squatchulator
commented
6 months ago generator.local
|> Builtin (Contains big list of built-in security groups) |> Computers --|> Learning Lab --|> Flex Space --|> Verkada Cameras (maybe? if recognized as endpoints) --|> Domai |> Domain Controllers |> ForeignSecurityPrincipals |> Managed Service Accounts |> Users (Contains big list of built-in user security group templates) --|> Management --|> Staff --|> Members
Need to know:
- Does each part of Generator have departments? (i.e. members working in the maker space at Generator, do they need access to specific tools on workstations? Are they tools that should only be delegated to them?)
Notes:
- SET STATIC IPS!!!
- Looks like backing up the whole server will be doable for us! In Tools, you an just install Windows Server Backup and set a scheduele to start periodic full-server backups. We also have the option of backing up to a shared network folder if that ends up being more useful for us.
- Make sure to promote both servers to domain controllers before doing anything else. Do DC1 first, and then when making the other, add your domain extension so that it adds both to the domain. Make sure to supply the credentials as
\Administrator - To replicate, go into Sites and Services, expand the servers, and right-click their NTDS settings to start replication. Set the scheduele to 4x per day.
We should map out the OU hierarchy and make sure it covers the leadership roles at Generator properly. This is something we should talk to the leadership over there about in the future so that we can properly set permissions for Generator.