|
|
|
| You have a Win2k network that has one domain, and two DCs, and three member servers. One of the member servers provides access to five folders that contain confidential company information. You need to give all users access to the folders and keep a record of who accessed them. How should you do this? Choose 3.
1- Set the audit policy at the domain level
2- Configure the security log to be cleared manually
3- You should audit object access and configure the server to stop when the log is full
4- Set the audit policy at the local level
answer and some explanation? | |
| Slinky 2002-11-11, 2:19 pm |
| Answers 1, 2, & 3. Since you want to audit events on a member server, you will need to set the policy at the domain level. You want the log cleared manually so that the system doesn't overwrite events that are older than a certain amount of days or as necessary. You also want the server to shut down when the log is full so it doesn't miss any events when it becomes full. Make sense? | |
| cm2gj 2002-11-11, 10:17 pm |
| quote:
Originally posted by Slinky
Answers 1, 2, & 3. Since you want to audit events on a member server, you will need to set the policy at the domain level. You want the log cleared manually so that the system doesn't overwrite events that are older than a certain amount of days or as necessary. You also want the server to shut down when the log is full so it doesn't miss any events when it becomes full. Make sense?
super sense!!!!!!1 | |
| Riverwind6 2002-11-13, 5:00 pm |
| I thought it would have been at the local level since it is not a domain controller but a member server.
I thought all 2K Pro PCs and 2K Member Server PCs had to be locally changed for auditing.
Only 2K Pros need to be locally changed then? | |
| Slinky 2002-11-13, 5:24 pm |
| Well, if you set an auditing policy at the local level, then it would be overridden by a domain, site or OU policy. If you wanted to enable auditing on domain controllers then you would have to change the "Default Domain Controller Policy" or create a new one. For all other computers in the domain you can either enable auditing through the domain, site or OU level. | |
|
| quote:
Originally posted by Slinky
Well, if you set an auditing policy at the local level, then it would be overridden by a domain, site or OU policy. If you wanted to enable auditing on domain controllers then you would have to change the "Default Domain Controller Policy" or create a new one. For all other computers in the domain you can either enable auditing through the domain, site or OU level.
why do you know so much about 2k?
you have 100+ years of experience with 2k? | |
| Slinky 2002-11-13, 7:24 pm |
| I was the one that came up with the idea of Windows 2000. I sold the idea to Microsoft for 1/1000 of Mr. Gates' net worth.
Seriously though, thats all stuff you will learn in 70-217. GPOs are at the heart of Active Directory, and M$ will test you inside and out on them. | |
|
| quote:
Originally posted by Slinky
I was the one that came up with the idea of Windows 2000. I sold the idea to Microsoft for 1/1000 of Mr. Gates' net worth.
Seriously though, thats all stuff you will learn in 70-217. GPOs are at the heart of Active Directory, and M$ will test you inside and out on them.
jajaj ok.
nice knowledge | |
| Riverwind6 2002-11-14, 4:43 pm |
| quote:
Originally posted by Slinky
Well, if you set an auditing policy at the local level, then it would be overridden by a domain, site or OU policy. If you wanted to enable auditing on domain controllers then you would have to change the "Default Domain Controller Policy" or create a new one. For all other computers in the domain you can either enable auditing through the domain, site or OU level.
How do you enable auditing at the domain level for a 2K Pro machine? I really thought you had to enable it locally. I'm reading this chapter in the ms press book and it really sems to say you can only do it on the machine locally. | |
| Riverwind6 2002-11-15, 10:02 pm |
| OOH!! I just read about it 
Sorry! |
|
|
|