Windows Server 2008 Chapter 5

Front 1

What are the 2 main functions of user accounts in Active Directory?

Back 1

-Provide a method for user authentication to the network
-Provide detailed information about a user

Front 2

Where are user accounts stored, from windows machines that are not part of a domain?

Back 2

Security Accounts Manager (SAM) on the local machine

Front 3

User accounts created in AD are referred to as what?

Back 3

Domain user accounts

Front 4

Can Domain user accounts usually log onto any computer that's in the AD forest?

Back 4

Yes

Front 5

What is a collection of a user's personal files and settings that define his or her working environment?

Back 5

A user profile

Front 6

What type of profile is stored on the same system where the user logs on?

Back 6

A local profile

Front 7

What type of profile follows the user no matter which computer he logs on to?

Back 7

Roaming profile

Front 8

What are the 2 locations that a roaming profile is created from?

Back 8

-NETLOGON share
&
-Default profile on the local system

Front 9

In order to create a roaming profile you need to create a folder on the domain controller and name it what?

Back 9

Default User.V2

Front 10

.V2 extensions are created for roaming profiles in order to distinguish client OS's that are what?

Back 10

Pre-Vista

Front 11

When you don't want users to be able to change their profile or only have the ability to make temporary changes, what kind of profile should you create?

Back 11

Mandatory Profile

Front 12

Mandatory profiles are commonly used in what type of situations?

Back 12

Where multiple users share a single profile

Front 13

If the domain controller goes down, can a user with a mandatory profile logon to the computer? Why?

Back 13

Yes, because even though the system cannot retrieve the mandatory profile from the DC, it will be able to use a temporary profile.

Front 14

Can a user with a super mandatory profile logon when the mandatory profile is unavailable?

Back 14

No

Front 15

Many aspects of a user's profile can be managed by using what?

Back 15

Group Policies

Front 16

What is a cost of using roaming profiles?

Back 16

They can become bloated and cause latency

Front 17

How can you relieve some of the problems associated with roaming profiles?

Back 17

Folder redirection

Front 18

What are the 2 different types of groups?

Back 18

-Distribution group
&
-Security groups

Front 19

What type of group is used to group users together mainly for sending e-mails to several people at once with an application like Microsoft Exchange?

Back 19

Distribution group

Front 20

What type of group is the main active directory object administrators use to manage network resource access and grant rights to users?

Back 20

Security groups

Front 21

What determines the reach of a groups application in a domain or a forest, which security principals in a forest can be group members and to which forest resources a group can be assigned rights or permissions?

Back 21

Group Scope

Front 22

What are the 3 group scope options in a Windows Server 2008 forest?

Back 22

-Domain Local
-Global
-Universal

Front 23

How should members of a single domain environment be assigned access to resources in terms of group scope membership?

Back 23

-Accounts are made members of
-Global groups, which are made members of
-Domain Local groups, which are assigned
-Permissions

Front 24

How should members of a multidomain environment be assigned access to resources in terms of group scope membership?

Back 24

-Accounts are made members of
-Global groups, which when necessary are nested in
-Global groups, which are then made members of
-Universal groups, which are made members of
-Domain Local groups, which are assigned
-Permissions to resources

Front 25

Which group is the main security principal recommended for assigning rights and permissions to domain resources?

Back 25

Domain Local group

Front 26

Which group is used mainly to group users from the same domain with similar access or rights requirements?

Back 26

Global group

Front 27

Which group's membership information is stored only on domain controllers configured as global catalog servers and are the only type of group with a truly universal nature?

Back 27

Universal group

Front 28

Which group scales better and is easier to manage if dealing with an organization that has multiple departments needing access to a single resource?

Back 28

Global groups

Front 29

What group is created in the SAM database on a member server or workstation or stand alone computer?

Back 29

Local group

Front 30

All default groups in the built in folder are members of what?

Back 30

Domain Local group

Front 31

Domain local groups used for assigning what in the local domain?

Back 31

Rights and permissions

Front 32

When are computer accounts usually created?

Back 32

When a computer is joined to a domain

Front 33

What are the 2 programs that can bulk import or export active directory data?

Back 33

-CSVDE
-LDIFDE

Front 34

Which program can only create objects in AD?

Back 34

CSVDE

Front 35

Which program can create or modify objects in AD?

Back 35

LDIFDE

Front 36

Which program doesnot set passwords, so all user accounts are disabled until you create a password for each account?

Back 36

CSVDE

Front 37

Which program is commonly used to export users from one domain and import them into another domain?

Back 37

LDIFDE

Front 38

What are the 3 categories of user accounts in Windows?

Back 38

-Local
-Domain
-Built-in

Front 39

What file do you see in the root of a user's mandatory profile?

Back 39

Ntuser.man

Front 40

What commands can you use together to change attributes of several users at once?

Back 40

-DSQUERY
-DSMOD