Windows Server Deployment for Managed Network of Computers - Initech Case Study

Learning Outcomes Assessed

LO3:  Appraise the role of centralised servers in the effective management of a computer network

LO4:  Implement appropriate policy rules to manage, secure and control users and devices on a network

For this assessment you will be given a scenario where a deployment of a managed network of Windows computers is required. After analysing the requirements, you will suggest a deployment of at least one Windows server (more if necessary) to meet the needs of the organisation. The solution will include:

• Deployment of one or more Windows Server hosts
• Configuration of services
• Developing a suitable Active Directory configuration for the network
• Devising appropriate Group Policy settings for users and devices on the network.

You will need to write a report summarising your findings and recommendations for the company.

This assessment will be marked according to the standard HE5 assessment criteria detailed in section 16 of the module guide. From those headings, Relevance, Knowledge and Argument/Analysis will each be worth 20% of the marks, Structure, Presentation, Written English and Research/Referencing will be worth 10% each.

Initech are a software development company who have recently been advised to alter many of their working practices by a management consultancy (The Two Bobs). Based on the recommendations Initech need you to setup a new structure within Active Directory to support working practices and enforce corporate policy. Detailed information is available in supplementary documents including an organisation chart and employee list. In common with many software companies there are frequent reorganisations. The structure you devise should be flexible enough to cope with future restructuring efforts.

The major requirements following the review by The Two Bobs are listed below:

It is important for staff to mingle and work flexibly. Staff, including software developers, are expected to move around and work in flexible and ad hoc teams. Most users will not therefore have an allocated computer. The practice of hot desking means that any user can login to any workstation and work from there. Users’ settings and working environments should follow them to any computer.

There is a need for a small number of computers to be placed in public and non-secure locations such as the lobby or conference rooms. These computers should be locked down to prevent access to sensitive internal data from untrusted machines. There should be no opportunity for users of these kiosk computers to make any changes to settings.

Managers keep their own personal information on their own laptop computers. The Hot Desking policy does not apply to these members of staff. Security and personalisation settings can be modified by this group of users.

In general staff should not be able to install software, modify software or access material on any computers. Exceptions to this rule are managers on their own PC and members of the IT team on any PC. Staff (other than managers) should change their password every week. Removable media should be banned for all users.

Following previous security concerns Initech now aim to roll out security patches to their desktop and laptop systems within one week of their release. Patches must be tested before roll-out.

Each team has access to their own shared drive. Users cannot read or write to any shared drive other than their own team’s.

Network printers have long been a problem area for Initech. Using centrally managed print queues would improve the situation.

Some users are required to write weekly TPS reports. They will need an additional shared drive space on a file server with read and write access enabled.

You will need to provide a report which sets out how you intend to meet the above needs using Windows Server in general and Active Directory in particular. Your report should contain:

• Details of the server roles needed in your opinion together with a reason for those choices
• Details of the organisation structure needed within Active Directory including OUs and GPOs you think necessary. This would normally use screenshots, but descriptions are acceptable.
• Detailed documents showing Group Policy Object settings – these can be exported as HTML documents within the Group Policy Object Management Tool. You should state where each GPO fits in your structure and what it is intended to achieve.

At no point in this assignment brief have you been asked to add loads of definitions about the elements of Windows Server and Active Directory. The important information your report has to convey is the choices you have made to deal with the assignment brief and the reasons for your choices. Marks will not be given for irrelevant padding!

This report will be marked using the standard HE5 marking criteria as specified in the Module Handbook. From those headings, Relevance, Knowledge and Argument/Analysis will each be worth 20% of the marks, Structure, Presentation, Written English and Research/Referencing will be worth 10% each.

Use the hand-in link on Moodle to hand-in this assignment via the Turn-It-In system. The standard undergraduate assessment regulations apply to this assignment.