E-corp Project

E-corp Documentation Overview

This repository contains the technical documentation for the IT infrastructure of a small fictional company named E-corp.

The primary purpose of this documentation is to provide a clear handbook and guidelines for future system administrators. The environment has been created with best practices in mind prioritizing security, scalability, and ease of management.

Design Philosophies

• Scalability & Isolation: Identity services (DC01) are separated from File/Print services (FS01) to prevent single points of failure, minimize the Domain Controller attack surface and allow for scaling.
• AGDLP Security Model: The Account > Global Group > Domain Local Group > Permission model was used. This ensures permissions are never assigned to individual users, keeping the environment clean and manageable as staff changes.
• Automated Management: Software deployment, drive mapping and printer installation are fully automated via Group Policy Objects (GPO). Eliminating the need for manual configuration on every single end device.

Test Credentials

The following accounts have been created to allow the external auditor to verify the configuration.

Default Password for all audit accounts: Ecorp@udit2025

Role	Username	Department
CEO	auditceo	Management
Sales Staff	auditsalesstaff	Sales
Head of RnD	auditrndhead	Research and Development
RnD Staff	auditrndstaff	Research and Development - Fidget Spitters

Table of Contents

• 0. Table of Contents
• 1. Installation & Architecture
  • Hardware specifications
  • Installation
  • Storage Layout
  • Server Layout
  • Networking
    • General overview
    • DC01
    • FS01
    • DHCP
    • DNS
• 2. Naming Conventions
  • Philosophy
  • Organizational Units (OU)
    • Department Naming
    • Directory Structure
  • Users
  • Groups
    • Global Groups (GG)
    • Domain Local Groups (DL)
  • Group Policy Objects (GPO)
  • Devices
    • Servers
    • Computers
    • Printers
• 3. Active Directory
  • OU Structure
• 4. AGDLP Security Model
  • Philosophy
  • Implementation Example: Sales Printer
  • Practical example
  • Implementation Example: Department Share
  • Practical example: Sales share
• 5. Storage & File Sharing
  • Root Structure
  • Security Features
  • Directory Structure
  • File Shares & AGDLP
• 6. Printers
  • Overview
  • AGDLP Configuration
• 7. Group Policy Configuration
  • GPO Summary Table
• 08. Backup Shedules
  • Windows Server Backup