70-217 - Wed 70-217 Question of the Day

Author

Wed 70-217 Question of the Day

wbafrank

2002-03-06, 7:01 am

Another easy one today!!

Q25. You are maintaining Active Directory security for your company network. Which of the following is the most efficient way to rename the Administrator account for the domain security purpose?

A. Through a GPO linked to the account.

B. Through a GPO linked to the site.

C. Through a GPO linked to the OU.

D. Through a GPO linked to the domain.

Good Luck .... see you tomorrow for the answer!!

unreal

2002-03-06, 8:44 am

Give it a shot:

C. Through a GPO linked to the OU.

iceman2001

2002-03-06, 3:09 pm

'C' for me.

jeff_j_black

2002-03-06, 8:08 pm

'D'

clark

2002-03-06, 8:50 pm

I choose 'C'

Teck Shark

2002-03-06, 9:39 pm

I'd say the answer is "C" too!

lamngocliem

2002-03-07, 6:09 am

My answer is D

wbafrank

2002-03-07, 10:35 am

quote:
Originally posted by wbafrank
Another easy one today!!

Q25. You are maintaining Active Directory security for your company network. Which of the following is the most efficient way to rename the Administrator account for the domain security purpose?

A. Through a GPO linked to the account.
B. Through a GPO linked to the site.
C. Through a GPO linked to the OU.
D. Through a GPO linked to the domain.

Good Luck .... see you tomorrow for the answer!!

And the answer is ....

Correct Answers: D

Domain Controllers pull some security settings only from group policy objects linked to the root of the domain. Because domain controllers share the same account database for the domain, certain security settings must be set uniformly on all domain controllers. This ensures that the members of the domain have a consistent experience regardless of which domain controller they use to log on.

Windows 2000 accomplishes this tak by allowing only certain settings in the group policy to be applied to domain controllers at the domain level. This group policy behaviour is different for member server and workstations.

The following settings are applied to domain controllers in Windows 2000 only when the group policy is linked to the Domain container:

1. All settings in Computer Configuration/Windows Setings/Security Settings/Account Policies (this includes all of the Account Lockout, Password, and Kerberos policies)
2. The following three settings in Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options:

Automatically log off users when logon time expires
Rename Administrator account
Rename Guest account

Sponsored Links