MCTS - Net II - Chapter 5 Flashcards
In order to ensure no one uses public computer terminals after 5 pm, you’ve set the log on hours for the guest user accounts to deny log on after 5. However, you’ve noticed that users are still using terminals after 5 pm, while other users are denied the ability to log in. Why are some users denied log on while others are using terminals?
The user were logged on prior to 5
Employees in your office have recently been changing desktop wallpapers against company policy. You want to be able to lock down this ability, while preventing other profile changes as well. What is your best option?
Set up a mandatory profile
Select below a character that be used in an account name.
!
If the Unlock Account checkbox is selected under a user account’s Properties dialog box, what does this mean?
The user has too many failed logon attempts and is locked out
By default, a user’s profile is created…
When the user first logs on
Where are user profiles stored by default in Windows Server 2008?
%SYSTEMDRIVE%\Users
How do you change a profile into a mandatory profile?
Rename Ntuser.dat to Ntuser.man
What is a super mandatory profile?
A profile that requires a user’s mandatory profile be available or they will not be able to log on.
Which of the following is not a benefits of using roaming profiles?
Bandwidth usage
You have received a call from an employee about permissions on a shared folder, having found he can no longer access the resource. After checking the folder, you find that the group the employee is in part of the resource’s DACL, but seems to have no effect on the group’s permissions. The group’s permission entry is the only entry in the DACL. What is wrong?
The group has been converted from a security group to a distribution group
Can global groups be members of any global group in the forest?
No
What is Microsoft’s best practices recommendation for the structure of group scope nesting?
AGDLP
Where are the local groups stored?
In the local SAM database
A seasoned intern, Sally has been given a new assignment. She must be able to log on locally to DCs, manage some services, manage shared resources, backup and restore files, shutdown DCs, format hdds, and change the system time. In order to give her only the rights and permissions necessary to complete these tasks, what domain local group will you add her to?
Server operators
Which group matches the following descriptions: This universal group is found only on DCs in the forest root domain. Members have full control over forestwide operations. This group is a member of the Administrators group on all DCs.
Enterprise Admins
