70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment Certification Exam

Microsoft ™

70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment

Note 1: 70-290 Exhibit and all related diagrams are not shown in demo questions.
Note 2: 70-290 Answers are not shown in demo questions.
Exhibits and Answers are only provided in the Full Version.

Demo Question 11.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. All file and print services reside on a server named EliteCertify -SR34. You create a folder named ResearchDocs on EliteCertify -SR34 and do not configure the initial permission settings for ResearchDocs. You have received instruction from the CIO to ensure that only local access if prohibited. Furthermore NONE of the users logged on to EliteCertify -SR34 must be able to modify access permissions on EliteCertify -SR34. How will you accomplish the task? To answer, select the appropriate group and make the proper configuration in the dialog box. Answer Explanation To prevent local access we must Deny the interactive group. Setting User Rights and Privileges 1. User rights can override NTFS permissions in certain cases (a user with the Backup files and directories right is able to read all files on the volume, regardless of the NTFS permissions assigned, but only for the purpose of backing up and restoring data). 2. Assign user rights to groups whenever possible. Assigning user rights to individual user accounts is difficult to manage. 3. User rights are set using Group Policy. Reference: Deborah Littlejohn Shinder, Dr. Thomas W. Shinder, Laura E. Hunter & Will Schmied, MCSA/MCSE. Exam : Managing and Maintaining a Windows Server 2003 Environment, Study Guide and DVD training system, Syngress Publishing, Rockland, MA, 2003, p. 475

Display Answer