> For the complete documentation index, see [llms.txt](https://paul-gleason.gitbook.io/champlain-college-classes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://paul-gleason.gitbook.io/champlain-college-classes/sec-440-systems-security/labs/project-7-windows-admin-center.md).

# Project 7 - Windows Admin Center

## Setup AD01

sconfig:

IP: 10.0.5.5/24

Time: Setup

Hostname ad01-Paul

### Make Forest

```powershell
Install-WindowsFeature -Name AD-Domain-Services -IncludeManagementTools
Install-ADDSForest -DomainName "paul.local"
```

### Install ADDS

```powershell
Install-WindowsFeature DNS -IncludeManagementTools
Add-DnsServerPrimaryZone -NetworkID 10.0.5.0/24 -ReplicationScope "Domain"
Add-DnsServerResourceRecordA -CreatePtr -Name "fs01-paul" -ZoneName "oliver.local" -AllowUpdateAny -IPv4Address "10.0.5.7"
Add-DnsServerResourceRecordPtr -Name "5" -ZoneName "5.0.10.in-addr.arpa" -AllowUpdateAny -AgeRecord -PtrDomainName "ad01-paul.paul.local"
```

### Setup User

```powershell
$password = Read-Host -AsSecureString
New-ADUser -Name paul.gleason-adm -AccountPassword $password -Passwordneverexpires $true -Enabled $true
$password = Read-Host -AsSecureString
New-ADUser -Name paul.gleason -AccountPassword $password -Passwordneverexpires $true -Enabled $true
Add-ADGroupMember -Identity "Domain Admins" -Members paul.gleason-adm
Add-ADGroupMember -Identity "Enterprise Admins" -Members paul.gleason-adm
```

### DHCP

```powershell
Install-WindowsFeature DHCP -IncludeManagementTools
netsh dhcp add securitygroups
Restart-Service dhcpserver
Add-DHCPServerv4Scope -Name "lan-scope" -StartRange 10.0.5.60 -EndRange 10.0.5.70 -SubnetMask 255.255.255.0 -State Active -LeaseDuration 1.00:00:00
Set-DHCPServerv4OptionValue -ScopeID 10.0.5.0 -DnsDomain paul.local -DnsServer 10.0.5.5 -Router 10.0.5.1
Add-DhcpServerInDC -DnsName "ad01-paul.paul.local" -IpAddress 10.0.5.5
```

WK01 on DHCP

<figure><img src="/files/XNJCzpVPoyaDIXMt1JAd" alt=""><figcaption></figcaption></figure>

## FS01

IP: 10.0.5.7

Hostname fs01-Paul

Join domain

### Setup Windows Admin Center

<figure><img src="/files/ngzbh6Y2RKFIW9t4f3oY" alt=""><figcaption></figcaption></figure>

Click through installer

### Windows Admin Center Setup

<figure><img src="/files/HCuaLdWLrjEQhRsT2weI" alt=""><figcaption></figcaption></figure>

Click add and add servers

<figure><img src="/files/PECCES6G9RaIvN5Qjkxb" alt=""><figcaption></figcaption></figure>

#### Add Extension:

<figure><img src="/files/5B9iTzN9W9ka0q8lYEZP" alt=""><figcaption></figcaption></figure>

Install AD and DNS extension

<figure><img src="/files/w1FNnwppllSADAg8PHg7" alt=""><figcaption></figcaption></figure>

## GPO for WinRM Setup

I made a new OU in AD for WKS01-Paul

<figure><img src="/files/GaYQkf0mYe47wUc51lq0" alt=""><figcaption></figcaption></figure>

Then Added A New GPO

<figure><img src="/files/hXYJfJcOw8PzyVgBNUoJ" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/7HWwcsqM7CFTcw7lDr35" alt=""><figcaption></figcaption></figure>

Then go to Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Remote Management > WinRM Service then select Allow remote server management through WinRM and set to Enabled and \* for filters

<figure><img src="/files/ZgDuC34GOLbQdEq7HAZx" alt=""><figcaption></figcaption></figure>

The modify Computer Configuration > Policies > Windows Settings > Security Settings > System Services and selected Windows Remote Management

<figure><img src="/files/AlZjvBL7mTBA6IOhUB7L" alt=""><figcaption></figcaption></figure>

Make it look like

<figure><img src="/files/lbnZAmmmCGfEu71GIFIT" alt=""><figcaption></figcaption></figure>

Finally add an inbound firewall rule: Computer Configuration > Policies > Windows Settings > Security Settings > Windows Defender Firewall with Advanced Security&#x20;

<figure><img src="/files/OViPm9qhkvEziG5ZFUpk" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/UuSio34j0f38zeMyPQkS" alt=""><figcaption></figcaption></figure>

Then did a "gpupdate /force" on windows once windows restart then go on fs01 and test the connection

<figure><img src="/files/SDmqU5TPBYKNFyslohRi" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/VvDqZeac89iuVXjXfAFt" alt=""><figcaption></figcaption></figure>