Chapter 8 Flashcards
What is Active Directory?
Active Directory is a centralized database used to store information about users, groups, workstations, and security information for a network.
What are the benefits of Active Directory?
Benefits include centralized administration of resources and security, single sign-on for users, and easy resource location like files and printers.
What is the basic unit of administration in Active Directory?
The basic unit of administration in Active Directory is the domain.
What is a domain?
A domain is a collection of network resources managed as a unit, sharing a common directory database and security policies.
How are domains identified?
Domains are identified using DNS names, which can be either a common name or a distinguished name that includes the top-level domain.
What is an organizational unit (OU)?
An OU is a container object used to subdivide and organize network resources within a domain.
What are built-in containers?
Built-in containers are similar to OUs but are created by default and have limited editable properties.
What types of objects are represented in Active Directory?
Common objects include users, groups, and computers.
What are attributes in Active Directory?
Attributes provide information about objects, such as a user’s name and email address.
How does Active Directory use DNS?
Active Directory uses DNS to locate and name objects.
What is a domain controller?
A domain controller is a Windows server that holds a copy of the Active Directory database.
What is replication in Active Directory?
Replication ensures changes to the database are copied to all domain controllers in the domain.
What are Group Policies?
Group policies enable administrators to apply sets of configuration settings to users or computers within a domain.
What are Group Policy Objects (GPOs)?
GPOs are collections of policy settings that can be applied to OUs or domains.
How do GPOs affect OUs and domains?
GPOs applied to an OU affect objects in that OU and its sub-OUs; GPOs applied to a domain affect all objects within the domain.
Where are local GPOs stored?
Local GPOs are stored on individual machines, primarily those not part of a domain.
What is the order in which GPOs are applied?
- Local Group Policy on the computer
- GPOs linked to the domain
- GPOs linked to OUs (from highest to lowest level)
What are the possible settings within a GPO?
- Not Configured: GPO doesn’t define a value, leaving the current setting unchanged.
- Enabled: GPO sets a value to be enforced.
How are settings combined when multiple GPOs apply to an object?
Their settings are combined to form the effective Group Policy.
What happens when GPOs configure a setting?
The setting in the last applied GPO is used.
What are the two main categories of GPO settings?
- Computer Configuration
- User Configuration
What are Account Policies in GPOs?
Controls settings like password complexity and account lockout, only applicable when configured in a domain-linked GPO.
What does Local Policies/Audit Policy configure?
Configures auditing for events like logons and account management, enabling tracking of security-related activities.
What is defined by Local Policies/User Rights Assignment?
Defines who can perform system maintenance tasks like accessing the computer remotely.
What do Local Policies/Security Options enable or disable?
Security rights for all users the policy applies to, like requiring Ctrl+Alt+Delete for logon.
What does the Registry setting in GPOs configure?
Configures registry keys and values.
What does the File System setting in GPOs do?
Sets file and folder permissions.
What are Software Restriction Policies?
Dictates which software can run on a computer.
What do Administrative Templates offer?
Registry-based settings to manage the computer and user experience.
What is the Group Policy Editor?
An MMC snap-in used to manage local computer and user configuration settings.
How can you launch the Group Policy Editor?
- Search menu
- Run command
- Settings app
- File Explorer
What does the command ‘gpedit.msc’ do?
Opens the Local Group Policy Editor.
What does the command ‘gpupdate’ do?
Forces the computer to update its group policy settings from the domain controller.
What does the command ‘gpresult’ display?
Displays the group policy objects applied to the computer and user.
What is the purpose of a user account?
Determines if and how a user can use a computer.
How does the logon process verify a user’s identity?
Using a username and password.
What do rights control in a user account?
Actions a user can perform, such as changing system settings.
What do permissions control in a user account?
Access to specific resources like files and folders.
What types of user accounts does Windows offer?
Windows offers different types of user accounts: built-in administrator account, user account with administrative privileges, standard account, guest account, and Microsoft account.
What is the built-in administrator account?
The built-in administrator account has full control over the computer but is hidden for security reasons.
What is a user account with administrative privileges?
A user account with administrative privileges is a regular account granted administrative rights.
What is a standard account?
A standard account is a basic account with limited rights.
What is a guest account?
A guest account has limited capabilities and is often disabled for security.
What is a Microsoft account?
A Microsoft account is an online account linked to Microsoft services.
How do groups simplify management in Windows?
Groups simplify management by allowing administrators to assign rights and permissions to multiple users simultaneously. All members of a group inherit the group’s permissions.
Where are users and groups stored in Windows?
Users and groups are stored in three main locations: local accounts, domain accounts, and online accounts.