Study your flashcards anywhere!

Download the official Cram app for free >

  • Shuffle
    Toggle On
    Toggle Off
  • Alphabetize
    Toggle On
    Toggle Off
  • Front First
    Toggle On
    Toggle Off
  • Both Sides
    Toggle On
    Toggle Off
  • Read
    Toggle On
    Toggle Off
Reading...
Front

How to study your flashcards.

Right/Left arrow keys: Navigate between flashcards.right arrow keyleft arrow key

Up/Down arrow keys: Flip the card between the front and back.down keyup key

H key: Show hint (3rd side).h key

A key: Read text to speech.a key

image

Play button

image

Play button

image

Progress

1/92

Click to flip

92 Cards in this Set

  • Front
  • Back
Which group in the Users container consolidates all workstation and member server accounts in the domain?
Domain Computers
Which primary group type allows you to send e-mail messages to a collection of users, but cannot be listed in discretionary access control lists(DACLs)?
distribution groups
In Windows 2000 mixed functional level, which domain objects can have global groups as members?
domain local groups
Which group policy setting in Windows Server 2003 determines if the changes a user makes to their roaming profile are merged with the server copy of their profile?
Prevent Roaming Profile changes from propagating to the server
Which file contains configuration information for a specific user, such as desktop settings, persistent network connections, and application settings that Windows uses to configure the desktop each time a user logs on?
user profile (Ntuser.dat)
Which users are authorized by default to reset domain user passwords?
domain administrators
account operators (on user accounts they create)
Which new command-line tool in Windows Server 2003 can be used to manually reset computer accounts in Active Directory?
Directory Service tool (dsmod computer (computerDN) -reset)
Which new feature in Windows Server 2003 allows users to create customized Active Directory searches and save these queries for future use?
Saved Queries in Active Directory Users and Computers
Which group in the Builtin container was created to provide backwards-compatibility and is used to provide its members with read access on all users and groups in the domain?
Pre-Windows 2000 Compatible Acces
You want to create a pre-configured user profile. You log on using a new account, customize the desktop, and install applications to configure this user's profile as the user profile template. How do you use this user profile to create a domain-wide preconfigured user profile?
Log on using a domain Administrator account and open User Profiles Settings in System Properties.
Press Copy To and enter the path to NETLOGON\Default User on the domain controller.
Which group in the Users container is used to provide its members with the ability to modify the Active Directory schema?
Schema Admins
You have created a universal group in a Windows Server 2003 mode domain. How can the scope of a global group be changed to domain local?
It must be first be changed to a universal scope. You cannot change a global group directly to a domain local group.
Which method of authentication should be used in situations that include Internet access, remote access to corporate resources, external business partner communications, or computers that do not run the Kerberos V5 security protocol?
public key certificate
Which group in the Users container is used to provide its members, typically DNS clients, with the ability to perform dynamic DNS updates on behalf of the DNS record owner(typically the DHCP server)?
DNSUpdateProxy
Which authentication protocol included in Windows Server 2003 provides one-way encrypted password and mutual authentication and is supported by Windows NT 4.0?
MS-CHAP v2
Which three group scopes are supported by both security groups and distribution groups?
domain local
global
universal
Which two primary group types are available in Active Directory?
security groups
distribution groups
In which two ways has the ability to delete and copy User Profile configurations changed in Windows Server 2003?
The Copy To and Delete buttons are unavailable for the profile belonging to the currently logged on user.
The Copy To and Delete buttons are unavailable for any user whose profile is in use.
Which primary group type allows you to assign user rights and permissions to groups of users and computers?
security groups
How do you copy a user profile to a new server location in Windows Server 2003?
Select the Advanced tab in System Properties and open User Profiles Settings. Choose the user profile, click Copy To, and define the location for the new profile.
Which users are authorized by default to reset local user passwords?
local administrators
power users (on users accounts they create)
Which group in the Builtin container is used to provide its members with the ability to create, modify, or delete accounts for users, groups, and computers located in the Users or Computers containers and organizational units(OU) in the domain(except the Domain Controller OU)?
Account Operators
Where can you view a list of members for a particular group?
From the Members tab of the group's Properties page.
Which new command-line tool in Windows Server 2003 can be used to manually create new groups?
Directory Service tool (dsadd group)
Which system group includes as members all current network users, including guests and users from other domains?
Everyone
Which new command-line tool in Windows Server 2003 can be used to manually create new user accounts?
Directory Service tool (dsadd user)
What is the scope of a universal group in Windows 2003?
Universal groups are available only in Windows 2000 native or Windows Server 2003 domain functional level and are visible within all domains in the forest.
Which group in the Users container is used with the ability to publish certificates for users and computers?
Cert Publisher
In Windows 2000 mixed functional level, which domain objects can be members of universal groups?
Universal groups are not available in Windows 2000 mixed mode functional level.
Which group in the Users container is used to consolidate all worker processes in the Microsoft Internet Information Services 6.0?
IIS_WPG
Which group in the Users container is used to consolidate all domain controllers in the domain?
Domain Controllers
Which new command-line tool in Windows Server 2003 can be used to manually find computers in Active Directory?
Directory Service tool (dsquery computer)
When configuring roaming user profiles, what are the best practices concerning Offline Folder caching?
You should not use Offline Folder caching on roaming user profile shared directories, which can cause synchronization problems.
After a failure, you restore a workstation from backup. Afterwards, the computer is unable to authenticate to the domain. You suspect that the computer account password was changed after the backup set was made. What should you do?
Reset the computer account.
How are encrypted files treated within the roaming user profile in Windows Server 2003?
The use of encrypted files within the roaming user profile is not supported. The Encrypted File System(EFS) is not compatible with roaming user profiles.
By default, how many computers can be added to the domain by non-administrative Active Directory users?
ten
Which group in the Users container is used to consolidate and provide access for temporary users in the domain?
Domain Guests
Where can User Profile configuration settings be accessed in the Windows Server 2003 family of products?
User profiles are now located on the Advanced tab of the System Properties dialog box.
Which group in the Users container is used to provide its members with the ability to access the remote access properties of users?
RAS and IAS Servers
In Windows 2000 native mode, which domain objects can have domain local groups as members?
domain local groups from the same domain
Which three group memberships will provide users with the permissions necessary to reset computer accounts?
Account Operators
Domain Admins
Enterprise Admins
What administrative action will allow a user to log on using their domain account once they have forgotten their password?
Reset Password
You have created a universal group in a Windows Server 2003 mode domain. Which modification(s) can be made to the group scope?
A universal group can be changed to a global group if it does not have another universal group as a member. A universal group can be changed to a domain local group without restriction.
You want to create a pre-configured user profile. You log on using a new account, customize the desktop, and install applications to configure this user's profile as the user profile template. How do you use this user profile to create a default profile for the local computer only?
Log on as a local Administrator and open User Profiles Settings in System Properties.
Press Copy To and enter the path to the systemroot\Documents and Settings\Default User folder.
In which two ways is membership in system groups different from membership in other security groups?
System groups represent different users at different times.
While permissions can be granted to system groups, membership cannot be modified or viewed by administrators.
Which system group represents all users currently accessing a given resource by logging on locally to the computer where the resource is located, as opposed to accessing the resource from over the network?
Interactive
What is the scope of a global group in Windows 2003?
Global groups are visible within its domain, all domains in the forest, and all trusted domains.
In Windows 2000 mixed functional level, which domain objects can be members of domain local groups?
user accounts and global groups from any domain
Which three group memberships provide the authority to create new groups in the domain?
Account Operators
Domain Admins
Enterprise Admins
What happens to the rights and permissions assigned to a universal group when the group is moved?
The rights and permissions are lost.
In Windows 2000 native mode, which domain objects can have universal groups as members?
domain local groups and universal groups in any domain
Your administrative user account is a member of Domain Admins. However, you typically log on using a standard user account for security reasons. How can you perform administrative duties without logging on with your administrative credentials?
By using the Runas command.
Which permissions are required to configure a roaming user profile in Windows Server 2003?
You must be a member of the Account Operators group, Domain Admins group, or the Enterprise Admins group in Active Directory, or you must have been delegated the appropriate authority.
Which group policy setting in Windows Server 2003 allows an administrator to choose the same behavior as Windows NT version 4.0, and permits the administrators groups to have full control of the user's profile directories?
Add the Administrator security group to roaming user profiles
Which Microsoft operating systems support the Kerberos V5 security protocol?
Windows 2000
Windows XP Professional
Windows Server 2003
Which group in the Users container contains any user account created in the domain?
Domain Users
You have to reset the computer account for a computer in your domain in Active Directory Users and Computers. What must occur before this computer can be used by domain users to log onto the domain?
The computer must be rejoined to the domain.
What are the two primary differences between a local group and a domain local group?
Local groups can only be granted permissions on local resources.
Domain local groups can be granted permissions on any resource in the domain.
Both can contain groups from the domain and from trusted domains, but domain local groups can contain other domain local groups.
Which administrative permissions are required to switch between a roaming and local user profile in Windows Server 2003?
Administrative credentials are not required to perform this operation.
In Windows 2000 native mode, which domain objects can be members of domain local groups?
user accounts, global groups, and universal groups from any domain in the forest; domain local groups from the same domain
Which type of group can be created on a client computer, member server, or stand-alone server and can only be used to provide access to resources on the computer where the group is created?
local group
In Windows 2000 native mode, which domain objects can be members of global groups?
user accounts and global groups from the same domain as the global group
How can a saved query be used on a Windows Server 2003 computer other than the computer where the query was created?
By copying or exporting the query to the new computer and importing the queries into Active Directory Users and Computers on these systems.
Where can you view a listing of all groups to which a group or user has membership?
From the Member of tab of the group or user's account Properties page.
In Windows 2000 mixed functional level, which domain objects can have domain local groups as members?
Domain local groups cannot be members of other groups in Windows 2000 mixed mode domain functional level.
You are considering resetting a password on a user account. What access issues can be created by this action?
Access to e-mail encrypted with the user's public key will be lost.
Internet passwords saved on that computer will be lost.
Access to files encrypted with EFS will be lost.
Which group in the Users container is used to provide its members with access to the DNS Server service?
DnsAdmins
Where is user profile behavior for multiple users and computers defined and controlled in Windows Server 2003?
In the User Profiles node in Windows 2003 Group Policy.
Which built-in Windows Server 2003 account is used to control access to signed scripts that are accessible from within Help and Support Services?
Support_388945a0
Which term refers to the practice of adding a group as a member of another group for the purpose of consolidating group management, reducing the effects of replication, or to increase the number of accounts affected by a single action?
nesting
In Windows 2000 native mode, which domain objects can be members of universal groups?
user accounts, global groups, and universal groups from any domain in the forest
By default, which scope is assigned to all newly-created group objects?
global scope
Which group in the Builtin container is used to provide its members with the ability to logon interactively, create and delete shared resources, start and stop some services, back up and restore files, format the hard disk, and shut down the computer?
Server Operator
Which group policy setting in Windows Server 2003 determines whether roaming user profiles are available on a particular computer?
Only allow local user profiles
Which authentication technology is used by default in Windows Server 2003 environments?
Kerberos V5
Which system group represents all users currently accessing a given resource over the network, as opposed to accessing the resource by logging on locally to the computer where the resource is located?
Network
In Windows 2000 mixed functional level, which domain objects can be members of global groups?
user accounts from the same domain as the global group
Which group in the Users container is used to provide its members with full control over all domains in the forest?
Enterprise Admins
Which domain functional level is required to convert a group from a security group to a distribution group, or a distribution group to a security group?
Windows 2000 native or Windows Server 2003
Which built-in Windows Server 2003 account is only created when Remote Assistance is requested and is removed when no Remote Assistance requests are pending?
HelpAssistant
What is the scope of a domain local group in Windows 2003?
Domain local groups are only visible within the domains in which the group resides.
In Windows 2000 native mode, which domain objects can have global groups as members?
universal and domain local groups in any domain,
global groups in the same domain as the global group
Which term describes the practice of adding a computer to the domain using a previously-created computer account?
pre-staging
Which command will launch Active Directory Users and Computers from the command line?
Dsa.msc
Which four Windows Server 2003 groups are considered system groups?
Anonymous Logon
Everyone
Network
Interactive
You have created a global group in a Windows 2000 native mode domain. Which modification(s) can be made to the group scope?
If the global group is not a member of another global group and resides in a Windows 2000 native mode or Windows Server 2003 domain, it can be changed to a universal group.
Which group in the Builtin container is used to provide its members with the ability to create one-way, incoming forest trusts to the forest root domain?
Incoming Forest Trust Builders
Which system group is used to provide its members, which are typically users and services, with access to the network without the use of usernames, passwords, and domain names?
Anonymous Logon
Which group in the Users container is used to provide its members with membership in the Administrator group on all domain controllers, all member servers, and all workstations in the domain?
Domain Admins
Which new command-line tool in Windows Server 2003 can be used to manually find users in Active Directory?
Directory Service tool(dsquery user)
Which group in the Users container is used to provide its members with the ability to create and modify group policy in the domain?
Group Policy Creator Owners
In Active Directory, where are newly-created computer accounts placed by default?
Computers container