Shadow Groups Lab — Helmsman Directory Console

Helmsman Directory Console — HQ-DCA01 beaconfreight.lan

Details

Your assignment

You're the directory administrator at Beacon Freight Logistics, an on-prem Windows shop. The domain beaconfreight.lan is run from the controller HQ-DCA01.

You're rolling out shadow groups for role-based access: one global security group per department, whose members mirror everyone in that department's organizational unit — including its sub-OUs. Resource permissions will later be assigned to these groups, never to the OUs themselves.

Create each group inside its department OU, give it the matching name, then add every user from that OU and its sub-OUs. Leave out anyone from Corporate.

Shadow sync

Tasks

Knowledge check

Submit completed lab

0/9

0 of 9 complete
Finish all tasks and questions to pass.

Hacker name (pseudonym) No real names — keep it anonymous. Your instructor maps it on their roster.