Windows Server 2003 Users, Computers, and Groups Review

  • Print Article |
  • Send to a Friend |
  • |
  • Add to Google |

Users, Computers, and Groups Reviewwe:  We have discussed the many issues surrounding users and groups in a Windows Server 2003 environment. Now that you have completed this chapter, you should feel familiar with the following subjects:

 

  • Managing user profiles, both local and in a domain environment
  • Creating and managing computer accounts in an Active Directory environment
  • Creating and managing groups, through the GUI interface provided in Windows Server 2003, and through command prompt and scripting tools
  • Creating and managing user accounts, through the GUI interface and through command prompt and scripting tools
  • Troubleshooting computer account, user account and user authentication issues.
  • The final part of this chapter is a section with review questions that will help you in confirming your expertise in this subject area.

Review Questions
1. You suspect that a user's profile or their account might be corrupted. What actions can you take to figure out which is the case
A. Create a new user account and give it the same rights and group memberships or associations as the account that has the profile that you suspect may be damaged.
B. Copy the user settings in the suspect profile to the profile of the newly created user account. Click Start, point to Control Panel, and then click the System applet.
C. Create an administrative account and give it the same rights and group memberships or associations as the account that has the profile that you suspect may be damaged.
D. Click Advanced, and then under User Profiles, click Settings. Under Profiles stored on this computer, click the suspect user profile, and then click Copy To. In the Copy To dialog box, click Browse. Locate the drive:\Documents and Settings\user_profile folder, where drive is the drive where Windows is installed, and where user_profile is the name of the newly created user profile, and then click OK. Click OK, click Yes to overwrite the folder contents, and then click OK two times. Use the newly-created user account to log on.

2. How can you configure a user account so that it can be trusted for delegation in Windows Server 2003
A. Double-click the user that you want to configure.
B. Right-click the user that you want to configure, and then click Properties.
C. Click the Delegation tab, click Trust this user for delegation to any service (Kerberos only) , and then click OK.
D. In Active Directory Sites and Services, click Users.
E. In Active Directory Users and Computers, click Users. 

 

3. Which of the following options gives you the ability to log on even with a disabled local Administrator account on a 2003 Server
A. Run the Defragment Tool
B. Use Recovery Console
C. Start Windows 2003 in Safe Mode
D. Boot from a network card that is PXE compliant

4. Which of the following does a remote administrator have control over by using regedit
A. The number of persons who can be denied access
B. How frequently the failed attempts counter is reset
C. The number of failed attempts before future attempts are denied
D. The number of persons who can be allowed access

5. What are some of the requirements for installing Microsoft Group Policy Management Console
A. Either Windows Server 2003 or Windows XP Professional.
B. The QFE Q326469 hotfix, which updates your version of gpedit.dll to 5.1.2600.1186.
C. Windows Advanced Server 2003 and Windows XP Home with Service Pack 1 (SP1) and the Microsoft .NET Framework.
D. Either Windows Server 2003 or Windows XP Professional with Service Pack 1 (SP1) and the Microsoft .NET Framework.

6. Using the dsadd command, which of the following would create an account in the domain domain.com for John Smith with a password of password
A. dsadd user 'cn=jsmith,cn=users' -samid user -upn jsmith -fn john -ln smith -display 'user' -pwd password.
B. dsadd user 'dc=domain,dc=com' -samid user -upn domain.com -fn john -ln smith -display 'user' -pwd password.
C. dsadd user 'cn=jsmith,cn=users,dc=domain,dc=com' -samid user -upn jsmith@domain.com -fn john -ln smith -display 'user' -pwd password.
D. dsadd user 'cn=jsmith,cn=users,dc=domain,dc=com' -samid user -upn jsmith@domain.com -fn john -ln smith -display 'user' -pwd.

7. What steps are necessary in creating a shared mandatory profile to ensure company employees will have the same desktop
A. Create a temporary user account, configure it, and change the profile from NTUSER.DAT to NTUSER.MAN.
B. Add the path to the profile in the account.
C. Create a local user template.
D. Create a user template in Active Directory.
E. Create a temporary user account, configure it, and change the profile from NTUSER.DAT to NTUSER.MND.

8. Which of the following statements are true about group nesting
A. Group nesting isn't used to grant permissions to groups.
B. The domain involved has to be in native mode.
C. The domain involved has to be in mixed mode.
D. Group nesting is the placement of a group into another group. 

9. If you needed to only give a specific group remote access to a number of terminal servers, what would you do
A. Create a domain and move all the servers into it. Create a GPO and link it to the domain. Configure the GPO to allow the members in the group to log on locally.
B. Create a GPO and move all the servers into it. Create another GPO and link it to the GPO. Configure the GPO to allow the members in the group to log on locally.
C. Create an OU and move all the servers into it. Create a GPO and link it to the domain. Configure the GPO to allow the members in the group to log on locally.
D. Create an OU and move all the servers into it. Create a GPO and link it to the OU. Configure the GPO to allow the members in the group to log on locally.

10. You Windows Server 2003 has a disabled local Administrator account. After starting up in Safe Mode, what steps can you take to reactivate that Administrative account
A. Click Start, right-click My Computer, and then click Explore.
B. Expand Local Users and Groups, click Users, right-click Administrator in the right pane, and then click Properties.
C. Click to clear the Account is disabled check box, and then click OK.
D. Click Start, right-click My Computer, and then click Manage.
E. Expand Local Users and Groups, click Users, right-click Guest in the right pane, and then click Properties.

11. You have just finished editing the default domain policy for your domain, but you do not want this policy to apply to Administrators. What should you do to prevent this
A. Delete the user or group from the policy.
B. Add the user or group if you need to.
C. Click the administrators group (or other group or user) that you do not want the policy to apply to. In the Permissions windows, click to select the Deny check box for the Apply Group Policy permission.
D. Open Active Directory Users and Computers and right-click the name of the domain where the policy is applied, and then click Properties. Click the Group Policy tab and select the default domain policy. Click Properties, and then click the Security tab.
E. Open Active Directory Domains and Trusts and right-click the name of the domain where the policy is applied, and then click Properties. Click the Group Policy tab and select the default domain policy. Click Properties, and then click the Security tab.

12. What should you do if you want to install support tools on a 2003 domain controller
A. Right-click the Suptools.msi file in the Support\Tools folder, and then click Install.
B. Right-click the Suptools.mst file in the Support\Tools folder, and then click Open.
C. Right-click the Suptools.msc file in the Support\Tools folder, and then click Run.
D. Right-click the Suptools.asc file in the Tools folder, and then click Run. 

13. Which of the following is the proper way to format the netdom command if you are attempting to reset the password on a Windows 2003 domain controller named svr12 in a domain called tiger
A. netdom resetpswd /s:srv12 /ud:domain\User /pd:*
B. netdom resetpwd /s:srv12 /ud:tiger\User /pd:*
C. netdom resetpwd /s:Servertwelve /ud:tgr\User /pd:*
D. netdom resetpwd /s:server /ud:tiger\User /pd:*

14. When nesting global groups, where should they be placed to give them rights locally and avoid unnecessary overhead
A. In another global group
B. In a universal group
C. In a distribution group
D. In a domain local group

 15. If you run the command secedit/refreshpolicy user_policy/enforce on a domain controller, what will result
A. Password policy changes are enforced immediately for users in the domain
B. Password policy changes are enforced immediately for computers in the domain
C. Password policy changes are enforced after five minutes for users in the domain
D. Password policy changes are enforced after five minutes for computers in the domain

Jada Brock-Soldavini is author of book InsideScoop to Windows Server 2003 Certification Examination 70-290 Managing and Maintaining a Microsoft Windows ServerTM 2003 Environment. Jada works for the State of Georgia as a Network Services Administrator. She has co-authored or contributed to other numerous works pertaining to Microsoft Windows technologies. In her spare time she enjoys cooking, writing and reading anything that pertains to Network and Security technology. To buy my book, please visit www.totalrecallpress.com.

Article Rating (1.5 stars):
  • article full star
  • article no star
  • article no star
  • article no star
  • article no star
Rate this Article:
  • Article Word Count: 1456
  • |
  • Total Views: 4873
  • |
  • permalink
  • Print Article |
  • Send to a Friend |
  • |
  • Add to Google |
>