Cybersecurity Fundamentals (CCF1C03)
Windows 11 Security Part 1
Name: ____________________________ Class: ________
Objectives:
At the end of the lab session, you will learn on
• Create user and setting up passwords
• Creating groups and assigning permissions
• Encrypting full disk, file transfers, and networks
• Using anti-virus and anti-malware solutions
• Configuring firewall settings
It is recommended to watch each video first before attempting to do the task.
To access the lab video, you need to login to LinkedIn Learn via TP Library website.
https://www.tp.edu.sg/life-at-tp/tp-students-digital-access-it-matters/library/e-resources-by-
alphabetical-listing.html
1. Authentication and Accounts
Watch the video.
https://www.linkedin.com/learning/windows-11-security/overview-of-authentication-and-
accounts?autoplay=true&resume=false&u=76881922
Page 1 of 7
Note that there may be several ways to complete the task beside the one shown in the video,
alternatively you can also create a “TestUser” Local account as follow.
a. b.
Uncheck the highlighted check box
c. d. To set or reset the password.
Page 2 of 7
2. Authorization
2.1 Understanding Inheritance of permissions
Watch the video
https://www.linkedin.com/learning/windows-11-security/understanding-inheritance-of-
permissions?autoplay=true&resume=false&u=76881922
2.2 Disable permission inheritance
Create a new folder “SecuringWindows” in C: drive
Download and install the latest Notepad++ text editor. (Windows notepad may not be usable)
In the new folder, create a text file “TestDoc1” with the content “Hello World” using the text editor.
Right click TestDoc1.txt select Properties > Security > Advance. Disable inheritance for TestDoc1.txt
and remove all other accounts except the account “TestUser” is given Full control of the file.
If done correctly, the file properties should look as follow:
Page 3 of 7
2.3 Assigning permissions
Watch the video
https://www.linkedin.com/learning/windows-11-security/assigning-
permissions?autoplay=true&resume=false&u=76881922
Assign the account “student” with Full control permission to the file TestDoc1.txt
“TestUser” account should only have Write permission to this file.
If done correctly, the file properties should look as follow:
a. b.
Run the following in command prompt.
Are you able to open and read the file using notepad?
Page 4 of 7
2.4 Creating and using groups
Watch the video
https://www.linkedin.com/learning/windows-11-security/creating-and-using-
groups?autoplay=true&resume=false&u=76881922
Right click Window start bar and use Computer Management to add new group.
a. b.
a. Add “TestGroup” as a new group.
b. Assign “TestUser” to this new group.
Page 5 of 7
c. Grant “TestGroup” Full control to “TestDoc1.txt”
d. Remove all permissions of TestUser from TestDoc1.txt and Deny its read access to the file.
e. TestUser is a member of TestGroup which has Full control of the file.
a. b.
Try using notepad to read the file as TestUser.
Is TestUser able to read the file?
Page 6 of 7
3. Using Bit Locker
Watch the video and encrypt the drive using bit locker.
https://www.linkedin.com/learning/windows-11-security/using-bitlocker-in-windows-
11?autoplay=true&resume=false&u=76881922
Enable Bit Locker for E: drive where it is an additional 100M virtual disk added to the Win VM.
Open an Administrator Command Prompt shell.
Bit Lock E: drive using the following command “manage-bde”.
The command must be run using administrator command prompt, else it would fail.
To unlock the drive again, simply double click on locked drive in File Explorer and key in the
password.
3.1 Using EFS (Encrypted File System)
Watch the video and learn to encrypt “TestDoc1.txt” using EFS.
https://www.linkedin.com/learning/windows-11-security/using-encryption-file-system-in-windows-
11?autoplay=true&resume=false&u=76881922
Select “View > Large icon”. You should see a Lock icon on the file if done successfully.
a. Before EFS b. After EFS
END
Page 7 of 7
