Configure File and Print Services Flashcards
What does the following command do?
Manage-bde: status
Provides information about all drives on the computer, whether or not they are BitLocker-protected.
What does the following command do?
Manage-bde: on
Encrypts the drive and turns on BitLocker.
What does the following command do?
Manage-bde: off
Decrypts the drive and turns off BitLocker. All key protectors are removed when decryption is complete.
What does the following command do?
Manage-bde: pause
Pauses encryption or decryption.
What does the following command do?
Manage-bde: resume
Resumes encryption or decryption.
What does the following command do?
Manage-bde: lock
Prevents access to BitLocker-protected data.
What does the following command do?
Manage-bde: unlock
Allows access to BitLocker-protected data with a recovery password or a recovery key.
What does the following command do?
Manage-bde: autounlock
Manages automatic unlocking of data drives.
What does the following command do?
Manage-bde: protectors
Manages protection methods for the encryption key.
What does the following command do?
Manage-bde: tpm
Configures the computer’s Trusted Platform Module (TPM). This command is not supported on computers running Windows 8 or win8_server_2. To manage the TPM on these computers, use either the TPM Management MMC snap-in or the TPM Management cmdlets for Windows PowerShell.
What does the following command do?
Manage-bde: setidentifier
Sets the drive identifier field on the drive to the value specified in the Provide the unique identifiers for your organization Group Policy setting.
What does the following command do?
Manage-bde: ForceRecovery
Forces a BitLocker-protected drive into recovery mode on restart. This command deletes all TPM-related key protectors from the drive. When the computer restarts, only a recovery password or recovery key can be used to unlock the drive.
What does the following command do?
Manage-bde: changepassword
Modifies the password for a data drive.
What does the following command do?
Manage-bde: changepin
Modifies the PIN for an operating system drive.
What does the following command do?
Manage-bde: changekey
Modifies the startup key for an operating system drive.
What does the following command do?
Manage-bde: KeyPackage
Generates a key package for a drive.
What does the following command do?
Manage-bde: upgrade
Upgrades the BitLocker version.
What does the following command do?
Manage-bde: WipeFreeSpace
Wipes the free space on a drive.
What does the following command do?
Manage-bde:-? or /?
Displays brief Help at the command prompt.
What does the following command do?
Manage-bde: -help or -h
Displays complete Help at the command prompt.
What does the PowerShell CmdLet Do?
Add-BitLockerKeyProtector
Adds a key protector for a BitLocker volume.
What does the PowerShell CmdLet Do?
Backup-BitLockerKeyProtector
Saves a key protector for a BitLocker volume in AD DS.
What does the PowerShell CmdLet Do?
Clear-BitLockerAutoUnlock
Removes BitLocker automatic unlocking keys.
What does the PowerShell CmdLet Do?
Disable-BitLocker
Disables BitLocker Drive Encryption for a volume.
Note: This removes all key protectors and beings decrypting the content of the volume
What does the PowerShell CmdLet Do?
Disable-BitLockerAutoUnlock
Disables automatic unlocking for a BitLocker volume.
What does the PowerShell CmdLet Do?
Enable-BitLocker
Enables BitLocker Drive Encryption for a volume.
What does the PowerShell CmdLet Do?
Enable-BitLockerAutoUnlock
Enables automatic unlocking for a BitLocker volume.
Only supported on data volumes not the system drive
What does the PowerShell CmdLet Do?
Get-BitLockerVolume
Gets information about volumes that BitLocker can protect.
What does the PowerShell CmdLet Do?
Lock-BitLocker
Prevents access to encrypted data on a BitLocker volume.
What does the PowerShell CmdLet Do?
Remove-BitLockerKeyProtector
Removes a key protector for a BitLocker volume.
What does the PowerShell CmdLet Do?
Resume-BitLocker
Restores Bitlocker encryption for the specified volume.
What does the PowerShell CmdLet Do?
Suspend-BitLocker
Suspends Bitlocker encryption for the specified volume.
What does the PowerShell CmdLet Do?
Unlock-BitLocker
Restores access to data on a BitLocker volume.
How would you change the TPM owner password (owner authorization) on a computer running Windows Server 2012 R2? The data and computer system are proctected by BitLocker.
Via PowerShell and GUI
PS: Set-TpmOwnerAuth
or
GUI: Use the TPM Management MMC snap-in to change the password
How would you completely decrypt a drive protected by BitLocker?
Run either:
PS: Disable-BitLocker
or CMD: Manage-bde -off
How do you enable Network Unlock via GPO?
- WDS and Network Unlock must be installed
- WDS must have the Bitlocker Network Unlock Certificate Installed
- Configure the Group Policies
- Allow network unlock at startup
- BitLocker Drive Encryption Network Unlock Certificate - The certificate that you used for network unlock on WDS
Can you only have one Certificate for the Group Policy BitLocker Drive Encryption Network Unlock Certificate?
No you can add many certificates
What does the GPO Audit File Share do?
Auditing for attempts to access any Shared Folders
What does the GPO Audit detailed File Share do?
Audits all attemps to access files or folders on a shared folder. It logs an event every time a file or folder is accessed. Detailed File Share audit events include detailed information about the permissions or other criteria used to grant or deny access.
Note: There are no system access control lists (SACLs) for shared folders. If this policy setting is enabled, access to all shared files and folders on the system is audited.
What does the GPO Audit File System Global Object Access do?
This policy setting allows you to monitor a specific user or group and the files they access.
Note: You must also enable the Audit File System setting under Advanced Audit Policy Configuration\System Audit Policies\Object Access.
What does the GPO Audit File System do?
This policy setting allows you to audit user attempts to access file system objects. A security audit event is generated only for objects that have system access control lists (SACL) specified, and only if the type of access requested, such as Write, Read, or Modify and the account making the request match the settings in the SACL
DFS
What is the calculation used for determining how large your staging quota should be?
- Hub and Spoke
- IF Read/Write Members = 32 * (Average of 32 Largest files)
- IF Spoke are Read-Only = 16 * (Average of 16 largest files)
*
What does Dfsdiag SyncNow do?
Forces replication between DFS servers
What does the following PowerShell CmdLet Do?
Add-DfsrConnection
Creates a connection between members of a replication group.