Capstone Paper
Brooke Mills
New England Institute of Technology
NE 265.56

Table of Contents

Users and Computers 3
NTFS Permissions 3-4
Global and Domain Local Groups 5
Folder Redirection 6
Website 6 -7
References 8

During this class my group developed a network from the ground up. The company, xyzLiqour.com, was the basis for the network. It is a small organization of 20 users with 4 departments. My portion of the project was the website, Windows domain and user groups, file and folder organization and security. In this paper, I will explain my responsibilities in the project as well as how I configured each task.
Figure 1
Figure 1 A user account is an object stored in Active Directory that represents the information that defines a user with access to the network. With this user account a user can access the domain they belong to, or the local computer. All 20 users in the company have a user is and password. In an effort to keep things simple, everyone’s last name was their department. This made it easier for me to keep track of everyone and where they belonged. (See figure 1) There are 4 departments within this company; HR, Tech, Engineering and Sales. Every department has its own folders and sub folders. Creating folders gives each department their own location to store data needed for everyday operations. Attached to every folder are NTFS permissions. NTFS permissions are used to secure resources from certain users on the network. All NTFS permissions are stored in an access control list (ACL). The ACL is a list of all the users and groups on the network that shows what access they have to certain files and folders.
Figure [ 2 ]
Figure [ 2 ] To assign NTFS permissions to a file or folder, you click on Start > Computer > C drive > Right click the file or folder you want to assign NTFS permissions to > Properties > Security tab. From here you can allow or deny the permissions. It is a good rule of thumb to allow the permissions rather than configuring permissions for each individual user. This is where I made my mistake on the project. I assigned each user one at a time, which was not only time consuming, it was confusing. Once in the permissions for data window, you click edit to configure. From the Advanced Security Setting for Sales window, you can add users or groups permissions and remove a user or group from the ACL. The advanced button brings you to an option to block inheritance from the parent folder. For example, I set the sales manager of xyzLiqour.com to have read and execute permissions of the sales folder. If I want to give a sales representative full control of the sales forecast folder, I would uncheck the ‘Include inheritable permissions from this objects parent’ option. Otherwise, the read and execute permissions will trickle down to the sales forecast folder. (See figure 2) Global and domain local groups are scopes that determine how and where you will be able to use the group. A global group is a group that can be used within its own domain. A domain local group is a security group that can have universal groups, global groups or other domain local groups from its own domain or any other domain in the forest.
Figure [ 3 ]
Figure [ 3 ] When I created the global groups, I grouped like users together and named the group after the people it contained. For example, all the sales personnel were put in a global group called Sales Dept. This was accomplished by using the Active Directory User and Computer snap-in. On the left, you right click Users > New > Group > Type in the group name > Verify the group scope is Global > Verify the group type is security > OK. After the group is created, I double clicked the group Sales Dept > Members tab > Add > Advanced > Find now > then added the user that belong to the sales department. When creating the domain local groups, I followed the first 3 steps used to create the global groups; however, I typed the name in all caps with the NTFS permission abbreviated. For example, Sales Dept with the NTFS permission to Modify was typed SALESDEPT-M. Then I selected the group scope to be domain local and added the users. (See figure 3) Folder redirection limits the amount of data that is copied between the roaming profile and the server with each logon or logoff. This provides a more stable environment for users that logon to multiple terminals at a time. I was unable to complete this task. I was not familiar with this process and thought that I found a good set of instructions. It turns out they were not good at all. However, I did more research for this paper and now I have a better understanding as to what folder redirection is and its purpose.
Figure [ 4 ]
Figure [ 4 ]
Folder Redirection settings are located in the Group Policy Editor. Click on User configuration > Windows settings > Folder redirections. To configure an item, right click Folder Redirection and select Properties. This opens the Application Data Properties window. (See figure 4) This exposes the configuration options for the specified folder. Here you can configure the folder to redirect to a specified location for all users in the GPO, or configure the folder to redirect to a specified location based on group membership. In order for this to work, you need to first configure NTFS and Share permissions on the folder.
The website for the company was very basic. I wanted something more flashy and appealing to the eye, however, the code from the 2 websites I created with an HTML generator would not render in IIS so I was forced to make something very basic. As a group, we decided the company would be an alcohol delivery service. xyzLiqour.com would service parties, small gatherings and special events with beer, liquor, wine and champagne. With as little as 24 hour notice, the customer can place an order and have it filled in time for the event. The website listed the available beverages for order, a gallery of parties they have serviced, the company logo and an email link to the company email for ordering.
This project was a great learning experience. Building a network from the ground up is very taxing and stressful. The Server tasks I was responsible for opened my eyes to just how much is involved in getting an organization up and running. I hope to have another opportunity to work on a project like this so I can apply the extra things I learned this quarter.

References
Technet Microsoft (Ed.) (2012). How to Improve Security on the Edge with Windows Web Server 2008 and Internet Information Services. Retrieved from http://technet.microsoft.com/en-us/security/gg622920.aspx
Support Microsoft (Ed.) (2007, November 14). Using domain local groups, global groups, and universal groups in a BizTalk Server 2004 server group. Retrieved from http://support.microsoft.com/kb/884417
VirtualizationAdmin.com (Ed.) (2012). How to Configure Folder Redirection. Retrieved from http://www.virtualizationadmin.com/articles-tutorials/terminal-services/performance/configure-folder-redirection.html
Wesolowski, L. (Ed.) (2012). Server Administration: Server 2008 (Vol. 11). New England Institute of Technology.