The document describes the network infrastructure of The Brooklyn Circus and its partner Sir and Madame boutique. It outlines how Active Directory, a global catalog, DNS, DHCP, Kerberos transitive trusts, account lockout policies, and ACLs are configured across Windows Server 2008 domains in New York, Brooklyn, and San Francisco to centrally manage users, resources, security, and access across the organizations.

1. The Brooklyn Circus
Network
Designed By:
Jeremy Watkins
IT200
Ed Fisher
February 9, 2011

2. Background
 The Brooklyn Circus/BKc story
begins in 2006 in a quaint
neighborhood of Brooklyn, New
York with the aim to strengthen
consumers’ appreciation for
classic aesthetics and antique
motifs whilst upholding the pillars
of modern design within a 100
year plan. Founded by graphic
designer Ouigi Theodore and
developed by an arsenal of
visionaries fueled by a common
purpose, this bustling junction of
style and character is always an
experience. At the brink of the
establishments’ success the
business set up a sister site in
San Francisco, CA

3. Background con’t
 Sir & Madame is a men and
women’s boutique and lifestyle
brand located in Chicago. The
organization is founded by
husband and wife, Brian and
Autumn Merritt and they
developed a partnership with
the Brooklyn Circus owner to
sell his merchandise in their
boutique. They currently
manage and secure their data
on Windows Server 2008.

6. Bkc Active Directory
 Active Directory is a service
and stores information about
the Brooklyn Circus’ users, data
resources, and other services.
 Active Directory also let’s the
owners and administrators
access and manipulate those
resources.
 Active Directory is a way to
manage all elements of the BKC
network, including computers,
groups, users, domains,
security policies, and any type
of user-defined objects.

7. Bkc Global Catalog
 The Global Catalog is used to help
the Brooklyn Circus and Sir and
Madame locate resources. The
global catalog server also stores data
on every user account, printer, and
other essential software and
hardware.
 As seen in the design, the global
catalog will store a complete
replication of all Brooklyn Circus’
resources on the primary server and
a partial replication of each resource
on the other domains partition.
 Global Catalog will authenticate
users who log on, offer lookup and
access to resources in other
domains, maintain copies of
attributes on each resource, and
Active Directory elements.

8. Domain Name System (DNS)
 Active Directory is built around the
Domain Name System (DNS) and is
configured on Windows Server 2008
for all three domains.
 Active Directory will utilize DNS to
convert computer and domain host
names to a dotted decimal address
and vice versa through a process
known as Name Resolution.
 Name Resolution will assist the
employees of Brooklyn Circus and
Sir and Madame to request
information from the parent server.
 With Windows Server 2008
operating at the forest functional
level, it ensures new domains
created within the forest operate at
the forest functional level.

9. Dynamic Host Configuration Protocol (DHCP)
 The Dynamic Host Control Protocol (DHCP) will allow all
of the clients to share a smaller pool of IP addresses, if
only a fraction of those client’s needs to be connected to
the Internet at any given time.
 With DHCP configured, it ensures that the same IP is
given only to a specific machine every single time it
connects and alleviates the need for network
administrators to actually make configurations by hand.
 When a new system configured to use DHCP comes
online and requests configuration data, an IP address is
leased to that system and will last three days by default.

10. Dynamic host configuration protocol (dhcp)con’t
 On boot-up, a connecting client will
issue a request to the network for its
personal address assignment to the
DHCP application service. The
DHCP server ensures that uniquely-
generated, dynamically allocated IP
assignments are made to connecting
clients, along with the server settings
which may apply to the client
connection.
 DHCP automates not only the
assignment of IP addresses but also
subnet masks, default gateways, and
other lease-related parameters.

11. Kerberos Transitive Trust Relationship
 The root server in New York serves
as the trusting domain and
establishes a Kerberos Transitive
Trust Relationship with the domain
controller in San Francisco.
 A transitive trust is also set in place
between Sir and Madame and The
Brooklyn Circus. Employees will
have the ability to access
resources of the other domains
within the forest and each client
will have the advantage to access
Windows Sever 2008 through
customized user profiles.
 When the user logs on to their
accounts a local user profile will be
initiated automatically which they
use to receive and maintain
personalized settings.

12. Bkc Account Lockout Policy
 At the beginning of each session,
users will be required to enter their
passwords mandated by the
Account Lockout Policy.
 The Account Lockout Policy is
implemented to help protect an
account from intruder s by locking
it after five unsuccessful logon
attempts.
 With this arrangement, Brooklyn
Circus possesses the rights to
assign certain files and folders,
access privileges, management of
user accounts, and account setup
policies will be delegated to the Sir
and Madame organization
administrator on behalf of the
Brooklyn Circus.

13. Access Client Lists (ACLs)
 ACLs are listed privileges given to
user accounts or security groups
which will grant access to shared
resources.
 Access Control Lists (ACLs) are
assigned to the employees of
Brooklyn Circus and Sir and
Madame. All of the policies and
ACLs will replicate throughout the
network.
 The owner and server
administrator of Brooklyn Circus
are the only members assigned
Discretionary Access Client Lists
(DACLs) and System Control
Access Client Lists (SACLs) to
manage who can access the
company’s shared folders
containing personnel policies.