Lab
A Cloud Guru

Secure Server Access with Windows Defender Firewall

You are working on securing your Windows Servers, and as part of the effort, you want to configure a domain isolation policy between the employee workstations and the application servers. You want to make sure that the employees can only log into an application server from a domain-joined client workspace. In order to do this, in this hands-on lab, you are going to configure a Group Policy to enforce Windows Defender Firewall rules between client and server VMs.

Try for free Contact sales

Path Info

Level

Intermediate

Duration

1h 15m

Published

Jan 26, 2023

Challenge

Configure the Active Directory Domain Services Environment
- Install Active Directory Domain Services
  - Download the installadds PowerShell script from the GitHub repository
- Create the Domain Admin user
  - Download the domainadmin PowerShell script from the GitHub repository
- Create organizational units (OUs)
  - Download the addou PowerShell script from the GitHub repository
- Join the client and server VMs to the domain and add them to their respective OUs
  - Download the clientdomainjoin PowerShell script from the GitHub repository
  - Download the serverdomainjoin PowerShell script from the GitHub repository
Challenge

Configure Group Policy for Windows Defender Firewall Rules
- Create a Group Policy Object and link it to the server organizational unit
  - Edit the policy to Require authentication for inbound connections and request authentication for outbound connections to the server VM
- Create a Group Policy Object and link it to the client organizational unit
  - Edit the policy to Request authentication for inbound and outbound connections to the client VM
- Update the Group Policies on the virtual machines
Challenge

Confirm Firewall Rules Have Been Applied
- Confirm that you can only directly remote into the client VM and not the server VM
- From the client VM, confirm that you can remote into the server VM using the private IP address or the Fully Qualified Domain Name (FQDN)

Author

A Cloud Guru

The Cloud Content team comprises subject matter experts hyper focused on services offered by the leading cloud vendors (AWS, GCP, and Azure), as well as cloud-related technologies such as Linux and DevOps. The team is thrilled to share their knowledge to help you build modern tech solutions from the ground up, secure and optimize your environments, and so much more!

What's a lab?

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.