Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint
Share this Page URL
Help

Chapter 15. Managing Users, Computers, a... > Testing Skills and Suggested Practic...

Testing Skills and Suggested Practices

The skills that you need to master the Managing Users, Computers, and Groups objective domain on Exam 70-290: Managing and Maintaining a Microsoft Windows Server 2003 Environment include

  • Manage local, roaming, and mandatory user profiles.

    • Practice 1: Configure a roaming profile for secure access. Set the permissions on an individual profile folder for that user. Make sure that no other users have access to the data and that users can log on and use their profile data successfully.

    • Practice 2: Change the configuration of the roaming profile to make it mandatory. Groups of users sharing a profile should not be able to change it. To do this, rename the shared profile from Ntuser.dat to Ntuser.man. Using a mandatory profile does not limit the ability of users who share the profile from creating, modifying, or deleting application data files within the profile folder structure.

  • Create and manage computer accounts in an Active Directory environment.

    • Practice 1: Use the Active Directory Users And Computers Microsoft Management Console (MMC) to create two new computer accounts within the domain.

    • Practice 2: Join a new Microsoft Windows XP workstation to the Windows Server 2003 domain. Examine Active Directory Users And Computers and note that the new computer account is added to the directory.

  • Create and manage groups.

    • Practice 1: Use manual methods to create user, group, and computer accounts. Use the Active Directory Users And Computers MMC snap-in and the Directory Service command-line tools to create user, group, and computer accounts. Modify the properties of user accounts and test the effect of various property changes. Use the System Properties interface at a desktop computer to join computers to the domain.

    • Practice 2: Use automated methods to create user, group, and computer accounts.

    • Practice 3: Place users, groups, and computers as members of a group. Use both interface-based and command-line tools.

    • Practice 4: Identify group membership in a complex group hierarchy. Use the Directory Service command-line tools to do bulk analysis.

  • Create and manage user accounts.

    • Practice 1: Create four different user accounts using the Active Directory Users And Computers MMC.

    • Practice 2: Create a single user account using the Active Directory Users And Computers MMC. Configure specific settings for the user’s logon hours and group membership. Create three similar accounts using the copy command.

  • Troubleshoot computer accounts.

    • Practice 1: Create a computer account in the Active Directory Users And Computers MMC. In the dialog box, alter the group that can add the computer to the domain from the Domain Admins group to the Users group.

    • Practice 2: In the Active Directory Users And Computers MMC, locate a test-account computer running Windows XP that has recently been joined to the domain. Using the Action menu, disable the computer account. Try to use this computer to gain access to the domain.

  • Troubleshoot user accounts

    • Practice 1: Modify the Default Domain Group Policy Object (GPO) and alter the Account Lockout threshold to three attempts. Log on with incorrect credentials to a Windows Server 2003 domain with a normal user account until the account is locked. Use the Active Directory Users And Computers MMC to reenable the account.

    • Practice 2: Reset the password on a user account and configure the account to force users to change their password to one of their own the next time that they log on.

  • Troubleshoot user authentication issues.

    • Practice 1: Edit the default domain policy GPO to change the password policies. Configure the Account Lockout Threshold policy to three invalid logon attempts. Set the Account Lockout Duration policy to 30 minutes.

    • Practice 2: Edit the default domain policy GPO to change the password policies. Set the Enforce Password History policy to 10 passwords. Set the Minimum Password Age policy to 2 days. Set the Minimum Password Length policy to 10 characters.


  

You are currently reading a PREVIEW of this book.

                                                                                                                    

Get instant access to over $1 million worth of books and videos.

  

Start a Free Trial


  
  • Safari Books Online
  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint