Table of Contents

1. Challenge

   Configure Active Directory Users and Groups

   1. Create an Active Directory global group named Developers.
   2. Add the Developer user as a member of the Developers group.
2. Challenge

   Configure DNS

   1. Create a conditional forwarder on the Barrier Reef Audio domain controller to forward DNS traffic for dev.rivercityai.com to the River City AI domain controller.
   2. Create a conditional forwarder in the opposite directory on the River City AI domain controller to forward DNS traffic for corp.barrierreefaudio.com to the Barrier Reef Audio domain controller.
   3. Test DNS name resolution in both directions.
3. Challenge

   Create an External Trust

   1. Create a one-way, outgoing external trust with selective authentication to allow developers in the Barrier Reef Audio domain to access resources in the River City AI domain.
4. Challenge

   Configure Selective Authentication

   1. Modify the computer account for the River City AI domain controller to configure selective authentication for the Developers group in the Barrier Reef Audio domain to authenticate using the trust and access resources.
5. Challenge

   Test Access

   Using the password from the lab details:

   1. Log on to BRAWKS1, and test access to \\RCAIDC1.dev.rivercityai.com\data as a developer user ([email protected]) to ensure access is granted.
   2. Log on to BRAWKS1, and test access to \\RCAIDC1.dev.rivercityai.com\data as a non-developer user ([email protected]) to ensure access is not granted.