70-290 Managing and Maintaining a Microsoft Windows Server 2003 Environment Practice Test

Demo Question 3.

You work as the network administrator at EliteCertify.com. The EliteCertify.com network consists of a single Active Directory domain named EliteCertify.com. All servers on the EliteCertify.com network run Windows Server 2003 and all client computers run Windows XP Professional. The EliteCertify.com written company security policy only allows domain administrators to manage all servers on the network. While performing routine monitoring, you discover that a user named Andy Booth has changed properties that define how much control users have over their Terminal Services sessions. The problem is that Andy Booth works in the Finance department. His user account is currently the only Finance department users' user account added to the Remote Desktop Users group. You must enforce the requirements of the EliteCertify.com written company security policy. You want to immediately prevent Andy Booth from changing any configuration settings which he should not be changing. You verify that Andy Booth is not added to the local Administrator account group on EliteCertify -SR14. You access the RDP-Tcp Properties dialog box. The exhibit shows the current configuration. Exhibit: What configuration should you perform to enforce the requirements of the EliteCertify.com written company security policy?

A. Remove Andy Booth from the Remote Desktop Users group.
B. Access Advanced permissions, and deny Andy Booth from having Set Information permissions.
C. Add Andy Booth to the Remote Desktop Users group on his client computer.
D. Ensure that Andy Booth only has the Allow - Read permissions on objects.


Display Answer

Answer: B

Explanation: Since Andy Booth is currently the only member of the Remote Desktop Users group, the issue is probably due to incorrectly configured special permissions and advanced settings. After clicking the Advanced button on the RDP-Tcp Properties dialog box, you can configure the Set Information permission. When added for a user, this permission allows the user to specify how much control other users have over their Terminal Services sessions. To resolve the issue, you should deny Andy Booth from having Set Information permissions. Incorrect