Which port should you open on the firewall?
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You enable and configure Terminal Server on a server named Server1. A firewall separates Server1 from the internal network.
Internal users report that they cannot connect to Server1 by using Remote Desktop Connection.
You need to ensure that the users can connect to Server1 by using Remote Desktop Connection.
Which port should you open on the firewall?
Which tool should you use?
You have a terminal server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
Occasionally, users report that they cannot connect to the terminal server.
You need identify user accounts that have multiple Terminal Services connections to Server1.
Which tool should you use?
What should you do?
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You deploy a server named Server1 and install Terminal Server.
After four months, users report that they can connect to Server1 by using Remote Desktop Connection, but are unable to log on.
You verify that the user permissions have not changed.
You need to ensure that users can log on to Server1 by using Remote Desktop Connection.
What should you do?
What should you do?
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003. All servers run Windows Server 2003 Service Pack 2 (SP2).
The network contains 10 file servers. Each file server hosts a share named Apps.
On each file server, a local group named App-install-local has permissions to the Apps share. A global group named App-install-global belongs to the App-install-local group on each file server. App-install-global is used only to control permissions for the Apps share.
You create a global group named Helpdesk.
You need to provide the Helpdesk group access to the Apps share on each file server. The Helpdesk group must have the same permissions as the App-install-global group. You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
What should you do?
Your network contains a single Active Directory domain. All servers on the network are members of the domain.
You have a server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2). Server1 has two NTFS partitions.
You create and share a folder named Data in the root of a partition on Server1.
You log on to your computer by using the domain Administrator account and discover that you cannot modify files in the Data share.
You need to ensure that the Administrator can modify files in the Data share. The solution must use the minimum amount of permissions.
What should you do?
What should you do?
Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2003.
You install an application that requires a user account enabled for constrained delegation. You create the required user account.
When you attempt to configure constrained delegation, you discover that the Delegation tab does not appear in the user account properties.
You need to ensure that the Delegation tab appears in the user account properties.
What should you do?
What should you do?
Your company has a main office and a branch office. Your network consists of a single Active Directory domain. All domain controllers are in the main office. The offices connect to one another by using a wide area network (WAN) link.
The branch office has a computer named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
A domain user named User1 reports that he cannot log on to Server1 when the WAN link is unavailable. He reports that he can log on to Server1 when the WAN link is available.
You need to ensure that User1 can log on to Server1 by using his domain account when the WAN link is unavailable.
What should you do?
What should you do?
You are the administrator of a single Active Directory domain named contoso.com. The network contains a
member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
A user named User1 reports that he is unable to log on from Server1. User1 is a member of the Domain Users
global group.
You verify the security log on Server1 and discover the following log entry:
Event Type:Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID:529
Date: 8/1/2007
Time: 12:05:51 PM
User: NT AUTHORITYSYSTEM
Computer: SERVER1
Description:
Logon Failure:
Reason: Unknown user name or bad password
User Name: User1
Domain: SERVER1
Logon Type: 10
Logon Process: User32
Authentication Package: ?Negotiate
Workstation Name:???SERVER1
Caller User Name: SERVER1$
Caller Domain:CONTOSO
Caller Logon ID:(0x0,0x3E7)
Caller Process ID: 3528
Transited Services:-
Source Network Address: 192.168.1.19
Source Port:?55208
You need to ensure that User1 can successfully log on to Server1.
What should you do?
What should you do?
Your network consists of a single Active Directory domain. You have a member server named Server1 that runs Windows Server 2003 Service Pack 2 (SP2).
You need to track all authentication attempts on Server1.
What should you do?
What should you do?
Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service Pack 2 (SP2). All client computers run Windows XP Professional Service Pack 3 (SP3).
You need to ensure that locked out user accounts remain locked out until an administrator unlocks the accounts.
What should you do?