MCSE Windows server 2003- P12

Chia sẻ: Thanh Cong | Ngày: | Loại File: PDF | Số trang:50

Thêm vào BST

Báo xấu

93
lượt xem 12
download

Download Vui lòng tải xuống để xem tài liệu đầy đủ

MCSE Windows server 2003- P12: Windows Server 2003 is, of course, more secure, more reliable, more available, and easier to administer than any previous version of Windows. Let’s take a close look at the platform and how it compares to Microsoft Windows 2000. This lesson provides a brief overview of the Windows Server 2003 family, focusing on the differences among the product editions: Web Edition, Standard Edition, Enterprise Edition, and Datacenter Edition.

Chủ đề:

Bình luận(0) Đăng nhập để gửi bình luận!

Lưu

Nội dung Text: MCSE Windows server 2003- P12

Objective 1.3 Optimize Server Disk Performance 14-27 4. Oksana is looking at a report generated by the disk defragmenter of her system. Her system contains two volumes. The first volume is 100 GB and is mirrored on a second 100 GB disk. The second volume is 400 GB and uses RAID-5 over five 100 GB disks. The report that Oksana is examining was an analysis performed on the second volume rather than the first. Oksana is puzzled because there seems to be several sections on the second volume that are colored green. Green in a defragmenter analysis represents unmovable files. Oksana is puzzled because she believed that the only files that were unmovable for the disk defragmenter are located on the system or boot volumes. What is the cause of the unmovable files listed on the defragmenter analysis of the second volume? (Select all that apply.) A. Oksana has mistakenly analyzed the first volume, which contains the boot and system files. B. The page file has been located on the second volume. C. Oksana has stored encrypted files on the second volume. D. Oksana has stored compressed files on the second volume. E. The NTFS change journal, stored on all NTFS volumes, is an unmovable file. 5. Oksana has scheduled a command-line disk defragmentation job to take place at 2 A.M. every Sunday on all Windows Server 2003 systems at her site. This represents a perfect time to perform such a task because the amount of activity on any of the servers at this time is minimal. Checking through the logs on a Monday morning, Oksana finds that the Sunday morning defragmentation did not occur on one of the volumes on one of the Windows Server 2003 servers. Oksana logs onto the server from a remote desktop connection and checks the Disk Defragmenter in the Computer Management Console. Oksana decides to wait until the end of business that day and try to run the defragmen tation process again on this volume. At 6:30 P.M. she logs on from the remote desktop again and attempts to initiate a defragmentation of the problematic volume. The pro cess fails again. What could be causing the failure, and which of the following steps should Oksana take to defragment this volume? A. The volume is failing to defragment because it is close to capacity. A volume must have at least 15 percent of space free for the defragmentation process to begin. B. The volume has been marked as dirty. Oksana needs to run Chkdsk from the com mand line before she can defragment the volume successfully. C. Oksana must take the volume offline manually to perform the defragmentation. Once this is done, the disk will defragment normally. D. Oksana needs to dismount the disk hosting the volume to perform a defragmen tation. Once this is done, the disk will defragment normally. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-28 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) 6. You are the systems administrator for several small businesses. One of the small busi nesses that you work for has reported that the performance of its server appears to be degrading. The server is configured as follows: Volume Type File System Fault Tolerance Fragmentation Drive C Dynamic NTFS Mirrored 9% Drive D Basic NTFS None 13% Drive E Dynamic NTFS Striped 23% Drive F Dynamic NTFS RAID-5 32% Drive G Dynamic NTFS RAID-5 41% On which of the Windows Server 2003 system volumes will Windows recommend that you run the defragmenter? (Select all that apply.) A. Drive C B. Drive D C. Drive E D. Drive F E. Drive G Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.3 Optimize Server Disk Performance 14-29 Objective 1.3 Answers 1. Correct Answers: A, B, C, and E A. Correct: Disk mirroring provides no read/write benefit but does provide fault tolerance. B. Correct: RAID-5 must generate parity information while writing to the disks, something that disk striping (RAID-0) does not need to do. RAID-5 parity genera tion provides some latency, making this method slower than disk striping. C. Correct: Disk spanning has similar performance to a simple volume whereas disk striping is the quickest method of reading and writing to a volume. D. Incorrect: Disk spanning has similar performance to a simple volume, disk strip ing offers the best read/write performance. E. Correct: In disk striping, data can be written to or read from multiple disks mak ing up the volume at one time. In a simple volume, only one disk can be written to or read simultaneously. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-30 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) 2. Correct Answers: F A. Incorrect: Rooslan achieved all the goals of the first team. For the second team, he achieved the first and second goals. By choosing to mirror, rather than stripe, the third volume, he did not create a volume of 240 GB with the fastest read/write speed. The volume would have been 120 GB and would not have performed sig nificantly better than a simple volume. Rooslan achieved one goal of the third team. He achieved the first goal, but by using RAID-5 instead of striping, he failed to achieve the second. The second volume would have been 360 GB rather than 480 GB as specified, the equivalent of one drive lost in storing parity information. B. Incorrect: Rooslan achieved all the goals of the first team. For the second team, he achieved the first and second goals. By choosing to mirror, rather than stripe, the third volume, he did not create a volume of 240 GB with the fastest read/write speed. The volume would have been 120 GB and would not have performed sig nificantly better than a simple volume. Rooslan achieved one goal of the third team. He achieved the first goal, but by using RAID-5 instead of striping, he failed to achieve the second. The second volume would have been 360 GB rather than 480 GB as specified, the equivalent of one drive lost in storing parity information. C. Incorrect: Rooslan achieved all the goals of the first team. For the second team, he achieved the first and second goals. By choosing to mirror, rather than stripe, the third volume, he did not create a volume of 240 GB with the fastest read/write speed. The volume would have been 120 GB and would not have performed sig nificantly better than a simple volume. Rooslan achieved one goal of the third team. He achieved the first goal, but by using RAID-5 instead of striping, he failed to achieve the second. The second volume would have been 360 GB rather than 480 GB as specified, the equivalent of one drive lost in storing parity information. D. Incorrect: Rooslan achieved all the goals of the first team. For the second team, he achieved the first and second goals. By choosing to mirror, rather than stripe, the third volume, he did not create a volume of 240 GB with the fastest read/write speed. The volume would have been 120 GB and would not have performed sig nificantly better than a simple volume. Rooslan achieved one goal of the third team. He achieved the first goal, but by using RAID-5 instead of striping, he failed to achieve the second. The second volume would have been 360 GB rather than 480 GB as specified, the equivalent of one drive lost in storing parity information. E. Incorrect: Rooslan achieved all the goals of the first team. For the second team, he achieved the first and second goals. In choosing to mirror, rather than stripe, the third volume, he did not create a volume of 240 GB with the fastest read/write speed. The volume would have been 120 GB and would not have performed sig nificantly better than a simple volume. Rooslan achieved one goal of the third team. He achieved the first goal, but by using RAID-5 instead of striping, he failed to achieve the second. The second volume would have been 360 GB rather than 480 GB as specified, the equivalent of one drive lost in storing parity information. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.3 Optimize Server Disk Performance 14-31 F. Correct: Rooslan achieved all the goals of the first team. For the second team, he achieved the first and second goals. In choosing to mirror, rather than stripe, the third volume, he did not create a volume of 240 GB with the fastest read/write speed. The volume would have been 120 GB and would not have performed sig nificantly better than a simple volume. Rooslan achieved one goal of the third team. He achieved the first goal, but by using RAID-5 instead of striping, he failed to achieve the second. The second volume would have been 360 GB rather than 480 GB as specified, the equivalent of one drive lost in storing parity information. 3. Correct Answers: A, C, and D A. Correct: Disk 1 is a mirrored volume of a volume on Disk 0. No data will be lost if this disk fails. B. Incorrect: If disk 0 fails, data will be lost as any data that is not on the Datastore volume, such as the boot volume, is not protected. C. Correct: Disk 2 is part of a RAID-5 array, hence if disk 2 fails, parity information can be used to regenerate the data. D. Correct: Datastore is a mirrored volume compared to Archive on RAID-5, and RAID-5 is faster than RAID-1 (mirroring). E. Incorrect: Datastore is a mirrored volume compared to Archive on RAID-5. RAID-5 is faster than RAID-1 (mirroring). F. Incorrect: Disk 3 is also part of the RAID-5 array; therefore, if Disk 3 fails, data will not be lost. 4. Correct Answers: B and E A. Incorrect: The question states clearly that it is the second volume, so Oksana is not mistaken. B. Correct: Page files are unmovable files and therefore are reported in green by the disk defragmenter analyzer. Similarly, the NTFS change journal, on NTFS volumes, is also represented by the unmovable green. C. Incorrect: Encrypted and compressed files are not unmovable. D. Incorrect: Encrypted and compressed files are not unmovable. E. Correct: Page files are unmovable files and therefore are reported in green by the disk defragmenter analyzer. Similarly, the NTFS change journal, on NTFS volumes, is also represented by the unmovable green. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-32 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) 5. Correct Answers: B A. Incorrect: If a disk has less than 15 percent of space left, the defragmentation process will finish, but the disk will not be completely defragmented. B. Correct: Disk defragmentation will fail only when a disk has errors. If a disk has errors, it is classified as “dirty” by the operating system. The only way to change this state is to perform a Chkdsk operation on the disk and complete all required repairs. C. Incorrect: Disks cannot be defragmented if they are taken offline. D. Incorrect: Volumes cannot be defragmented if they are taken offline. 6. Correct Answers: B, C, D, and E A. Incorrect: This figure is below the 10% threshold, so Windows will not recom mend a defragmentation. B. Correct: This figure is above the 10% threshold, so Windows will recommend a defragmentation. C. Correct: This figure is above the 10% threshold, so Windows will recommend a defragmentation. D. Correct: This figure is above the 10% threshold, so Windows will recommend a defragmentation. E. Correct: This figure is above the 10% threshold, so Windows will recommend a defragmentation. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.4 Install and Configure Server Hardware Devices 14-33 Objective 1.4 Install and Configure Server Hardware Devices A signed driver is one that has a digital certificate attached from Microsoft that guaran tees that the driver has been tested on a wide variety of configurations and has been deemed reliable. Windows Server 2003 can be configured to look for this particular digital certificate and refuse to install drivers that have not met with Microsoft’s approval. An administrator may not wish to use only Microsoft-approved device drivers all the time. Administrators can override any signing settings by manually setting this option in the System Properties. The options include Block, Warn, and Ignore. Block disallows the installation of unsigned drivers, Warn allows the installation but produces a mes sage that must be approved notifying the administrator that the user is about to install unsigned drivers, and Ignore produces no warning and simply installs the drives regardless of whether they have been digitally signed. The resources that a hardware device uses can be configured in the Device Manager by selecting the device and, from the Action menu, selecting Properties. Newly installed hardware can sometimes conflict with other hardware on the system and these con flicts can best be resolved by adjusting resources such as I/O range and IRQ. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-34 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) Objective 1.4 Questions 1. Oksana has recently replaced Rooslan as the systems administrator of six Windows Server 2003 systems. These six servers are stand-alone systems and not members of any domain. Several weeks into her tenure, Oksana receives the go-ahead to buy a Digital Audio Tape (DAT) backup drive for each of the Windows Server 2003 systems. At a prescheduled time she brings the servers down and installs the new hardware. When all the servers have been brought up, Oksana logs on to each and is confronted by the Add New Hardware Wizard. She begins the process of installing the software for the new hardware but finds that the process fails because the driver cannot be installed. Oksana then investigates the driver signing setting in the System Properties. The driver signing option is set to Block with the other options dimmed. Although the drivers have not been digitally signed by Microsoft, Oksana has decided that she wants to use them and that they will pose no problems to the stability of the servers that she administers. Which of the following actions can Oksana take to allow the installation of unsigned drivers on all six of these Windows Server 2003 systems? (Select all that apply.) A. Oksana should reconfigure the domain GPO and set the Unsigned Driver Installa tion Behavior policy to Warn But Allow Installation. B. Oksana should reconfigure the local GPO and set the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. C. Oksana should check the Administrator Option / Make This Action The System Default check box in the Driver Signing Options dialog box, accessible from the System Properties. This will enable her to switch the option from Block to Warn. D. Oksana should reconfigure the GPO assigned to the site that the servers are set up in and set the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. E. Oksana should reconfigure the GPO applied to the OU that the servers are mem bers of and set the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.4 Install and Configure Server Hardware Devices 14-35 2. You are a systems administrator at a medium-sized organization. You maintain a test lab of five Windows Server 2003 systems that are all members of your organization’s single domain. Because the organization has had trouble in the past with some users with sufficient privileges installing unsigned drivers on the system the default domain GPO has been configured to block the installation of all unsigned drivers on computers that are members of the domain. The domain GPO also blocks access for all users to the System Properties and hides all icons on the desktop. Until recently this was unproblematic; however you have just received a new batch of high-performance net- work cards that you wish to test on your lab servers. These high performance network cards ship with drivers that have not been digitally signed by Microsoft. Because you cannot access the System Properties you cannot override the default domain GPO set ting that blocks the installation of unsigned drivers. Which of the following methods allows you to override the default domain GPO and change the setting on your lab servers to Warn but not change the overall setting for other computers in your domain? A. Edit the local GPO on each server and set the Unsigned Driver Installation Behav ior policy to Warn But Allow Installation. B. Edit the GPO applied to the site in which the servers in your lab reside and set the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. C. Create a new organizational unit called Mylab. Move the computer accounts for the Windows Server 2003 systems in to the Mylab OU. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Warn But Allow Installation and apply it to the Mylab OU. D. Edit the Domain GPO and set the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. E. Create a group and put your user account in this group. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Warn But Allow Installation and apply this GPO to the newly created group. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-36 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) 3. You are the part-time systems administrator for a small desktop publishing business. There is a Windows Server 2003 stand alone at your office. You have recently come into possession of a legacy fax board, a device that allows multiple faxes to be sent and received at the same time. You install the board on the Windows Server 2003 system but discover that it does not work. You examine the Device Manager and notice that a yellow warning with a black exclamation mark sits beside the fax board icon. You sus pect that there is an IRQ conflict with another device on this same system, a legacy RAID controller. Which of the following describes the correct method of altering the fax board’s configuration so that there is no IRQ conflict between the legacy fax board and the legacy RAID controller? A. Select the RAID controller in the Device Manager. From the Action menu, select Properties. Select the Resources Tab, and then clear the Use Automatic Settings check box. Select the IRQ and click Change Settings. Scroll through the IRQs until you find one that does not conflict with any others. Click OK and then restart the server. B. Select the fax board in the Device Manager. From the Action menu, select Properties. Select the Resources tab, and then clear the Use Automatic Settings check box. Select the IRQ and click Change Settings Scroll through the IRQs until you find one that does not conflict with any others. Click OK and then restart the server. C. Select the RAID controller in the Device Manager. From the Action menu, select Properties. Select the Resources tab, and then clear the Use Automatic Settings check box. Select the I/O Range and click Change Settings button. Scroll through the I/O Range until you find one that does not conflict with any others. Click OK and then restart the server. D. Select the fax board in the Device Manager. From the Action menu, select Proper- ties. Select the Resources tab, and then clear the Use Automatic Settings check box. Select the I/O Range and click Change Settings. Scroll through the I/O Range until you find one that does not conflict with any others. Click OK and then restart the server. E. Select the RAID controller in the Device Manager. From the Action menu, select Properties. In the Device Usage drop-down list on the General tab, select Do Not Use This Device (Disable). F. Select the fax board in the Device Manager. From the Action menu, select Proper- ties. In the Device Usage drop-down list on the General tab, select Do Not Use This Device (Disable). Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.4 Install and Configure Server Hardware Devices 14-37 4. You have recently installed three legacy network cards on a Windows Server 2003 member server. Two of the network cards are working properly, but a third appears to be conflicting with another device on your system. How can you determine which other device on the system is conflicting with the third network card? A. Run the Device Manager and look for another device with a yellow and black exclamation mark beside it. B. View the application log and look for an entry that describes the device with which the network card conflicts. C. Run the Device Manager and select the network card that has the yellow and black exclamation mark beside it. From the Action menu, select Properties. On the Resources tab, clear the Use Automatic Settings check box. A conflicting device list will be displayed with the resources that conflict. D. Run the Hardware Troubleshooting Wizard and select Resolve All Device Conflicts. E. Run the Hardware Troubleshooting Wizard and select Report On All Device Conflicts. 5. You would like to view a list of devices connected to your Windows Server 2003 sys tem listed numerically by IRQ. Which of the following methods could you use to do this? (Select all that apply.) A. Use the Device Manager and from the View menu, select Resources By Connection. B. Use the Device Manager and from the View menu, select Resources By Type. C. Use the Device Manager and from the View menu, select Devices By Connection D. Use the Device Manager and, from the View menu, select Devices By Type. E. This cannot be done. 6. You have two modems connected to a Windows Server 2003 system that are used to create a multilink connection to a remote site using on-demand routing. You have found that the line quality to the remote site is not particularly high and you want to modify the port speed of both modems. Which of the following administrative tools would you use to do this? A. Use the Device Manager to find the modems and select their properties. B. Use the Phone And Modem Options in Control Panel to adjust the modem speeds. C. Use the Routing And Remote Access console to adjust the modem speed. D. Right-click on My Network Places and select Properties. Edit the properties of the multilink connection to the remote site and reduce the connection speed. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-38 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) 7. You are the systems administrator for a small agricultural college. One of the problems that you have encountered is students installing different devices on their Windows XP Professional workstations in their dormitory rooms. The college allows only Windows XP Professional workstations that it has leased to the students to join the dormitory net- work. This allows administration to restrict the students from engaging in undesirable activities such as peer-to-peer (P2P) file sharing. Your group within the college is responsible for maintaining these workstations. After analyzing the amount of time that your group spends supporting the workstations, it has been found that 30 percent of the time goes to repairing faults caused by the instal lation of unsigned device drivers. You would like to prevent unsigned device drivers from being installed on the dormitory room workstations. Which of the following methods will achieve this goal without altering the settings on any other computers within the domain? A. Move all computer accounts for dormitory room workstations into a newly created organizational unit named Dormwkstn. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. Apply this GPO to the Dormwkstn OU. B. Create a group named Dormwkstn and add all computer accounts for dormitory room workstations to this group. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. Apply this GPO to the Dormwkstn group. C. Create a group named Dormwkstn and add all dormitory room user accounts to this group. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Warn But Allow Installation. Apply this GPO to the Dormwkstn group. D. Move all computer accounts for dormitory room workstations into a newly created organizational unit named Dormwkstn. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Do Not Allow Installation. Apply this GPO to the Dormwkstn OU. E. Create a group named Dormwkstn and add all computer accounts for dormitory room workstations to this group. Create a GPO that sets the Unsigned Driver Installation Behavior policy to Do Not Allow Installation. Apply this GPO to the Dormwkstn group. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.4 Install and Configure Server Hardware Devices 14-39 Objective 1.4 Answers 1. Correct Answers: B and C A. Incorrect: All six of the Windows Server 2003 server systems are stand-alones and not members of any domain. Editing GPOs applied to any domain has no influence on these servers because they are not affected by external GPOs. B. Correct: The other options are dimmed because the Administrator Option / Make This Action The System Default check box is not selected. Selecting the check box means that any change is instantly reflected in the local GPO. The local GPO can also be edited without selecting this check box to obtain the same result. C. Correct: The other options are dimmed because the Administrator Option / Make This Action The System Default check box is not selected. Selecting the check box means that any change is instantly reflected in the local GPO. The local GPO can also be edited without selecting this check box to obtain the same result. D. Incorrect: All six of the Windows Server 2003 server systems are stand-alones and not members of any domain. Editing GPOs applied to any domain or site has no influence on these servers because they are not affected by external GPOs. E. Incorrect: All six of the Windows Server 2003 server systems are stand-alones and not members of any domain. Editing GPOs applied to any domain has no influence on these servers because they are not affected by external GPOs. 2. Correct Answers: C A. Incorrect: Local GPOs are overridden by Site, Domain, and Organizational Unit GPOs. Because the GPO in question is applied at the Domain level, it will have precedence over the Local GPO settings. B. Incorrect: Local GPOs are overridden by Site, Domain, and Organizational Unit GPOs. Because the GPO in question is applied at the Domain level it will have precedence over the Site GPO settings. C. Correct: By creating an OU and moving the specific computer accounts in the test environment into the OU, a group policy can be applied that will influence only these specific systems. As Group Policy applied at the OU level overrides that applied at the Site or Domain level, a policy applied to the OU level on driver signing will override the default domain GPO for computers that are members of this OU. D. Incorrect: This will change the settings for all computers in the domain, which was forbidden in the question setup. E. Incorrect: GPO cannot be applied directly to groups; GPO can apply only to Sites, Domains, Organizational Units, and Locally. Groups can be used to modify which users in a Site, Domain, or OU the GPO applies do. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
14-40 Chapter 14 Managing and Maintaining Physical and Logical Devices (1.0) 3. Correct Answers: B A. Incorrect: This alters the RAID controller configuration, not the fax board config uration. The question asked how the fax board configuration should be altered. B. Correct: The first thing to do is make sure that the IRQ, rather than the I/O on the fax board is adjusted. While the settings are adjusted, the dialog will display any other conflicts that might arise. Keep altering the IRQ setting until a free IRQ is found. There is no point stopping a conflict between a fax board and a RAID controller if it leads to a conflict between the fax board and another device. C. Incorrect: This answer configures the wrong hardware device and the wrong resource setting (I/O as opposed to IRQ). D. Incorrect: This answer configures the wrong resource setting (I/O as opposed to IRQ). E. Incorrect: This action merely disables the device; it does not resolve the conflict. Disabling the RAID controller will also not be helpful for maintaining a stable server. F. Incorrect: This action merely disables the device; it does not resolve the conflict. 4. Correct Answers: C A. Incorrect: Because the other device is working, it has taken precedence over the third network card. It will have no outward appearance of having any problems. B. Incorrect: If a conflict was logged, it would be logged in the system log rather than the application log. C. Correct: By examining the Resources tab on the Device Properties dialog box, you can generate a list of all devices that have resources that conflict with the par ticular device in which you are interested. From here you can decide also if you want to configure a device manually to use different resources or, if that is not possible, check the properties of the conflicting device to see if its resources can be changed. D. Incorrect: This option does not exist from the Hardware Troubleshooting Wizard. E. Incorrect: This option does not exist in the Hardware Troubleshooting Wizard. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Objective 1.4 Install and Configure Server Hardware Devices 14-41 5. Correct Answers: A and B A. Correct: A list of devices by IRQ can be generated by viewing resource by con nection or by type in Device Manager. To locate the IRQ number for a particular device in other views, the specific device properties must be viewed. B. Correct: A list of devices by IRQ can be generated by viewing resource by con nection or by type in Device Manager. To locate the IRQ number for a particular device in other views, the specific device properties must be viewed. C. Incorrect: This option does not sort by IRQ. D. Incorrect: This option does not sort by IRQ. E. Incorrect: A list of devices by IRQ can be generated by viewing resource by con nection or by type in Device Manager. To locate the IRQ number for a particular device in other views, the specific device properties must be viewed. 6. Correct Answers: B A. Incorrect: Modem port speeds cannot be adjusted using the Device Manager. B. Correct: Because the modem speeds need to be adjusted for several connections the best option is to edit the modem properties using Phone And Modem Options in Control Panel. C. Incorrect: The Routing And Remote Access MMC cannot be used to adjust the modem port speed. D. Incorrect: Network Connections (accessible through the My Network Places properties or Control Panel) cannot be used to adjust the modem port speed. 7. Correct Answers: D A. Incorrect: This option allows the installation of unsigned drivers rather than blocking it. B. Incorrect: GPOs cannot be applied to distribution or security groups. C. Incorrect: GPOs cannot be applied to distribution or security groups. D. Correct: GPOs can be applied to sites, domains, and organizational units. There is also a GPO that can be edited and applied locally. The policy must be set to Do Not Allow Installation. E. Incorrect: GPOs cannot be applied to distribution or security groups. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
15 Managing Users, Computers, and Groups (2.0) Users need access to resources on the network to do their daily work, but should not have access to unauthorized data. This access is gained by logging on to a computer that has access to the domain, and then being acknowledged as a member of assigned groups in the domain. Permissions to resources can only be set for users, groups, and computers that are recognized by the domain. Creation of these user, group, and computer accounts can be done manually through tools provided in the Microsoft Windows Server 2003 interface, or automated through command-line tools or scripts. The methods of creating user, group, and computer accounts are important to success on the exam. Related to the creation and management of user, group, and computer accounts are the granting of permissions appropriate to the level of access needed, and the manage ment of data related to the account, such as logon scripts and user profiles. Testing Skills and Suggested Practices The skills that you need to master the Managing Users, Computers, and Groups objec tive domain on Exam 70-290: Managing and Maintaining a Microsoft Window Server 2003 Environment include ■ Manage local, roaming, and mandatory user profiles. ❑ Practice 1: Configure a roaming profile for secure access. Set the permissions on an individual profile folder for that user. Make sure that no other users have access to the data, and that users can log on and use their profile data successfully. ❑ Practice 2: Change the configuration of the roaming profile to make it man datory. Groups of users sharing a profile should not be able to change it. To do this rename the shared profile from Ntuser.dat to Ntuser.man. Using a mandatory profile does not limit the ability of users who share the profile from creating, modifying, or deleting application data files within the profile folder structure. 15-1 Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
15-2 Chapter 15 Managing Users, Computers, and Groups (2.0) ■ Create and manage computer accounts in an active directory environment. ❑ Practice 1: Use the Active Directory User And Computers MMC to create two new computer accounts within the domain. ❑ Practice 2: Join a new Windows XP workstation to the Windows Server 2003 domain. Examine Active Directory Users And Computers and note that the new computer account is added to the directory. ■ Create and manage groups. ❑ Practice 1: Use manual methods to create user, group, and computer accounts. Use the Active Directory Users And Computers MMC snap-in, and the Directory Service command-line tools to create user, group, and computer accounts. Modify the properties of user accounts and test the effect of various property changes. Use the System Properties interface at a desktop computer to join computers to the domain. ❑ Practice 2: Use automated methods to create user, group, and computer accounts. ❑ Practice 3: Place users, groups, and computers as members of a group. Use both interface-based and command-line tools. ❑ Practice 4: Identify group membership in a complex group hierarchy. Use the Directory Service command-line tools to do bulk analysis. ■ Create and manage user accounts. ❑ Practice 1: Create four different user accounts using the Active Directory Users And Computers MMC. ❑ Practice 2: Create a single user account using the Active Directory Users and Computers MMC. Configure specific settings for the user’s logon hours and group membership. Create three similar accounts using the copy command. ■ Troubleshoot computer accounts. ❑ Practice 1: Create a computer account in the Active Directory Users and Com puters MMC. In the dialog box alter the group that can add the computer to the domain from the Domain Admins group to the Users group. ❑ Practice 2: In the Active Directory Users and Computers MMC locate a test Windows XP computer account that has recently been joined to the domain. Using the Action menu, Disable the computer account. Try to use this com puter to gain access to the domain. ■ Troubleshoot user accounts Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
Chapter 15 Managing Users, Computers, and Groups (2.0) 15-3 ❑ Practice 1: Modify the Default Domain GPO and alter the Account Lockout threshold to three attempts. Log on with incorrect credentials to a Windows Server 2003 domain with a normal user account until the account is locked. Use the Active Directory Users and Computers MMC to re-enable the account. ❑ Practice 2: Reset the password on a user account and configure the account to force the user to change their password to one of their own the next time that they log on. ■ Troubleshoot user authentication issues. ❑ Practice 1: Edit the default domain policy GPO to change the password poli cies. Configure the Account Lockout Threshold policy to three invalid logon attempts. Set the Account Lockout Duration policy to 30 minutes. ❑ Practice 2: Edit the default domain policy GPO to change the password poli cies. Set the Enforce Password History policy to 10 passwords. Set the Mini- mum Password Age policy to 2 days. Set the Minimum Password Length policy to 10 characters. Further Reading This section contains a list of supplemental readings divided by objective. If you feel you need additional preparation before taking the exam, study these sources thoroughly. Objective 2.1 Review Chapter 3, “User Accounts,” which focuses on the creation and management of user accounts and user profiles. Review Chapter 4, “Group Accounts,” which contains additional information on automated creation of groups, group type and scope, and nesting groups. Microsoft Corporation. Microsoft Windows Server 2003 Deployment Kit. Volume: Designing a Managed Environment. Redmond, Washington: Microsoft Press, 2003. This volume can be found on the Microsoft Web site at: http://www.microsoft.com /windowsserver2003/techinfo/reskit/deploykit.mspx. Objective 2.2 Review Chapter 5, “Computer Accounts,” which contains information about creating computer accounts through manual and automated means, various methods of joining the computer accounts to a domain, and resetting the pass- word on a computer account. Microsoft Corporation. Windows Server 2003 Help and Support Center. Review “Manage Computers.” Objective 2.3 Review Chapter 4, “Group Accounts,” which focuses on the creation and management of user accounts and user profiles. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.
15-4 Chapter 15 Managing Users, Computers, and Groups (2.0) Microsoft Corporation. Windows Server 2003 Help and Support Center: “Managing Domain Users and Groups: Using Groups.” Objective 2.4 Review Chapter 3, “User Accounts,” which focuses on the creation and management of user accounts and profiles. Microsoft Corporation. Windows Server 2003 Help and Support Center: Managing Domain Users and Groups: User and Computer Accounts. Objective 2.5 Review Chapter 5, “Computer Accounts,” which contains information about creating computer accounts through manual and automated means, various methods of joining the computer accounts to a domain, and resetting the pass- word on a computer account. Microsoft Corporation. Windows Server 2003 Knowledge Base article 325850: “How to Use netdom.exe to Reset Machine Account Passwords of a Windows Server 2003 Domain Controller.” Objective 2.6 Review Chapter 3, “User Accounts,” which describes some techniques for troubleshooting user of user accounts. Microsoft Corporation. Windows Server 2003 Help and Support Center: Managing Domain Users and Groups: User and Computer Accounts. Objective 2.7 Review Chapter 3, “User Accounts,” which focuses on the creation and management of user accounts and profiles. Microsoft Corporation. Windows Server 2003 Help and Support: Managing Domain Users and Groups: User and Computer Accounts. Please purchase PDF Split-Merge on www.verypdf.com to remove this watermark.