Exercise 2: Download and Configure the Windows Server 2008 R2 Evaluation VM

1. Download the trial VHD for the Windows Server 2008 R2 Enterprise Evaluation from the URL below. Make sure you download the Full Edition instead of the Server Core edition.

   https://www.microsoft.com/downloads/details.aspx?FamilyId=9040a4be-c3cf-44a5-9052-a70314452305&displaylang=en

   After you have completed the download, you should have an EXE file on your local hard drive named Windows Server 2008 R2 Enterprise Evaluation (Full Edition).exe

2. Extract VM image from Windows Server 2008 R2 Enterprise Evaluation (Full Edition).exe
   1. Double click the EXE for to begin the extraction. This will extract the VHD file named Windows Server 2008 R2 Enterprise Evaluation (Full Edition).vhd.
   2. Rename the VHD file to WingtipServer.vhd
   3. Move or copy WingtipServer.vhd to the location on a local hard drive from which the Hyper-V service will run it.

3. Use The Hyper-V Manager to create a new Virtual Machine to run WingtipServer.vhd

   1. Launch the Hyper-V Manager from Administrative Tools
   2. Start the New Virtual Machine Wizard
   3. When the wizard prompts you for the machine name, enter WingtipServer.
   4. When the wizard prompts you to assign memory, enter 4092 MB (4GB)
   5. When the wizard prompts you for a network connection, select HostLanCard
   6. When the wizard prompts you to Connect Virtual Hard Disk, choose Use an existing virtual hard drive and browse to select WingtipServer.vhd.
   Figure 1

   Connect Virtual Hard Disk

   1. When you complete the New Virtual Machine Wizard as shown below, Click Finish.
   Figure 2

   Finish

4. Configure and start the new VM
   1. Before starting the VM, inspect its settings page using Hyper-V Manager
   2. By default, the number of processors is set to 1. If your hardware supports multiple processors, increate the number of processors to the maximum number allowed.
   3. Now start the VM
   4. Connect to the VM through the Hyper-V console and wait for the boot process to complete.
5. First, disable the requirement to change Administrator password and change computer name.
   1. Login with User name of Administrator and password of Pass@word1.
      1. The virtual machine may or may not prompt you to restart it after logging in the first time. If prompted, go ahead and restart the VM. At this point the operating system is making some internal virtual hardware changes and needs to reboot in order to apply them.
   2. After you log in, Windows Server displays the Initial Configuration Tasks window. Click the check box with the caption Do not show this window at logon and then click the Close button. After you close this window, Windows Server will display the Server Manager. If the Server Manager is not open, launch it from the Windows Start menu using Start > Administrative Tools > Server Manager.

   3. In this step you will configure the Administrator account so that its password does not expire. Inside the Configuration node of the Server Manager, navigate the Users folder inside the Local Users and Groups node (as shown in the following screenshot) and locate the local Administrator account. Right-click on the Administrator account and click Properties.

      Figure 3

      Propirties

   4. In the Administrator Properties dialog, unselect the option for User must change password at next logon and select the option for Password never expires.

      Figure 4

      Options For Password

   5. Now rename the computer name of the VM. In the Server Manager, navigate to the top-level node to display the Server Summary page. Click Change System Properties.

      Figure 5

      System Properties

   6. On the Computer Name tab of the System Properties dialog, click the Change button.

      Figure 6

      Properties Dialog

   7. Enter a new computer name of WingtipServer and click OK. Note there is no need to change the Workgroup because later you are going to create a new domain.

      Figure 7

      Computer Name/Domain Changes

   8. After changing the computer name you will be prompted to restart the VM. Choose OK to restart. After the VM has restarted, log in again using the same credentials as before.
6. Disable Windows Firewall and Enhanced Security Configuration

   1. In the Server Manager, navigate to the top-level node to display the Server Summary page. Inside the Security Information section locate the links for Go to Windows Firewall and Configure IE ECS.

      Figure 8

      Security Information

   2. Click on Configure IE ECS link. Disable Enhanced Security Configuration for both Administrators and Users and click OK.

      Figure 9

      Security Configuration

   3. Now click the Go to Windows Firewall link to display the page for the Windows Firewall. Click on the Windows Firewall Properties link at the bottom of the Overview section.

      Figure 10

      Windows Firewall Properties

   4. In the Domain Profile tab of the Windows Fire dialog, change the Firewall state property setting from On to Off. Click to Apply button to save your changes. Once you have turned off the firewall in the Domain Profile tab, go to the Private profile tab and the Public profile tab and follow the same steps to disable the firewall for these profiles as well. Click OK to dismiss the Windows Firewall dialog once you have turned off the firewall for all three profiles.

      Figure 11

      Domain Profile

7. Enable the Windows Server Features for the Desktop Experience and the PowerShell Integrated scripting environment.
   1. In Server Manager, choose Add Feature to bring up the Add Features Wizard dialog.

   2. Select the feature Desktop Experience.

      Figure 12

      Desktop Experience

   3. Note when you first click the checkbox for the Desktop Experience, the wizard will prompt you with the following dialog to add support for Ink and Handwriting Services. Click the Add Required Features button to continue.

      Figure 13

      Add Features Wizard

   4. Scroll down the list of features in the Add Features Wizard dialog and select the feature Windows PowerShell Integrated Scripting Environment (ISE).

      Figure 14

      Select Features

   5. Note when you first click the checkbox for the Windows PowerShell Integrated Scripting Environment (ISE), the wizard will prompt you with the following dialog to add support for .NET Framework 3.5.1 Features. Click the Add Required Features button to continue.

      Figure 15

      Add Features Wizard

   6. Now that you have selected these two features for installation, click the Next button on the Add Features Wizard dialog to continue with the install. The next screen you will ask you to Confirm Installation Selections. Click the Install button.

      Figure 16

      Confirm Installation Selections

   7. When you see the Installation Results screen, the Add Features Wizard informs you a computer restart is required. Click Close button to dismiss this dialog.

      Figure 17

      Installation Results

   8. The final dialog of the Add Features Wizard prompts you to restart the VM. Click Yes to begin the rebooting process.

      Figure 18

      Final Dialog

   9. After the VM has restarted, login again as Administrator with a password of Pass@word1. Once you login, the feature installation process for Desktop Experience will automatically continue and complete.
8. Configure the DisableLoopbackCheck registry setting (Microsoft KB #896861).

   1. Launch the Windows Registry Editor. To do this click Start, click Run, type regedit, and then click OK.

      Figure 19

      Windows Registry Editor

   2. In Registry Editor, locate and then click the following registry key:
      Note:

      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

   3. Right-click Lsa, point to New, and then click DWORD (32-bit) Value.

      Figure 20

      Registry Editor

   4. Type DisableLoopbackCheck, and then click Enter.
   5. Right-click DisableLoopbackCheck, and then click Modify.

   6. In the Value data textbox, type 1, and then click OK.

      Figure 21

      Value Data

   7. Quit Registry Editor.
9. Enabled Remote Desktop for your VM

   1. In the Server Manager, navigate to the top-level node to display the Server Summary page. Inside the Computer Information section, locate and click the link for Configure Remote Desktop. In the Remote tab of the System Properties dialog, select the last option for Allow connections only from computers runningRemote Desktop with Network Level Authentication. Click OK to save changes and dismiss the System Properties dialog.

      Figure 22

      System Properties

   2. Now you should be able to connect through an RDP session. Many people prefer an RDP connection instead of the Hyper-V console. If you want to connect to this VM through an RPD connection, bring up a command prompt and run the ipconfig command to determine the IP address that has been assigned to your VM. Now you should be able to connect to your VM using RDP from another computer by using this IP address.