Administering User Accounts in C#.NET

Printing QR Code 2d barcode in C#.NET Administering User Accounts

7

First, create a shared folder on a network server that will contain the user s home folder. Sec ond, in the Profiles tab in the Properties dialog box for the user, provide a path to the shared folder on the server. The next time that the user logs on, the home folder is available from the My Computer window.

5. Which of the following files must be renamed to configure a user profile as mandatory a. Ntuser.dat b. Ntuser.doc c. Ntuser.man d. Ntuser.txt

The correct answer is a. To configure a user profile as mandatory, you must make it read-only by changing the name of the Ntuser.dat file to Ntuser.man.

Page 7-48

Rename a user account if you want a new user to have all of the properties of a former user, including permissions, desktop settings, and group membership. The advantage of renaming an account is that you do not have to rebuild all of the properties as you do for a new user account.

Disable a user account when a user does not need an account for an extended period, but will need it again. The advantage of disabling a user account is that when the user returns, you can enable the user account so that the user can log on to the network again without having to rebuild a new account.

3. How is a disabled user account designated in the Active Directory Users And Com puters console

4. Why should you select the User Must Change Password At Next Logon check box when you reset a user s password

Select User Must Change Password At Next Logon to force the user to change his or her password the next time he or she logs on. This way, only the user knows the password.

Page 7-49

7-57

1. Many of the users from the Contractors OU travel to the other locations and utilize different computers. They ve complained that their desktops look different when they move from location to location. What can be done about this

To give users a consistent desktop when they change computers, you can implement roaming user profiles. You do this by providing a central server on which users can store their profiles. In their user accounts, you redirect their profile path to that central location.

2. Many of the users from the Contractors OU say they would like a central location where they can store and share documents. They want to be able to access that location from anywhere on the network. What solutions can you offer

One solution is to configure home folders for these users. A home folder will automatically map a drive letter to a shared folder on the network. Users can use this location to store files. Typ ically, the network administrator will map the folder path to the %Username% folder so that inside the central share, the user has a folder specific to their user name.

3. During a recent password audit, several user accounts were discovered using sim ple passwords, such as password or a password that was identical to the user name. How can you prevent this in the future, domain wide

4. One of the network administrators says that you should do away with passwords altogether and implement smart cards. What are the requirements of using smart cards for authentication

Smart cards would be required for every user. Smart card readers would need to be installed on every computer. A certificate server will also be required in order to issue certificates to the smart cards.

Exam Objectives in this :

As an administrator, you ll have to work with groups. Groups reduce administra tive effort by allowing you to assign permissions and rights to a group of users rather than having to assign permissions to each individual user account. As a Microsoft Windows Server 2003 domain administrator, you must understand the different types of groups and which ones you can use with each domain func tional level. You must certainly understand how to create and delete groups, add members to groups, and change the group scope, as these tasks are commonly performed by network administrators. You should also understand why logging on to Windows Server 2003 using an administrator account makes your system more vulnerable to Trojan horse attacks and other security risks. To address this problem, you will learn about the Run As program, which allows you to run spe cific tools and programs with permissions other than those provided by the account with which you are currently logged on to perform routine tasks without exposing your computer to unnecessary risk. Lessons in this :