70-217 - QoD 7/4/04

Author

QoD 7/4/04

jocampo

2004-04-07, 11:00 am

You are the System Administrator of a great international oil company called Contoso. Your boss have requested you Deny LDAP access to specific clients based on a specific IP address. How would you do this with the less administrative effort?

a. This is not a possible task in Windows 2000.
b. Using NTDSUTIL in DS Restore Mode.
c. Using the mmc AD Schema console.
e. This is only possible with 3rd party tools.

aawmorris

2004-04-07, 6:03 pm

Here try this link:

http://support.microsoft.com/defaul...;314976&sd=tech

jocampo

2004-04-08, 10:05 pm

quote:
Originally posted by jocampo
You are the System Administrator of a great international oil company called Contoso. Your boss have requested you Deny LDAP access to specific clients based on a specific IP address. How would you do this with the less administrative effort?

a. This is not a possible task in Windows 2000.
b. Using NTDSUTIL in DS Restore Mode.
c. Using the mmc AD Schema console.
e. This is only possible with 3rd party tools.

And the answer is "b". NTDSUTIL also let you move or change the AD log files location and SEIZE or Transfer the FSMO roles. Its a very useful tool that help resolve or troubleshoot AD problems.

Sponsored Links