> For the complete documentation index, see [llms.txt](https://paul-gleason.gitbook.io/champlain-college-classes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://paul-gleason.gitbook.io/champlain-college-classes/sec-440-systems-security/labs/project-7-windows-admin-center.md).

# Project 7 - Windows Admin Center

## Setup AD01

sconfig:

IP: 10.0.5.5/24

Time: Setup

Hostname ad01-Paul

### Make Forest

```powershell
Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools
Install-ADDSForest -DomainName "paul.local"
```

### Install ADDS

```powershell
Install-WindowsFeature DNS -IncludeManagementTools
Add-DnsServerPrimaryZone -NetworkID 10.0.5.0/24 -ReplicationScope "Domain"
Add-DnsServerResourceRecordA -CreatePtr -Name "fs01-paul" -ZoneName "oliver.local" -AllowUpdateAny -IPv4Address "10.0.5.7"
Add-DnsServerResourceRecordPtr -Name "5" -ZoneName "5.0.10.in-addr.arpa" -AllowUpdateAny -AgeRecord -PtrDomainName "ad01-paul.paul.local"
```

### Setup User

```powershell
$password = Read-Host -AsSecureString
New-ADUser -Name paul.gleason-adm -AccountPassword $password -Passwordneverexpires $true -Enabled $true
$password = Read-Host -AsSecureString
New-ADUser -Name paul.gleason -AccountPassword $password -Passwordneverexpires $true -Enabled $true
Add-ADGroupMember -Identity "Domain Admins" -Members paul.gleason-adm
Add-ADGroupMember -Identity "Enterprise Admins" -Members paul.gleason-adm
```

### DHCP

```powershell
Install-WindowsFeature DHCP -IncludeManagementTools
netsh dhcp add securitygroups
Restart-Service dhcpserver
Add-DHCPServerv4Scope -Name "lan-scope" -StartRange 10.0.5.60 -EndRange 10.0.5.70 -SubnetMask 255.255.255.0 -State Active -LeaseDuration 1.00:00:00
Set-DHCPServerv4OptionValue -ScopeID 10.0.5.0 -DnsDomain paul.local -DnsServer 10.0.5.5 -Router 10.0.5.1
Add-DhcpServerInDC -DnsName "ad01-paul.paul.local" -IpAddress 10.0.5.5
```

WK01 on DHCP

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2F2XMuUGCJckGJi80w2zyK%2Fimage.png?alt=media&amp;token=9f5c986a-06a1-462e-a071-5ef8e12b0739" alt=""><figcaption></figcaption></figure>

## FS01

IP: 10.0.5.7

Hostname fs01-Paul

Join domain

### Setup Windows Admin Center

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FDZY89HkcKHcNfb4alcT8%2Fimage.png?alt=media&amp;token=7e607b4a-0d96-445a-9e82-7dc44fc4d892" alt=""><figcaption></figcaption></figure>

Click through installer

### Windows Admin Center Setup

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2F5wAwUjd8jmKd8G9Ma8Qr%2Fimage.png?alt=media&amp;token=af7cd763-196b-441c-868b-cdf4ae3c1911" alt=""><figcaption></figcaption></figure>

Click add and add servers

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FYD8HMgc4VgVauB7Dz5Nd%2Fimage.png?alt=media&amp;token=c98ac918-6aa1-4412-bddc-f4209a896d90" alt=""><figcaption></figcaption></figure>

#### Add Extension:

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FNxg558sGojScJKpRXRnK%2Fimage.png?alt=media&amp;token=74a7fc78-edbc-4d1a-8b3d-1686f854b126" alt=""><figcaption></figcaption></figure>

Install AD and DNS extension

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FnUmNPMtbkLzzqeunZ3gp%2Fimage.png?alt=media&amp;token=bf8af51b-c1ba-483d-99ca-bf0cadfe7242" alt=""><figcaption></figcaption></figure>

## GPO for WinRM Setup

I made a new OU in AD for WKS01-Paul

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FBq4d993mk1My2zRBrTUd%2Fimage.png?alt=media&amp;token=4a7a76d5-9fa3-47dd-9a24-12fe937711a5" alt=""><figcaption></figcaption></figure>

Then Added A New GPO

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FEid3JH9LG4yiTIAe9PmF%2Fimage.png?alt=media&amp;token=2228b12a-70dc-43c6-9d8b-f9c906460ae5" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FTW7NSnvJ6KcQzsskRJfX%2Fimage.png?alt=media&amp;token=42342c20-b39e-4d96-9015-2e292dd2cf5c" alt=""><figcaption></figcaption></figure>

Then go to Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Remote Management > WinRM Service then select Allow remote server management through WinRM and set to Enabled and \* for filters

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FX2J8tPNVT20vxHIpb9ZR%2Fimage.png?alt=media&amp;token=124774d8-6349-4b68-a198-868f8f453537" alt=""><figcaption></figcaption></figure>

The modify Computer Configuration > Policies > Windows Settings > Security Settings > System Services and selected Windows Remote Management

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FQTEG4FcMsgGsDxt5CHkB%2Fimage.png?alt=media&amp;token=880b6998-9c61-4d72-a7fa-ad824ed4b89e" alt=""><figcaption></figcaption></figure>

Make it look like

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FlbVhWPSkmAm8baajaBtB%2Fimage.png?alt=media&amp;token=1f145e66-7650-42d3-a3eb-f5008971df7e" alt=""><figcaption></figcaption></figure>

Finally add an inbound firewall rule: Computer Configuration > Policies > Windows Settings > Security Settings > Windows Defender Firewall with Advanced Security&#x20;

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2F5TZMWpi1xR4tGNWFzFo5%2Fimage.png?alt=media&amp;token=94559173-0808-4ba9-90e4-9b3300633e5f" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FlX0LhIolFR1hvubjjrp2%2Fimage.png?alt=media&amp;token=cf21ab0c-fb35-4558-aa01-2ef84e29a3ce" alt=""><figcaption></figcaption></figure>

Then did a "gpupdate /force" on windows once windows restart then go on fs01 and test the connection

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2Ftt6cCjgbYJ3uE91ArPhQ%2Fimage.png?alt=media&amp;token=3a84da34-7860-4d6b-bcfc-73401555c67e" alt=""><figcaption></figcaption></figure>

<figure><img src="https://2309351619-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FONkWEMWluEABqm3rOYht%2Fuploads%2FIQMypfDXQPfkBJREE06S%2Fimage.png?alt=media&amp;token=3935ef4d-0abd-44f2-888b-927997ebae5f" alt=""><figcaption></figcaption></figure>