Alt+Prt Scr, and then paste it below by pressing Ctrl+V.
PastePrintscreenHere

Does this modification make the graph easier or more difficult to read?
Why or why not?
Questio
It is easier to read because all of the counters tend to have high values
n 9
while the programs are loading, and increasing the vertical scale makes it
easier to see the maximum counter values.
Does this selection of counters make for an effective graph? Why or why
Questio
not?
n 10
no the graphs are not visible from this view

Exercise 11.4 Logging Performance Data

Overview To properly gauge the performance level of a computer, it
is helpful to have a baseline reading that you’ve taken
under normal operating conditions that you can use to
compare with the levels when the computer is under the
stress of a workload. You have been given the task of
taking baseline performance level readings on a new
computer using the Performance Monitor console. In
Exercise 11.4, you use the Data Collector Sets tool to
create a counter log for the computer, saving the baseline
levels to a file for later examination.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 15 minutes
9. Take a screen shot of Which performance counters would you like to log?
by pressing Alt+Prt Scr, and then it below by pressing Ctrl+V.

PastePrintscreenHere

When creating a performance counter data collector set, under what

Questio circumstances would it be necessary to specify a user name and
n 11 password in the Run As section of the collector set’s Properties sheet?
when running form the server to record end client computers

Questio What happens when the Start Time you configured arrives?
n 12 the icon on the side console tree has a play button on it

LAB CHALLENGE 11.1: VIEWING A PERFORMANCE COUNTER LOG

Completion 10 minutes
time

In Exercise 11.4, you created a performance counter data collector set for
the purpose of gathering baseline performance data for your Windows 7
workstation. To complete this challenge, you must use the Performance
Monitor console to display the data you gathered for the counters in the
Memory performance object that you collected. Write out the procedure
you used to display the data and take a screen shot of the console showing
the collector set data by pressing Alt+Prt Scr, and then paste it below by
pressing Ctrl+V.

In the console tree on the right select the NYC-CLa Base line under User Defined then above
under the menu tabs select the button on the far right that looks like a note book to see the
last report.

PastePrintscreenHere

Make snapshot of VM
Close out of your VM.

Click on VM, Snapshot and Take Snapshot…

Type in the name: After Ex 11 with a description of Exercise 11 activities

complete & click on OK.

LAB 12
WORKING WITH
WORKGROUPS AND
DOMAINS
Exercise 12.1 Joining a Workgroup
Overview In Exercise 12.1, you configure your workstation as a member
of a workgroup, so that you can use all of the Windows 7 tools
for creating local users and groups.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 10 minutes

8. Take a screen shot showing the Welcome message by pressing Ctrl+Prt

Scr and then paste it below by pressing Ctrl+V.
PastePrintscreenHere

Step 12. Login with the Student account and the password P@ssw0rd.

Exercise L Local Password and Account Policies

Overview You have discovered that users are not using secure
passwords. In order to better secure your computer, you
will create and deploy local password and account policies.
Complete this on the VM you created NYC-CLa
 Completion time 15 minutes

The steps in this lab are NOT in the textbook or in the

Lab manual.
1. Click on Start, Control Panel, System & Maintenance, Administrative
Tools
2. Double click on Local Security Policy, and then double click on Account
Policies, and select Account Lockout Policy.
3. These policies control what happens when someone tries to log on using your
account, but does not succeed.
4. Look at the properties of each of the following and type in your own words, what
each of the following mean: (fill in the table)
Account lockout duration Amount of time account remains locked out
vefore automatically becoming unlocked.
Account lockout threshold Determines the amount of failed login
attempts that can be tried.
Reset account lockout counter after Determines the amount of time that needs to
elapse till it is reset.

5. Now click on Password Policy.

6. Double click on Enforce password history and change the password history to
8
7. Double click on Maximum password age and change the password age to 60
8. Double click on Minimum password length and change the password length
to 6
9. Double click on Password must meet complexity requirements and change
it to enabled
10. Take a screen shot showing the Local Security Policy console by pressing
Ctrl+Prt Scr and then paste it below by pressing Ctrl+V.

PastePrintscreenHere

Exercise 12.2 Creating Local Users and Groups

Overview The new hires in the Accounting department at Contoso,
Ltd. need local user accounts for their workgroup
computers—not only for themselves, but also for other
department workers who need access to their data. In
Exercise 12.2, you create a new local user account for the
director of the accounting department, Jay Adams, using
the Windows 7 User Accounts control panel.
Complete this on the VM you created NYC-CLa
Completion time 15 minutes

In what way(s) did the password you tried to use not meet the password
Questio
policy requirements?
n 1
It was not long enough

Table 12-3
Proposed passwords
Password Reason for Failure (NOT “does not meet requirements – more detailed
reason)
Smadaj Not complex
jadams000 Contains user name
Jadams1! Contains user name
Password Default password
Pa$$w0rd This password is acceptable.

13.Take a screen shot of the Choose the user account you would like to
change page with the new account you created by pressing Ctrl+Prt
Scr, and then paste it below by pressing Ctrl+V.

PastePrintscreenHere

Exercise 12.3 Using the Local Users and Groups Snap-In

Overview You have discovered that while the User Accounts screen
makes it easy to create accounts for local users, it does not
provide access to all of the user account properties you
need to secure the computer. Therefore, you decide to
create the rest of the local accounts for the computer using
the Local Users and Groups snap-in for Microsoft
Management Console (MMC) instead.
Complete this on the VM you created NYC-CLa
Completion time 15 minutes

What tasks can you perform in the JAdams Properties dialog box that you
Questio could not perform in the User Accounts control panel?
n 2 What to do with the Password you used earlier and what happens with the
password.

Step 8: NOTE: user name = account name; description = position; Unselect

User Must change Password at Next Logon
9. Take a screen shot of the Computer Management console with the new
accounts you created by pressing Ctrl+Prt Scr, and then paste it below by
pressing Ctrl+V.
PastePrintscreenHere

Exercise
12.4 Managing Group Memberships
Overview When you create local user accounts with the User Accounts
control panel, you have two account type options (Standard
User and Administrator) to choose from that are actually a
means of creating memberships in the Users and
Administrators groups, respectively. In the Local Users and
Groups snap-in, you must manually configure the group
memberships for the new users.

The IT director of Contoso, Ltd. has ordered that every

workgroup computer have two additional local groups created
on it, called Accounting and Bookkeeping. She has also
provided you with the following group membership
assignments that must be implemented on every workgroup
computer.
· Accounting—Director, shift supervisors,
administrative assistants
· Bookkeeping—Director, bookkeepers,
administrative assistants
· Administrators—Director, shift supervisors
· Power Users—Director, bookkeepers
· Users—Director, shift supervisors,
bookkeepers, administrative assistants
Complete this on the VM you created NYC-CLa
Completion time10 minutes

Questio How many built-in local groups are there on the computer?
n 3 14

5. Take a screen shot of the Computer Management console showing the

contents of the Groups folder by pressing Ctrl+Prt Scr, and then paste
it below by pressing Ctrl+V.
PastePrintscreenHere

Questio Of which group(s) is Jay Adams currently a member?

n 4 He is a member of the Users group.

Step 10: Accounting group: shift supervisors, administrative assistants

Bookkeeping group: bookkeepers, administrative assistants
Exercise 12.5 Joining a Domain
Overview Now that you have created the new local user accounts and
group memberships on the workstation, you will rejoin the
computer to the contoso.com domain, so that you can work
with domain users and groups. You must also enable the
Active Directory Users and Computers console, provided
with the Remote Server Administration Tools package
installed earlier.
Complete this on the VM you created NYC-CLa and WinServer2008_RWDC01
Completion time 10 minutes

8. Take a screen shot showing the Welcome message by pressing Ctrl+Prt

Scr and then paste it below by pressing Ctrl+V.
PastePrintscreenHere

LAB CHALLENGE 12.1: CREATE DOMAIN USERS AND GROUPS

Completion 15 minutes
time

In Exercises 12.2, 12.3, and 12.4, you created several local user accounts
and two local groups, and then added the users as members of the
appropriate groups. To complete this challenge, you must complete the
same tasks by creating domain users and groups using the Net.exe
command line utility. Write a list of Net.exe commands that will create a
user account for the Director Jay Adams (JAdams), the users from Table 12-
4, and the groups from Exercise 12.4, and then add the users to the correct
groups, according to the following assignments:
· Accounting—Director, shift supervisors, administrative assistants
· Bookkeeping—Director, bookkeepers, administrative assistants
· Domain Admins—Director, shift supervisors
· Enterprise Admins—Director
· Domain Users—Director, shift supervisors, bookkeepers,
administrative assistants
net user JAdams Pa$$w0rd /add
net accounting JAdams /add
net bookkeeping JAdams /add
net administrators JAdams /add
net power users JAdams /add
 When you are finished, open an elevated command prompt on your
workstation and execute the commands. Then open the Active Directory
Users and Computer console and take a screen shot of the console,
showing the users and groups you created.

Make snapshot of VM

Close out of your VM.

Click on VM, Snapshot and Take Snapshot…

Type in the name: After LabC with a description of LabC activities complete &
click on OK.

Submit assignment to blackboard

When your assignment is complete, you must submit the LabC (this file) to
Blackboard under Project Submission by the due date listed on your syllabus for full
credit.

After you have submitted, from inside blackboard, click on Tools, My Grades

Submitted, but not graded

NOT submitted. This shows that either your computer locked up or you lost

connection to the internet OR you clicked on Save instead of Submit. Your

instructor can clear this indicator if you email them.