|
Home > Archive > 70-217 > January 2003 > Deja's Thur 70-217 Question of the Day
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Deja's Thur 70-217 Question of the Day
|
|
| Deja-vue 2003-01-09, 1:41 am |
| Week is almost over...
Today's Question:
You are the administrator for Arbor Shoes. Part of your network configuration is shown in an exhibit. All the computers are running Windows 2000 Professional and are members of the arborshoes.com domain in the company LAN. All the users are members of the Power Users group on their computers. Andrew has dial-up access to the Internet for a special project he is working on. You do not want other users to share Andrew's Internet connection and to have unrestricted Internet Access.
What should you do?
A. Create a high security zone in MS IE.
B. Create a Group Policy Object (GPO) that disables the configuration of connection sharing. Grant Andrew Read and Apply group Policy permissions to the GPO.
C. Create a Group Policy Object (GPO) that disables the configuration of connection sharing. Grant Michel, Laura, and Anita Read and Apply Group Policy permissions to the GPO.
D. Remove the Internet connection from the All Users profile on Andrew's computer and then recreate the connection in Andrew's personal profile.
We'll see ya' tomorrow with the Answer. | |
| Fitzwar 2003-01-09, 4:08 am |
| This little minx is
C.... | |
| Fitzwar 2003-01-09, 4:09 am |
| This little minx is
B.... | |
| robertmillar 2003-01-09, 6:37 am |
| C | |
| B4yaman3 2003-01-09, 7:18 am |
| "C"
Offer your best Defence..This is the end! | |
| charlie69 2003-01-09, 11:55 am |
| It's B, if you choose C--the policy on the other three users, they won't be able to share their connections using ICS on THEIR computers, but andrew could share his with other users. | |
| kopman 2003-01-09, 2:43 pm |
| I might actually combine 2 answers.
Do D so that the connection only appears for Andrews profile and then do B so that ICS is disabled.
I assume Andrew only knows the password for the internet connection.
Kopman | |
| Slinky 2003-01-09, 4:01 pm |
| I'll have to go with C also. | |
| charlie69 2003-01-09, 7:36 pm |
| It's B. Not D, not C. Have you all played around with these??? If you make a GPO and go into edit then computer configuration and into the Network setting and then the ICS one, you will get this for an explanation:
Determines whether administrators can enable, disable, and configure the Internet Connection Sharing feature of a dial-up connection.
If you enable this policy or do not configure it, the system displays the Internet Connection Sharing (ICS) tab in the Properties dialog box for a dial-up connection. On Windows 2000 Server, it also displays the Internet Connection Sharing page in the Network Connection wizard. (This page is available only in Windows 2000 Server.)
If you disable this policy, the Internet Connection Sharing (ICS) tab and Internet Connection Sharing wizard page are removed.
Internet Connection Sharing lets users configure their system as an Internet gateway for a small network. It provides network services, such as name resolution, to the network.
By default, Internet Connection Sharing is disabled when you create a dial-up connection, but administrators can use the Internet Connection Sharing (ICS) tab and Internet Connection Sharing wizard page to enable it. | |
| Tech Ranger 2003-01-09, 7:39 pm |
| C | |
| Slinky 2003-01-09, 9:18 pm |
| quote:
Originally posted by charlie69
If you enable this policy or do not configure it, the system displays the Internet Connection Sharing (ICS) tab in the Properties dialog box for a dial-up connection.
If you disable this policy, the Internet Connection Sharing (ICS) tab and Internet Connection Sharing wizard page are removed.
Not true, you have it backwards. Make sure you go back and read the "explain" tab again. You, like I was when I first started learning about GPOs, confuse the difference between enable and disable. So let me try and make it clear. So lets take this example of "Prohibit configuration of connection sharing" and take a look at it. If we enable the policy, we "enable prohibit..." which in other words the policy is prohibited and it WILL NOT display the tab. On the contrary, if we disable the policy, we "disable prohibit..." which WILL allow the tab to be there. If we enable deny then that policy doesn't apply, if you disable deny then it does apply. Make sense?
The terminology is very confusing, and I think M$ could have created a better way, but for now we have to live with it. I still find myself thinking "OK, what happens when I enable "Disable CTRL+ALT+DEL requirment for logon?" for example. So just think about it and you'll be set yourself straight.
Anyways, good debate going on here. I too find it boring when everyone agrees. | |
| charlie69 2003-01-09, 9:45 pm |
| Slinky
Maybe I should have put that in quotes. That came right off my server in the explain section. Go in and take a look at it!? | |
| Slinky 2003-01-09, 9:54 pm |
| quote:
Originally posted by charlie69
Slinky
Maybe I should have put that in quotes. That came right off my server in the explain section. Go in and take a look at it!?
This is verbatim, and note the bold.
Determines whether administrators can enable, disable, and configure the Connection Sharing feature of LAN or RAS connections.
If you enable this policy, the system removes the Sharing tab from the Properties dialog box for a LAN or RAS connection. On Windows 2000 Server, it also removes the Internet Connection Sharing page from the Network Connection wizard.
If you disable this policy, the Sharing tab and Internet Connection Sharing wizard page are displayed.
Connection Sharing lets users configure their system as an Internet gateway for a small network. It provides network services, such as name resolution, to the network.
By default, Connection Sharing is disabled when you create a dial-up connection, but administrators can use the Sharing tab and Internet Connection Sharing wizard page to enable it.
Note: This policy appears in the Computer Configuration and User Configuration folders. If both policies are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
Note: LAN Connection Sharing is only available when two or more network interfaces are present.
Note: Non-administrators are already prohibited from configuring Connection Sharing regardless of this policy. | |
| Slinky 2003-01-09, 10:11 pm |
| I was looking under computer configuration...administrative templates...network...network and dial-up connections. I think you maybe looking at something different. | |
|
|
| drewgost 2003-01-10, 4:53 am |
| I think "B" on this question due to what the poicy explains, in red, "non-admins are already prohibited from configuring Connection Sharing regardless of this policy."
"If you enable this policy, the system removes the Sharing tab from the Properties dialog box for a LAN or RAS connection. On Windows 2000 Server, it also removes the Internet Connection Sharing page from the Network Connection wizard.
If you disable this policy, the Sharing tab and Internet Connection Sharing wizard page are displayed.
Connection Sharing lets users configure their system as an Internet gateway for a small network. It provides network services, such as name resolution, to the network.
By default, Connection Sharing is disabled when you create a dial-up connection, but administrators can use the Sharing tab and Internet Connection Sharing wizard page to enable it.
Note: This policy appears in the Computer Configuration and User Configuration folders. If both policies are configured, the setting in Computer Configuration takes precedence over the setting in User Configuration.
Note: LAN Connection Sharing is only available when two or more network interfaces are present.
Note: Non-administrators are already prohibited from configuring Connection Sharing regardless of this policy. "
Drew G. | |
| charlie69 2003-01-10, 6:02 am |
| Slinky
I cut and pasted that directly from my server, no crap! Is it possible that you and I have different things written in there?????? Doubt it but that is weird. I do know that if you have enabled "No Run" that the person the GPO is applied to will not get run in Start, but this one seems to have a different explanation on my server. I don't think I have that screwed up but ICS seems to be different????!!!! | |
| Slinky 2003-01-10, 8:36 am |
| quote:
Originally posted by Slinky
I was looking under computer configuration...administrative templates...network...network and dial-up connections. I think you maybe looking at something different.
Is this where you are looking charlie???? | |
| charlie69 2003-01-10, 12:48 pm |
| Yep, same place
Computer configuration
Admin Templates
Network & dial-up connecitons
Allow configuration of connection sharing
What I pasted came from the explain tab!
I believe this one is different, at least on my machine it is. |
|
|
|
|
