Network & System Administration

given to you with respect to CSEConsult: - There are four major categories of users: Consultants, Customers, Admin Support staff and IT Support staff - Create appropriate user groups to provide access to resources of different users groups. - All users should be able to logon to CSEConsult's resources except the Domain Controller's. Only IT Support staff and Domain Administrators can log onto the server locally. - For security reasons, all users must use complex passwords (i.e. at least 10 characters) when logging on the network. - All users, except the IT Support staff, should not be able to access Control Panel or edit the registry settings on Windows. - Shared folders are maintained in the file server. Two folders “ConsultantShared” and “SupportStaffDocuments” needs to be maintained where Consultants and Admin Support staff members have read and write access to the folders respectively. Also, the shared folders must be mapped as network drives to be easily accessible for users when they log in. - IT Support staff have permissions of all resources of staff and customers. - The IT Support Staff are able to manage user accounts and reset passwords for Consultants, Clients and Admin Support Staff. CSEConsult will use a Windows Server 2019 NOS for its primary DC. Design an Active Directory logical structure to support the above requirements. Illustrate your design using an appropriate diagram and also provide explanation of how your design meets each of the requirements stated above. You can use Visio to create the diagram. Ensure you use a legend which defines the symbols used in your diagram. Bonus Marks Activity (2 marks): Write a Powershell script to configure the Windows Server 2019 meeting ALL the requirements above. Your Powershell script should be documented for clarity.