Project Overview: Configuring Network File Shares and Permissions in Active Directory

This tutorial focuses on creating and managing network file shares with permission-based access control in an Active Directory environment. You will learn how to configure shared folders, assign security group permissions, and test access control from a domain-joined client machine.

By the end of this exercise, you will:

✅ Create shared folders with different permission levels

✅ Test user access to shared folders based on permissions

✅ Create and configure security groups for access control

✅ Assign users to security groups and verify access changes

📌 Pre-requisites: Ensure DC-1 and Client-1 are running in Azure and properly networked.

Step 1: Create Shared Folders with Permissions

1. Log into DC-1 via Remote Desktop as:
   • Username: mydomain.com\jane_admin
   • Password: Cyberlab123!
2. Open File Explorer and navigate to C:.
3. Create the following four folders:
   • C:\read-access
   • C:\write-access
   • C:\no-access
   • C:\accounting (leave this for later steps).
4. Set permissions for each folder:
   • read-access: Right-click → Properties → Sharing → Click Advanced Sharing → Check Share this folder.
     • Click Permissions, add Domain Users, and set Read access.
   • write-access: Follow the same steps, but set Read/Write access for Domain Users.
   • no-access: Follow the same steps, but only add Domain Admins with Read/Write access.
   • Skip configuring the accounting folder for now.
5. Click Apply and OK for each folder.

Step 2: Test File Share Access from Client-1

1. Log into Client-1 via Remote Desktop as a normal user:
   • Username: mydomain.com\<someuser>
   • Password: <someuser's password>
2. Press Win + R, type \\dc-1, and press Enter to access the shared folders.