cq9电子点点

書名： Microsoft Application Virtualization Cookbook
作者名： James Preston
本章字數： 388字
更新時間： 2021-07-16 20:43:38

Configuring Active Directory

This recipe shows you the Active Directory configuration on a domain controller that will be used through this cookbook. In addition, it shows the configuration of a Group Policy Object (GPO) that will allow traffic through the firewall of Windows servers.

Getting ready

It is assumed that you have access rights to create objects in Active Directory, including Organizational Units (OUs), security groups, and user accounts.

How to do it...

The following list shows you the fundamental tasks involved in this recipe and the tasks required to complete the recipe (all of the actions in this recipe will take place on the server with the hostname DC):

Creating required OUs
Creating required security groups
Creating required computer accounts and user accounts
Creating a new GPO and linking it to an OU
Configuring the GPO with a Windows firewall policy

The implementation of the preceding steps is as follows:

Create the following OUs and pre-provision the computer accounts as shown:
Under the Domain Groups OU, create the following Security Groups:
Under Domain Users, create the following user accounts. In addition to this, add Sam Adams to the App-V Administrators Security Group option:
Open the Group Policy Management Console (GPMC) console, expand the OU tree to show Domain Servers, and then right-click on the App-V Servers OU. From the menu that appears, click on Create a GPO in this domain, and Link it here.
In the dialogue box that appears, enter Allow 440-442 as the name and click on OK.
In the new window that appears, right-click on the policies title option, and from the menu that appears, click on Properties.
Tick the Disable User Configuration settings checkbox and click on OK:
Expand the tree structure to navigate to Computer Configuration | Policies | Windows Settings | Security Settings | Windows Firewall with Advanced Security | Windows Firewall with Advanced Security – LDAP.
Right-click on Inbound Rules and select New Rule.
In the window that appears, select the Port radio option and click on Next.
Leave TCP selected, enter 440-442 in the Specific local ports box, and click on Next.
Leave Allow the connection selected and click on Next.
Remove the ticks from Private and Public to leave only Domain checked. Now, click on Next.
Finally, give the policy the name Allow 440-442, and click on Finish.

官术网_书友最值得收藏!

Microsoft Application Virtualization Cookbook

Configuring Active Directory

Getting ready

How to do it...