70-299 Implementing and Administering Security in a Microsoft Windows Server 2003 Network Practice Exam

Demo Question 1.

You are a security administrator for EliteCertify.com. The network consists of a single Active Directory domain named EliteCertify.com. All servers run Windows Server 2003. All client computers run Windows 2000 Professional. You installed Terminal Server on a member server named EliteCertify -SR17. Users in the domain connect remotely to EliteCertify -SR17 to run applications. Terminal Services on EliteCertify -SR17 is configured to run in Full Security mode. You do not want to change the configuration to Relaxed Security mode. You want to limit the effective permissions for the Program Files folder on EliteCertify -SR17 when users connect remotely. By default, a few groups have Modify permissions for the Program Files folder. You want to ensure that these users have Modify permissions only when they are logged on locally to EliteCertify -SR17. When they are remotely connected to EliteCertify -SR17, they are not allowed to change to the Program Files folder. You need to assign the appropriate permissions. What should you do?

A. Assign the Remote Interactive Logon group the Deny - Write permission for the Program Files folder.
B. Assign the Remote Desktop Logon group the Deny - Write permission for the Program Files folder.
C. Assign the Terminal Server Users Logon group the Deny - Write permission for the Program Files folder.
D. Apply the Rootsec.inf security template to EliteCertify -SR17.
E. Apply the Hisecws.inf security template to EliteCertify -SR17.


Display Answer

Answer: A

Explanation: