Windows Network Proposal You have been hired by Crete LLC as an Information

Windows Network Proposal You have been hired by Crete LLC as an Information

soffix

  • $16.99


Windows Network Proposal  You have been hired by Crete LLC as an Information

Windows Network Proposal

Introduction 

Crete LLC is a company based in the United States of American. The company specialized in the manufacture and distribution of solar panel for the consumer markets. Branches are located in Houston, Los Angeles, and Dallas. They also considering and planning to expand promptly following the enormous need for solar panels. All staff that is associated with the main management will be based in Houston and Dallas offices.

Crete has also made implementations in various aspects of information technology as far as their production line is concerned. The company’s security on data is vital, since company’s reputation is in jeopardy. Remote access will be mandatory for the sales department, which will for Houston office. The Wide Area Network connectivity is well established and the branches can share information efficiently. The company also has an ample bandwidth in place.

The company also uses windows server 2012 operating system. This has been dues to the numerous features in the windows server 2012 which has offered Crete LLC company businesses powerful new opportunities for greater flexibility, agility, and efficiency. Some of the benefits that the company has using the windows server 2012 include;

• IT as a serviceWindows Server 2012 can help the Crete LLC, move towards an incredibly flexible approach to data processing. It has moved workloads from on-premise private clouds to cloud-hosted Azure or service cloud providers and back, for example to respond to increasing demand, peak loads, to deal with issues of data sovereignty or just to take advantage of market-driven price changes in capacity.
 
• Ultimate scalability. The windows server 2012 virtualization technology (Hyper-V 3) letsthe company scale out ever-larger virtual infrastructures. Customers can now build infrastructure which can support up to 8,000 virtual machines in a cluster, 1TB of memory per VM, 64TB virtual disks and support for up to 64 processors. Microsoft itself run its websites on virtualized servers and delivering billions of hits each month, Bing.com, MSDN, and Technet are great references for Windows Server 2012 running web properties on an epic scale. (Wayne Mayer, HowieT November 8, 2012; Windows Server 2012 website)
 
• Network virtualization. In the past hosting companies had to create virtual networks using real (expensive) hardware but now Windows Server 2012 lets them do this in software, which cuts costs. It also means that they can reallocate servers easily without changing the physical infrastructure of their network or the systems’ IP addresses. (Wayne Mayer, HowieT November 8, 2012; Windows Server 2012 website) 
 
• Epic storageWindows Server 2012 gives IT departments the benefit of a SAN (Storage Area Network) without having to buy expensive SAN storage. The company can nowcreate pools of storage from a collection of physical disks attached to the server. It’s also easy for management to add or remove physical disks dynamically depending on the storage requirements. This means that companies can optimize their storage based on thehardware they have today and still have flexibility to add more in future. Imagine having a fast-growing SQL database. (Wayne Mayer, HowieT November 8, 2012; Windows Server 2012 website)

 

This proposal will cover a number of topics and aspects that I consider essential for the company as it plan to expand and grow due to demand of the solar panel. The following are some of the aspects and infrastructure that should be implemented for the success and efficient operation of the company.

Active Directory

Active directory can performs a number of operations within the organization. These roles range from managing windows network to supporting directory enabled e-commerce applications.Nevertheless, the way you use Active directory will affect the way design and the deployment decisions are made. (MSDN Library, 2016)

This proposal is in reference to the network operating system (NOS) management role. Benefits of deploying Active Directory in a NOS management role include:

• Centralized management of very large Windows networks (Active Directory is designed to support millions of objects).
• The ability to eliminate resource domains, including the hardware and administration they entail. (MSDN Library, 2016)
• Policy-based desktop lockdown and software distribution.
• The ability to delegate administrative control over resources where appropriate.
• Simplified location and use of shared resources. (MSDN Library, 2016)

This proposal also explains how deploying Active Directory and DNS core services as part of managing a Windows network. Some of the services that are layered on Active Directory can be added later and do not affect the initial design. (MSDN Library, 2016). For instanceGroup Policy can simplify management by providing policy-based administration for users, groups, workstations, and servers. Some services that can be layered on Active directory include:

• Group Policy
• Exchange 2000
• Integrated public key infrastructure (PKI) services
• Domain-based DFS (MSDN Library, 2016)

Some domain and enterprise-wide operations that are not well suited to multi-master updates must be performed on a single domain controller in the domain or in the forest. The purpose of having a single-master owner is to define a well-known target for critical operations and to prevent the introduction of conflicts or latency that could be created by multi-master updates(MSDN Library, 2016)

Considering single-operation master means that the relevant FSMO role owner must be online, discoverable, and available on the network by computers that have to perform FSMO-dependent operations. When the Active Directory Installation Wizard (Dcpromo.exe) creates the first domain in a new forest, the wizard adds five FSMO roles. (MSDN Library, 2016)

 

RODC Placement Considerations

These considerations are applied to the windows server 2012 that is currently being used by the Crete LLC company. Considering the placement of the of a read-only domain controller (RODC) in the Crete LLC, we have to consider how the RODC will replicate scheduled updates. An RODC can replicate updates of the domain partition only from a writable domain controllerrunning Windows Server 2012 in the same domain. (MSDN Library, April 2012)

The RODC can replicate other partitions, such as application directory partitions and global catalog partitions, from any writable domain controller that runs either Windows Server 2003 or Windows Server 2012An RODC cannot be a source domain controller for any other domain controller because it cannot perform outbound replication. (MSDN Library, April, 2012)

Plan for AD backup and recovery system

The Crete LLC should consider back up and recover the Active Directory Domain Services (AD DS) server role in the Windows Server 2008 operating system in their implementation plan. (Microsoft.com, n.d.). The function of this AD DS include backing up the full server, backing up critical volumes, and performing non-authoritative and authoritative restores of Active Directory objects on either a full installation of Windows Server 2012 or a Server Core installation of Windows Server 2012. (Microsoft.com, n.d.)

 

 

 

Group policy

There are several group policies that are needed by the Crete LLC located in the security setting node of the Group policy object. Some of this policies include; Account Policies, Local PoliciesEvent Log, Restricted GroupsSystems ServicesRegistryFile SystemPublic Key Policies, and Internet Protocol Security Policies on Active Directory. (TechNet Library, 2016)

The policies that the Crete LLC will choose can also affect you choose affect how the security at the desk support required for users as well as the vulnerability of the company network to security breaches and attacks. For instancespecifying a restrictive account lockout policy increases the potential for denial of service attacks, and setting a restrictive password policy results in increased help desk calls from users who cannot log on to the network. Additionallyspecifying restrictive password policy can actually reduce the security of the network(TechNet Library, 2016)

DNS

DNS refers to the hierarchically distributed database that creates hierarchical names that can be resolved to IP addresses. The IP addresses resolve to MAC addresses. DNS are mostly used to provide name registration, name resolution, and the services location for companies like Crete LLC, which are using windows server 2012 operating systems. I will recommend that Crete LLC uses; Fully qualified domain name (FQDN): This is the DNS name that is used to identify a computer on the network. FQDNs have to be unique. The FQDN usually consists of a Host name, Primary DNS suffix, and Period. The figure below represents how the DNS operates.

I will also recommend in this proposal that the Crete LLC operates on the Primary zone.This only zone type that can be edited or updated because the data in the zone is the original source of the data for all domains in the zone, Updates made to the primary zone are made by the DNS server that is authoritative for the specific primary zone.(TechNet Library, 2016)

File services 

File Server Resource Manager is a suite of tools in the Windows Server 2012 operating system that allows administrators to place storage limits on volumes and folders, prevent users from saving specific file types to the server, and generate comprehensive storage reports. File Server Resource Manager not only helps administrators to efficiently control and monitor existing storage resources from a central location, but also aids in the planning and implementation of future changes to the storage infrastructure. (TechNet Library, January 21, 2008). The following will also be considered much important if infused in the operating system of the company. They include;

• Quota management- Set soft or hard space limits on a volume or folder tree. The Crete LLC can create and apply quota templates with standard quota properties(TechNet Library, January 21, 2008).
• File screening management. Define filtering rules that monitor or block attempts by Crete LLC to save certain file types on a volume or folder tree. The company can also create and apply screening templates with standard file exclusions(TechNet Library, January 21, 2008).
• Storage reports management. Generate built-in reports to track quota usage, file screening activity, and patterns of storage use in the company(TechNet Library, January 21, 2008).

I don’t think if it’s necessary to implement DFS in the company systems since they are not dealing perishable products that will need LIFO or FIFO

WSUS

Since the Crete LLC have set up Active Directory in their network, they can configure one or multiple computers simultaneously, by including them in a Group Policy object (GPO), and then configuring that GPO with WSUS settings. I will recommend that the company system administrator create a new Group Policy object (GPO) that contains only WSUS settings(TechNet Library, January 21, 2008).

The GPO should then be linked with the WSUS GPO to an Active Directory containerappropriate for their environment. Since the company have more complex task to perform as it expands, they have to link multiple WSUS GPOs to several organizational units (OUs), which will enable the company system to apply different WSUS policy settings to different types of computers. (TechNet Library, January 21, 2008).


We Also Recommend


Sale

Unavailable

Sold Out