UNHCR Server

=Services=

File Sharing
In the D:/ drive
 * 1) Create folder called learner-files
 * 2) *Sharing > Permissions > allow Everyone full control
 * 3) *Security > Give allow Users full control
 * 4) Create folder called educator-files
 * 5) *Sharing > Permissions > allow Everyone full control
 * 6) *Security > Give allow Users full control
 * 7) *Security > Add > learner-group > Deny full control
 * 8) create folder called assignment-files
 * 9) *Sharing > Permissions > allow Everyone full control
 * 10) *Security > Give allow Users full control
 * 11) *Security > Add > learner-group > Advanced > Click on learner-group > Edit
 * 12) **Allowed - Traverse Folder/Execute File, List folders/Read Data, Read Attributes, Read Extended Attributes, Read Permissions
 * 13) **Deny - Create Files/Write Data, Create Folders/Append Data, Write Attributes, Write Extended Attributes, Delete Subfolders and Files, Change Permissions, Take Ownership

DHCP
=Settings=

Groups
Create group called learner-group

Users

 * 1) Administrator
 * 2) *add to Remote Desktop Users
 * 3) educator
 * 4) *set password
 * 5) *password never expires
 * 6) *user cannot change password
 * 7) learner
 * 8) *no password
 * 9) *password never expires
 * 10) *user cannot change password
 * 11) *add learner to the learner-group

RDP
This will allow 1 remote desktop session into the computer.
 * 1) Start > Right Click My Computer Properties > Remote Tab
 * 2) Check Enable Remote Desktop on this computer.
 * 3) Start > Administrative Tools > Computer Management >
 * 4) In Local Users and Groups > Users
 * 5) Right click Administrator > Properties
 * 6) Under Member of, add Remote Desktop Users.

Security

 * 1) Remove ability of educator and learner to log directly on to the server
 * 2) allow logon of blank passwords
 * 3) allow system to be shutdown without having to log on