Objective 3.4 in Visual Studio .NET

Create QR-Code in Visual Studio .NET Objective 3.4

16-23

A user calls the help desk and states that he or she cannot log on to the network. Using Active Directory Users And Computers, you examine the Active Directory and determine that the user account does not exist. Further investigation into the Directory Ser vice Event logs indicates that the account was deleted. You re-create the user account in Active Directory Users And Computers. What else will you need to do to complete the restoration of the user s access to resources (Select all that apply.)

A. Place the user s account in the appropriate groups. B. Reset the computer account. C. Reassign and apply any appropriate Group Policies to the user account. D.

A user, Joe, is taking on additional network administrative responsibility for his depart ment, Finance. From Joe s computer, logged on as Joe, you use the Run As command with your administrative credentials to load the Active Directory Users And Computers snap-in, and then you add Joe to the Department s Itadmin3 group, which has delegated administrative permissions for the user accounts in the Finance OU. You then close the Active Directory Users And Computers snap-in. When Joe attempts to reset a user s password in the Finance OU, he is denied access. What additional step do you need to take in order for the user to be able to perform the delegated administrative duties

A. Add Joe s user account to the Built-in Account Operators group for the domain. B. Add Joe s user account to the Itadmin3 OU. C. Reset Joe s computer account. D. Instruct Joe to log off, and then log on to his computer.

16-24

16

Managing and Maintaining Access to Resources (3.0)

A user, Joe, has a user account that is a member of the Sales OU in the contoso.com domain. His user account is also a member of the Employees global group. After Joe s departmental assignment to Finance, you make Joe s user account a member of the Finance global group. Joe then logs on to his computer and attempts to access a shared folder named Documents on Server01, but receives an Access Denied mes sage when he tries to save any files to the folder. The share Permissions on the Documents share are listed below.

Security Principal Joe (User Account) Finance (Global Group) Employees (Global Group) Permissions Allow: Read Allow: Read Allow: Read

Security Principal Joe (User Account) Finance (Global Group) Employees (Global Group) System Administrators Permissions Allow: Read Allow: Read, Write Allow: Read Allow: Full Control Allow: Full Control

A. Share permissions are overriding the NTFS permissions. B. Joe s user account needs to be moved to the Finance OU. C.

16-25

the deleted user account. If the user account already exists in groups you re add ing it to, it will need to be removed first, and then added again. The previous account, although using the same account name will have a different SID. Resource permissions for the group will not have to be reassigned because the only piece of information that is changing in this situation is the membership of the group.

need not be reset. Resetting the computer account is only necessary when the computer account becomes unsynchronized with the domain.

Units. Whatever Organizational Unit the new user account is placed within, the Group Policies for that OU, and the Group Policies at the domain level, will apply automatically and refresh automatically as soon as the user logs on.

will have to be re-created. If the user account already exists in groups you re add ing it to, it will need to be removed first, then added. The previous account, although using the same account name will have a different SID.

Incorrect: The permissions for groups have not changed, just the membership,

so no new permissions for the groups are needed based on the group taking on a new member. The user s token will add the list of all groups of which the user is a member to its list of SIDs when the user logs on.

16-26