20346D Module 10 Lab

20346D Module 10 Lab

Lab 10: Implementing Directory Synchronization

Scenario

Lucerne Publishing is beginning to realize that cloud-based user and group management in Office 365 is failing to meet the organizations needs. Users are forgetting passwords, and helpdesk calls are up 68 percent. As a result, the company is anxious to investigate AD Connect and password synchronization for user and group management. 

Objectives

To provide the students with practical experience of planning and deploying AD Connect.

Lab Setup

Estimated Time: 120 minutes

Virtual machine: 20346C-LUC-CL1

Username: Student1

Password: Pa$$w0rd

In all tasks, where you see references to lucernepublishingXXXX.onmicrosoft.com, replace the XXXX with the unique Lucerne Publishing number that you were assigned when you set up your Office 365 account in Module 1, Lab 1B. 

Where you see references to labXXXXX.o365ready.com, replace the XXXXX with the unique o365ready.com number you were assigned when you registered your IP address at www.o365ready.com in Module 2, Lab 2B. 

Exercise 1: Prepare on-premises Active Directory for AD Connect

Scenario

Over the last few weeks, it has been particularly obvious that, as predicted by Alain Richer, cloud-based user and group management simply isn�t working. The company needs to move to a different model for organizing users and groups between its on-premises and cloud-based environments. As a result, the deployment team has been analyzing AD Connect functionality and the option of Password Sync. Before this deployment can proceed, there are several checks that the team needs to run; these include looking for duplicate accounts, filtering the directory, and correcting UPNs. 

The main tasks for this exercise are as follows:

1. Prepare Problem User Accounts

2. Verify an Enterprise Administrator Account for Use in AD Connect Setup

Task 1: Prepare Problem User Accounts

1.     On LUC-EX1 virtual machine, ensure you are logged on as LUCERNELucAdminwith a password of Pa$$word. 

2.     On the LUC-EX1, on the Start screen, type Exch, right-click Exchange Management Shell and then click Run as administrator.

3.     At the PowerShell prompt, type the following command, and press Enter:

CD C:Temp

4.     At the PowerShell prompt, type the following command, and press Enter:

Set-ExecutionPolicy Unrestricted

Press Enter to confirm the execution policy change.

5.     At the Windows PowerShell prompt, type the following command, and press Enter:

.CreateProblemUsers.ps1

Important: Wait until the script has completed before proceeding to the next step. 

6.     Switch to LUC-DC1 from either the drop-down menu in the LODS black bar at the top or from the �Machines� tab on the right. Log on as LUCERNELucAdmin, password: Pa$$w0rd. 

7.     In Server Manager, click Tools, and then click ADSI Edit. 

8.     In ADSI Edit, in the navigation pane, right-click ADSI Edit, and click Connect to. 

9.     In the Connection Settings dialog box, click OK. 

10.  In the navigation pane, expand Default naming context, then expand DC=lucernepublishing,DC=local, and then click OU=Engineering. 

11.  In the Results pane, right-click dshivers, and then click Properties. 

12.  In the Properties dialog box, in the Attributes list, select userPrincipalName, and then click Edit. 

13.  In the String Attribute Editor, add a "|" (pipe) character in front of "lucerne", and click OK. 

14.  Click OK, to close the Properties dialog box. 

15.  In the Results pane, right-click kfredrickson, and then click Properties. 

16.  In the Properties dialog box, in the Attributes list, select mailNickname, and then click Edit. 

17.  In the String Attribute Editor, replace the existing string with "duplicate", and click OK. 

18.  Click OK, to close the Properties dialog box. 

19.  In the Results pane, right-click bhowerton, and then click Properties. 

20.  In the Properties dialog box, in the Attributes list, select mailNickname, and then click Edit. 

21.  In the String Attribute Editor, replace the existing string with "duplicate", and click OK. 

22.  Click OK, to close the Properties dialog box. 

23.  In the Results pane, right-click gdonato, and then click Properties. 

24.  In the Properties dialog box, in the Attributes list, select mailNickname, and then click Edit. 

25.  In the String Attribute Editor, add quote marks around the existing string, and click OK. 

26.  Click OK, to close the Properties dialog box. 

27.  In the Results pane, right-click bbeach, and then click Properties. 

28.  In the Properties dialog box, in the Attributes list, select mailNickname, and then click Edit. 

29.  In the String Attribute Editor, replace the existing string with a single space, and click OK. 

30.  Click OK, to close the Properties dialog box. 

Task 2: Verify an Enterprise Administrator Account for Use in AD Connect Setup

1.     Switch back to the LUC-DC1. 

2.     On LUC-DC1, in Server Manager, click Tools, and then click Active Directory Users and Computers.