|
Home > Archive > 70-210 > December 2001 > What would you answer?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
What would you answer?
|
|
| captain 2001-12-03, 7:12 pm |
| Hey guys/gals. I have been poking around taking some practice tests and came across this on MCSEFREAK's site. I am a little confused about this question. My answer was C. It is my understanding that Domain policies override Local policies. Since she attempted 2 times and failed, I felt that her account was locked out. The site says that the answer is B. Any thoughts on this?
Jennifer is an employee of a company called XYZ Dimensions Inc. located in Chicago. Jennifer is currently using a stand-alone Windows 2000 Professional workstation, named JennyW2KP, to use a locally installed graphics editing application. As the administrator, you are going to add JennyW2KP to the Windows 2000 Domain, named XYZDimensions.edu, which currently consists of one Windows 2000 Server Domain Controller and four Windows 2000 Professional workstations. Before adding JennyW2KP to the XYZDimensions.edu Domain, you use the Local Group Policy MMC snap-in on JennyW2KP and configure the account lockout policy to lock out Jennifer's local user account after three bad logon attempts. Afterwards, you configure the Default Domain Controllers Policy to lockout Jennifer's Domain Account after two bad logon attempts. What will be Jennifer's result if she attempts to logon to the Windows 2000 Network using her Domain Logon account and providing an invalid password both times? Select the correct answer.
A) Jennifer will be allowed one more logon to the Windows 2000 Network because the Local Group Policy overrides the Group Policy
B) Jennifer will be allowed three more logon attempts to the Windows 2000 Network because the Local Group Policy and Default Domain Controllers Policy cumulatively allow her five bad logon attempts
C) Jennifer will be locked out of the Windows 2000 Network for a configured amount of time designated by the administrator.
D) Jennifer will be allowed one more logon attempt to the Windows 2000 Professional machine because the Local Group Policy allows her three bad logon attempts. | |
| lefscc 2001-12-04, 6:15 pm |
| quote:
Originally posted by captain
Hey guys/gals. I have been poking around taking some practice tests and came across this on MCSEFREAK's site. I am a little confused about this question. My answer was C. It is my understanding that Domain policies override Local policies. Since she attempted 2 times and failed, I felt that her account was locked out. The site says that the answer is B. Any thoughts on this?
Jennifer is an employee of a company called XYZ Dimensions Inc. located in Chicago. Jennifer is currently using a stand-alone Windows 2000 Professional workstation, named JennyW2KP, to use a locally installed graphics editing application. As the administrator, you are going to add JennyW2KP to the Windows 2000 Domain, named XYZDimensions.edu, which currently consists of one Windows 2000 Server Domain Controller and four Windows 2000 Professional workstations. Before adding JennyW2KP to the XYZDimensions.edu Domain, you use the Local Group Policy MMC snap-in on JennyW2KP and configure the account lockout policy to lock out Jennifer's local user account after three bad logon attempts. Afterwards, you configure the Default Domain Controllers Policy to lockout Jennifer's Domain Account after two bad logon attempts. What will be Jennifer's result if she attempts to logon to the Windows 2000 Network using her Domain Logon account and providing an invalid password both times? Select the correct answer.
A) Jennifer will be allowed one more logon to the Windows 2000 Network because the Local Group Policy overrides the Group Policy
B) Jennifer will be allowed three more logon attempts to the Windows 2000 Network because the Local Group Policy and Default Domain Controllers Policy cumulatively allow her five bad logon attempts
C) Jennifer will be locked out of the Windows 2000 Network for a configured amount of time designated by the administrator.
D) Jennifer will be allowed one more logon attempt to the Windows 2000 Professional machine because the Local Group Policy allows her three bad logon attempts.
the answer is B Domain Policies do override local. she would be able to try to log on the the local machine account 3 more times. | |
| lefscc 2001-12-04, 6:19 pm |
| The answer is B two strikes and she's out. The Domain Policy and the local security policies don't mix, she is logging onto the Domain not to her local account. | |
| captain 2001-12-04, 6:37 pm |
| Then I am confused because according to the scenario, the group policy gives her 2 chances and she failed at both when trying to logon to the network. Since she was trying to logon to the domain and failed 2 times, she should be locked out, which is answer C. Answer B says that she is allowed to try logging into the network domain 3 more times, not local machine, which she has 3 login attempts. Am I missing something? | |
| Joe Blacke 2001-12-05, 12:00 pm |
| The correct answer is C.
Local policies would only apply if logging onto the local machine, and not using a domain account.
At no time to the two policies combine to form a "cummulative" amount of invalid logon attempts.
If logging into the domain, the domain policy would apply. As it is set by the Admin, at the domain level, as 2 invalid attempts, she will only be allowed as many invalid attempts as is set at the domain level policy. The local policy has no affect on a domain user account whatsoever. | |
| captain 2001-12-05, 1:21 pm |
| I am glad that I am not using my mind! Thanks! |
|
|
|
|