Simulate real-world IT Analyst responsibilities by managing the full user lifecycle:
- Account creation (onboarding)
- Group assignment
- Password management
- Account lockout resolution
- Employee offboarding
JojaCorp hires employees across multiple departments. IT is responsible for:
- Creating accounts
- Assigning appropriate access
- Enforcing security policies
- Handling common Helpdesk requests
- Securely disabling accounts when employees leave
- Sarah Parker (sparker)
- Michael Reed (mreed)
- John Smith (jsmith)
- Emily Davis (edavis)
- Alex Chen (achen)
- David Lopez (dlopez)
All accounts were created in their respective departmental OU.
For each user:
-
Created account in department OU
-
Assigned temporary password
-
Enabled:
- User must change password at next logon
-
Added to the appropriate security group:
| Department | Group |
|---|---|
| HR | HR_File_Access |
| Sales | Sales_File_Access |
| IT | IT_Admins |
This follows the principle of least privilege using group-based access.
User reported inability to sign in.
Action:
- Reset password in ADUC
- Required password change at next logon
User account locked due to multiple failed login attempts.
Steps:
- Verified lockout in account properties
- Unlocked account
- Confirmed successful login on the domain workstation
Employee Emily Davis (Sales) left the company.
Steps:
- Disabled account
- Moved user to
_DisabledOU - Removed from security groups
This preserves audit history while preventing access.
- Successful domain login from PC01 using Sales user
- Password change enforced at first login
- Lockout and unlock process validated
- Active Directory user administration
- Department-based account provisioning
- Group-based access assignment
- Helpdesk troubleshooting workflows
- Account security and offboarding procedures
- Identity lifecycle management