Repetition Tag 1 und 2 für Alyssa

⏱️ Duration: 75-90 minutes 📚 Topics: Windows Installation, User Management, File Permissions, Partitions, File Systems

Scenario You've been hired as an IT administrator for a small law firm with 8 employees. They need you to set up a new Windows 11 workstation with proper user accounts, file organization, and security. This machine will be used by multiple employees who need different levels of access to various files and folders.

1

Part 1: Pre-Installation Planning

⏱️ Duration: 20 minutes

Knowledge Check Questions

Before starting the installation, answer these questions:

  1. UEFI vs. BIOS:

    • What does UEFI stand for? ___

    • Name three advantages of UEFI over traditional BIOS:

  2. Boot Media Preparation:

    • What format should a USB boot medium use for UEFI installation? ___

    • What does the file extension .iso mean? ___

    • What tool do we use in the course to create bootable USB drives? ___

  3. Windows 11 Requirements:

Requirement
Minimum
Recommended for Practice

CPU

1 GHz Quad-Core

RAM

16 GB

Storage

Graphics

Special

UEFI, TPM, Secure Boot

Same

Installation Planning Document

Create a planning document for the law firm workstation:

System Configuration:

  • Computer Name: LAWFIRM-WS01

  • Primary Admin Account: Admin (Password: 123ict)

  • Partition Strategy:

    • C: Windows System - ___GB (50% of 512GB SSD)

    • D: Data Drive - ___GB (remaining space)

  • File System Choices:

    • C: ___ (Why?)

    • D: ___ (Why?)

2

Part 2: User and Group Architecture

⏱️ Duration: 25 minutes

Law Firm Structure

The firm has the following staff:

Management:

  • Sarah (Senior Partner) - needs access to everything

  • Michael (Junior Partner) - needs access to most files

Legal Team:

  • Anna (Lawyer)

  • Thomas (Lawyer)

  • Lisa (Paralegal)

Support Staff:

  • Hans (Secretary)

  • Maria (Bookkeeper)

  • Peter (IT Support - that's you!)

Task 1: Design User and Group Structure

Create a user/group organization chart:

Groups needed:

  1. Administrators

    • Members: ___

  2. Management

    • Members: ___

  3. LegalTeam

    • Members: ___

  4. Support

    • Members: ___

  5. AllStaff

    • Members: ___

Task 2: Windows User Creation Commands

Write the command-line commands to create three users of your choice:

REM Create user Hans
net user ___ ___ /add

REM Create user Maria
___

REM Create user ___
___

REM View user information
net user Hans

REM Add Hans to Support group
net localgroup Support Hans /add

REM Remove a user (example)
net user TestUser /delete

Task 3: GUI vs. Command Line

Research and document:

  1. Two methods to create users in Windows 11:

    • Method 1: ___ (most common for admins)

    • Method 2: ___

  2. Advantages of each method:

Method
Advantages
When to Use

GUI (Computerverwaltung)

Command Line (net user)

3

Part 3: File System and Partition Management

⏱️ Duration: 20 minutes

Task 1: File System Deep Dive

Complete this comprehensive comparison table:

File System
OS
Case Sensitive?
Journaling?
Permissions?
Max File Size
Best Use

FAT32

All

Nein

Nein

Nein

4 GB

exFAT

All

>4 GB

NTFS

Windows

Nein*

Ja

Ja

ReFS

Windows

ext4

Linux

APFS

macOS

Special Note about NTFS: ___

Task 2: Journaling Explained

In your own words (minimum 3 sentences):

  1. What is "Journaling" in a file system?

  2. How does it help recover from errors?

  3. Give an example of when this would be useful:

Task 3: Partition Planning Exercise

Scenario: You have a 1TB hard drive to partition for a workstation:

Your partition plan:

Drive Letter
Size
File System
Purpose
Why this FS?

C:

250 GB

NTFS

D:

500 GB

Data

E:

250 GB

Questions:

  1. Why not use FAT32 for the data drive?

  2. What is the command to view partition information? ___

  3. Where do you find the Datenträgerverwaltung in Windows?

4

Part 4: Advanced Permission Scenarios

⏱️ Duration: 30 minutes

Task 1: Law Firm File Structure

Create this directory structure on D::

D: ├── Management │ ├── Contracts │ ├── Financial │ └── Strategy ├── Cases │ ├── Active │ ├── Archived │ └── Templates ├── Support │ ├── Correspondence │ └── Schedules └── Shared ├── Policies └── Forms\

Task 2: Permission Requirements Table

Design the permissions for each folder:

Folder Path
Owner
Group
Permissions

D:\Management\

Sarah

Management

Mgmt: V, Legal: L, Support: --

D:\Management\Financial\

Sarah

Management

Mgmt: V, Others: --

D:\Cases\Active\

LegalTeam

Legal: V, Mgmt: L, Support: L

D:\Cases\Templates\

LegalTeam

Legal: Ä, All: L

D:\Support\Correspondence\

Hans

Support

Support: V, Legal: L, Mgmt: L

D:\Shared\Policies\

Admin

AllStaff

All: L, Mgmt: Ä

D:\Shared\Forms\

AllStaff

All: Ä

Legend:

  • V = Vollzugriff (Full Control)

  • Ä = Ändern (Modify)

  • L = Lesen (Read)

  • LA = Lesen und Ausführen (Read & Execute)

  • S = Schreiben (Write)

  • -- = Kein Zugriff (No Access)

Task 3: Permission Verification Plan

Create a test plan to verify permissions:

  1. Test Case 1:

    • User: Hans (Support group)

    • Action: Try to open D:\Management\Financial\Q4_Budget.xlsx

    • Expected Result: ___

    • Actual Result: ___

  2. Test Case 2:

    • User: Anna (LegalTeam)

    • Action: Try to modify D:\Cases\Templates\Contract_Template.docx

    • Expected Result: ___

    • Actual Result: ___

  3. Test Case 3:

    • User: Maria (Support group)

    • Action: Try to read D:\Shared\Policies\IT_Policy.pdf

    • Expected Result: ___

    • Actual Result: ___

Task 4: Security Concept Questions

Answer in detail:

  1. Why distinguish between User and Admin rights?

    • Security reason: ___

    • Practical reason: ___

    • Business reason: ___

  2. Which file system does NOT support permissions management?

    • Answer: ___

    • Why is this a problem? ___

    • When would you still use it? ___

  3. Why restrict admin rights even for administrators?

    • Principle of ___ privilege

    • Example scenario where this prevents disaster: ___

5

Part 5: Driver Management

⏱️ Duration: 15 minutes

Task 1: Driver Detective

After installing Windows 11, you open Geräte-Manager and see:

Device
Status
Problem

NVIDIA GeForce RTX 3060

⚠️ Yellow warning

Realtek Audio

✅ Working

Intel Wi-Fi 6 AX200

⚠️ Yellow warning

Unknown Device

❌ Not recognized

Your action plan:

  1. For NVIDIA GPU:

    • Where to find driver: ___

    • Installation method: ___

  2. For Wi-Fi adapter:

    • Where to find driver: ___

    • Why might Windows not include it: ___

  3. For Unknown Device:

    • How to identify what it is: ___

    • Steps to troubleshoot: ___

Task 2: Driver Theory

Short answer questions:

  1. What is a driver (Treiber)?

  2. Why does Windows include many drivers but not all?

  3. What's the difference between Windows Update drivers and manufacturer drivers?

6

Bonus Challenge: Backup Strategy (Optional)

⏱️ Duration: 10 minutes

Design a backup strategy for the law firm:

Requirements:

  • Must protect against ransomware

  • Must allow recovery from hardware failure

  • Must comply with legal data retention (7 years)

  • Budget-conscious solution

Your Strategy:

Backup Type
Frequency
Storage Location
Retention
Tool

System Image

External USB

3 months

Windows Backup

File Backup

Daily

Cloud Backup

7 years

Deliverables

Submit a professional document containing:

  1. ✅ Completed installation planning document

  2. ✅ User and group organization chart

  3. ✅ All command-line scripts for user creation

  4. ✅ Complete file system comparison table

  5. ✅ Directory structure with permission assignments

  6. ✅ Test plan results for permission verification

  7. ✅ Driver management action plan

  8. ✅ Answers to all concept questions

Assessment Criteria

Criterion
Weight
Description

Planning Quality

25%

Well-thought-out user structure and permission design

Technical Accuracy

35%

Correct commands, file systems, and specifications

Security Awareness

20%

Appropriate permission restrictions and understanding of risks

Documentation

20%

Clear, professional documentation of all work

Tips for Success:

  • Think from the user's perspective - what do they need to access?

  • Always apply the principle of least privilege

  • Test your permission schemes before implementing

  • Document your reasoning for each decision

  • Consider what happens if someone leaves the company

Common Pitfalls:

  • Giving everyone admin rights "to make things easier"

  • Using FAT32 for drives that need permissions

  • Forgetting to test permission schemes as different users

  • Not considering inheritance in folder structures

  • Mixing up NTFS permissions with share permissions

PreviousAufgabe Security Audit für Kuno