Microsoft windows xp professional exam 70 - 270 phần 4 ppt

7-45 4. Which of the following statements about deleting local groups are correct? (Choose all that apply.) a. Each group that you create has a unique identifier that cannot be reused. b. You can restore access to resources by re-creating the group. c. When you delete a group, you also remove the permissions and rights associated with it. d. Deleting a group deletes the user accounts that are members of the group. 5. What is the difference between built-in system groups and built-in local groups found on computers running Windows XP Professional? Give at least two examples of each type of group. Lesson Summary ■ Groups simplify administration by allowing you to assign permissions and rights to a group of users rather than to individual user accounts. Permissions control what users can do with a resource such as a folder, file, or printer. Rights allow users to perform system tasks, such as changing the time on a computer and backing up or restoring files. ■ Windows XP Professional creates local groups in the local security database, so you can use local groups only on the computer on which you create them. ■ You can use the Computer Management snap-in to create, add members to, and delete local groups. ■ All computers running Windows XP Professional have built-in local groups that give rights to perform system tasks on a single computer. ■ Computers running Windows XP Professional also have built-in system groups whose membership is determined dynamically. Lesson 5 Implementing Groups 7-46 Chapter 7 Setting Up and Managing User Accounts Case Scenario Exercise In this exercise, you will read a scenario about creating users and groups and then answer the questions that follow. If you have difficulty completing this work, review the material in this chapter before beginning the next chapter. You can find answers to these questions in the “Questions and Answers” section at the end of this chapter. Scenario You are an administrator working for the Baldwin Museum of Science. The museum has hired a number of temporary workers that will be researching information for a new exhibit on the history of coal use in northern Europe. Each of these workers has been assigned a workstation in a small workgroup that the museum has set up in the exhibit room. One computer in the workgroup is acting as a file server where the workers will store their research files. All workstations and the file server are running Windows XP Professional. The temporary researchers’ names are as follows: ■ Cat Francis ■ David Jaffe ■ Mary North ■ Jeff Teper ■ Bernhard Tham Questions 1. Your first task is to create a naming convention for these workers. The museum management would like the user names to reflect that these are temporary workers, but not require too complicated a user name for the workers to type. Use the following table to create names for the workers. Full Name User Account Name Cat Francis David Jaffe Mary North Jeff Teper Bernhard Tham 7-47 2. Where should you create these user names? 3. The file server in the workgroup contains a folder named Coal Research, to which each of the workers needs access. You would like to minimize the number of times you have to assign permissions to the Research folder. How would you do this? 4. When creating passwords for the users on their workstations, what must you ensure so that the users can access the file server? Troubleshooting Lab You are working as an administrator for Tailspin Toys, a manufacturer of remote-controlled airplanes. Raymond, one of your junior administrators, tells you that he received a call from Martin, a user in the Sales department, who shares a workstation with two other users. Martin complained to Raymond that he had forgotten the password for his local user account and could not log on to his computer. Raymond intended to use Com- puter Management to reset Martin’s password, but accidentally deleted the user account instead. He says that he clicked Yes in the dialog box that warned him about the dele- tion, thinking that the message was warning him about resetting the password instead. Troubleshooting Lab 7-48 Chapter 7 Setting Up and Managing User Accounts 1. Martin’s user account was assigned permissions to access a number of resources on the computer and Raymond is not sure exactly what permissions were assigned. He wants to recover the deleted user account. Can he do this? If so, how? 2. If you really mean to delete the user account, what is often a better way to handle the situation than simply deleting the user account? 3. To prevent a situation like the one that happened with Raymond (in which rights and permissions to resources were assigned directly to Martin’s user account and were thus difficult to reconstruct), what is a better way to assign rights and permissions? 4. Soon after creating a new user account for Martin, Raymond contacts you and tells you that Martin has forgotten his new password. Can you reset his password? How? 5. What should you tell Martin to do so that he can recover his own password should this happen again? 7-49 Chapter Summary ■ Local user accounts allow users to log on at and access resources on only the computer on which you create the local user account. Domain user accounts allow users to log on to the domain and access resources anywhere on the network. ■ Local user account names must be unique on the computer on which you create the account, and domain user accounts must be unique to the directory. Pass- words can be up to 128 characters long; a minimum of 8 characters is recommended. Use a mixture of uppercase and lowercase letters, numerals, and valid nonalphanumeric characters in creating passwords. ■ You can administer local user accounts using the following two tools: ❑ The User Accounts tool allows administrators to create a new user account, change an existing account, and change the way a user logs on or logs off. ❑ The Computer Management snap-in allows you to create, modify, and delete user accounts for the local computer on which you are working. If your computer is part of a network, you can use the Computer Management snap-in on a remote computer. ■ After creating a user account, you can modify the properties for the account by using the Properties dialog box for the user account in Computer Management. ■ Groups simplify administration by allowing you to assign permissions and rights to a group of users rather than to individual user accounts. Windows XP Profes- sional creates local groups in the local security database, so you can use local groups only on the computer on which you create them. Exam Highlights Before taking the exam, review the key points and terms that are presented in this chapter. You need to know this information. Key Points ■ A domain does not recognize local user accounts, so do not create local user accounts on computers running Windows XP Professional that are part of a domain. Doing so restricts users from accessing resources in the domain and prevents the domain administrator from administering the local user account properties or assigning access permissions for domain resources. ■ Allow Guest access only in low-security workgroups, and always assign a password to the Guest account. You can rename the Guest account, but you cannot delete it. Exam Highlights 7-50 Chapter 7 Setting Up and Managing User Accounts ■ You should understand the guidelines for creating strong passwords. In particular, remember that a password should be a minimum of eight characters and should include a mix of uppercase and lowercase letters, numbers, and symbols. ■ After you delete a user account, there is no way to recover the rights and permissions associated with that user account. A better practice than deleting user accounts is to disable them until you are sure they are no longer needed. Key Terms Computer Management A console that provides access to a number of management utilities for administering a computer, including the ability to create, manage, and monitor shared folders. domain user account An account that allows you to log on to a domain to access network resources. group A collection of user accounts. Groups simplify administration by allowing you to assign permissions and rights to a group of users rather than to each user account individually. local security database A database on a computer running Windows XP Profes- sional that holds local user accounts and groups. local user account An account that allows you to log on to a specific computer to access resources on that computer. naming convention An organization’s established standard for identifying users. password reset disk A floppy disk that contains encrypted password information and allows users to change their password without knowing the old password. Permissions Permissions control what users can do with a resource such as a folder, a file, or a printer. Rights Rights allow users to perform system tasks, such as changing the time on a computer and backing up or restoring files. user profile A collection of folders and data that stores your current desktop environment, application settings, and personal data. 7-51 Questions and Answers Lesson 1 Review Page 7-7 1. Where do local user accounts allow users to log on and gain access to resources? Only on the computer on which the local user account is created. 2. Where should you create user accounts for computers running Windows XP Pro- fessional that are part of a domain? You should create it on one of the domain controllers. You should not use local user accounts on Windows XP Professional computers that are part of a domain. 3. Which of the following statements about domain user accounts are correct? (Choose all that apply.) a. Domain user accounts allow users to log on to the domain and gain access to resources anywhere on the network, as long as the users have the required access permissions. b. If at least one computer on the network is configured as a domain controller, you should use domain user accounts only. c. The domain controller replicates the new user account information to all other computers in the domain. d. A new domain user account is established in the local security database on the domain controller on which you created the account. The correct answers are A and B. C is not correct because the domain controller replicates user account information only to other domain controllers in a domain—not to every computer. D is not correct because a domain user account is established in Active Directory, not in the local security database. A local user account is established in the local security database. 4. Which of the following statements about built-in accounts are correct? (Choose all that apply.) a. You can delete the Guest account. b. You cannot delete the Administrator account. c. You cannot rename the Guest account. d. You can rename the Administrator account. The correct answers are B and D. A is not correct because you cannot delete the Guest account (or any built-in local user accounts, for that matter). C is not correct because you can rename the Guest account. Questions and Answers 7-52 Chapter 7 Setting Up and Managing User Accounts 5. How do you disable the Guest account? Click Start, click Control Panel, and then click User Accounts. In the User Accounts window, click the Guest icon. In the What Do You Want To Change About The Guest Account window, click Turn Off The Guest Account. The Guest Account is now disabled. Lesson 2 Review Page 7-12 1. The maximum number of characters that Windows XP Professional recognizes in a local user account name is __________. 20 2. When are duplicate local user accounts valid in a network of computers running Windows XP Professional? They are valid as long as they are not on the same computer. In fact, in a workgroup, you must create the same user account on each computer in the workgroup that you want the user to be able to access. 3. Passwords can be up to ______ characters long with a minimum length of ______ characters recommended. 128, 8 Page 7-22 Lesson 3 Practice: Exercise 2 6. What two new options appear for User1’s account? What option is no longer available? The list of changes you can make to the user’s account includes two new options: Change The Password and Remove The Password. The Create A Password option is gone. Lesson 3 Practice: Exercise 4 Page 7-23 1. What type of account is User3? (Get answer.) The account type for User3 is Limited Account. 15. How does the password appear on the screen? Why? The password is displayed as large dots as you type. This prevents others from viewing the password as you type it. 23. What happens? A Logon Message dialog box appears, informing you that you are required to change your password at first logon. Lesson 3 Review Page 7-26 1. Which of the following statements about the Windows XP Professional User Accounts tool are correct? (Choose all that apply.) 7-53 a. The User Accounts tool allows you to remotely create, modify, and delete user accounts on all computers in the network running Windows XP Profes- sional. b. The User Accounts tool allows you to view and modify all accounts on the computer. c. The tasks you can perform with the User Accounts tool depend on the type of account you use to log on to the local computer. d. The User Accounts tool allows users to delete, create, or remove their individual passwords. The correct answers are C and D. A is not correct because you cannot use the User Accounts tool to administer a remote computer. B is not correct because the User Accounts tool does not allow you to administer certain built-in accounts. 2. Which of the following tasks can both account types (Computer Administrator and Limited) perform? (Choose all that apply.) a. Change your picture b. Change your account type c. Create, change, or remove your password d. Change your account name The correct answers are A and C. B and D are not correct because only computer administrators can change the account type and account name. 3. Which of the following statements about logging on or logging off a computer running Windows XP Professional are true? (Choose all that apply.) a. When you use the Welcome screen to log on the local computer, you can quickly switch to another user account without logging off and closing all programs that you are running. b. The User Accounts tool allows you to disable a local user account to prevent users from using the disabled account to log on. c. When you use the Welcome screen to log on the local computer, you can log on using only one of the accounts displayed on the Welcome screen. d. The User Accounts tool allows you to replace the Welcome screen with a logon prompt that requires users to type their individual user names and passwords. The correct answers are A and D. B is not correct because the User Accounts tool allows you to disable the Guest account, but not to disable other user accounts. C is not correct because you can press C TRL+ALT+DELETE at the Welcome screen to access the traditional logon dialog box, which allows you to type in a user name. Questions and Answers 7-54 Chapter 7 Setting Up and Managing User Accounts 4. When you use the Computer Management snap-in to create a new user account, which check box do you select to prevent a new employee from using the new account until the employee starts working for the company? Account Disabled Lesson 4 Practice: Modifying User Account Properties Page 7-32 1. What happens? Why? A User Accounts dialog box appears with the message Windows Cannot Change The Password. This happens because you enabled the User Cannot Change Password option for User1. Lesson 4 Review Page 7-33 1. When can you select the Account Is Locked Out check box for a user and why? Never because the Account Is Locked Out check box is unavailable when the account is active and is not locked out of the system. The system locks out a user if the user exceeds the limit for the number of failed logon attempts. 2. Which of the following statements about local user account properties are correct? (Choose all that apply.) a. You can configure all of the default properties associated with each local user account using the User Accounts tool located in Control Panel. b. In Computer Management, the General tab in a user account’s Properties dialog box allows you to disable the account. c. In Computer Management, the General tab in a user account’s Properties dialog box allows you to select the Account Is Locked Out check box to prevent the user from logging on to the computer. d. You can use the Computer Management snap-in to configure all of the default properties associated with each local user account. The correct answers are B and D. A is not correct because the User Accounts tool only provides a limited subset of the available options for a user account. You must use the Computer Man- agement snap-in to access all options for a user account. C is not correct because you cannot select the Account Is Locked Out check box manually. This check box is selected automatically when an account is locked out. 3. Which of the following statements about user profiles are correct? (Choose all that apply.) a. A user profile is a collection of folders and data that stores the user’s current desktop environment, application settings, and personal data. b. A user profile contains all the network connections that are established when a user logs on to a computer. [...]... NTFS permissions are inherited through a folder hierarchy 1 Log on as User81, and then start Windows Explorer 2 In Windows Explorer, expand the Public\Library folder 3 Create a text document named USER81 in the Library folder 4 Log off Windows XP Professional 5 Log on as User82, and then start Windows Explorer 6 Expand the Public\Library folder 7 Attempt to perform the following tasks on the USER81 file:... 8-2 ■ Lesson 2: Assigning NTFS Permissions and Special Permissions 8-8 ■ Lesson 3: Supporting NTFS Permissions 8-2 3 Before You Begin To complete this chapter, you must have a computer that meets the minimum hardware requirements listed in the preface, “About This Book.” You must also have Microsoft Windows XP Professional installed on the computer 8-1 8-2 Chapter... folder’s Properties dialog box displays the Select Users Or Groups dialog box (see Figure 8 -4 ) Use this dialog box to add users or groups so that you can assign them permissions for accessing a folder or file The options available in the Select Users Or Groups dialog box are described in Table 8 -4 F08us 04 Figure 8 -4 Table 8 -4 Use the Select Users or Groups dialog box to add additional users and groups Select... the difference between built-in system groups and built-in local groups found on computers running Windows XP Professional? Give at least two examples of each type of group Built-in local groups give rights to perform system tasks on a single computer, such as backing up and restoring files, changing the system time, and administering system resources Some examples of built-in local groups are Administrators,... Permissions for the Folder 1 Log on as User82 2 Start Windows Explorer 3 Expand Local Disk (C:), and then expand the Public folder 4 Attempt to perform the following tasks on the USER81 text document: ❑ Modify the file ❑ Delete the file 5 Which tasks were you able to record and why? 6 Close Windows Explorer and then log off Windows XP Professional Exercise 6: Testing NTFS Permissions In this exercise, you... 14 Click OK to close the Permission Entry For Public dialog box 15 Click OK to close the Advanced Security Settings For Public dialog box 16 Click OK to close the Public Properties dialog box 17 Close Explorer and log off Windows XP Professional 8-2 0 Chapter 8 Securing Resources with NTFS Permissions Exercise 5: Testing the New NTFS Permissions for the Folder 1 Log on as User82 2 Start Windows Explorer... user or group, select a user and click Edit to display the Permission Entry For dialog box (see Figure 8-6 ) You can then select or clear the specific permissions, explained in Table 8-5 , that you want to change Lesson 2 Assigning NTFS Permissions and Special Permissions 8-1 1 F08us06 Figure 8-6 Table 8-5 Select special permissions by using the Permission Entry For dialog box Special Permissions Permission... tasks and why? 7 In the Public folder, re-create the text file named User81 8 Log off Windows XP Professional 8-1 8 Chapter 8 Securing Resources with NTFS Permissions 9 Log on as User82 and attempt to perform the following tasks on the USER81 text document: ❑ Open the file ❑ Modify the file ❑ Delete the file 10 Which tasks were you able to perform and why? Exercise 4: Assigning NTFS Permissions In this... Lesson 2 Assigning NTFS Permissions and Special Permissions 8-1 9 2 You are currently logged on as User82 Can you change the permissions assigned to User82 while logged on as User82? Why or why not? 3 Log on with a user account that is a member of the Administrators group, and then start Windows Explorer 4 Expand the Public folder 5 Right-click the Public folder, and then click Properties 6 In the Properties... able to ■ Identify the standard NTFS folder permissions ■ Identify the standard NTFS file permissions ■ Describe how Windows XP Professional uses access control lists (ACLs) ■ Explain how effective permissions are calculated when multiple sets of NTFS permissions are in effect ■ Explain how permissions inheritance is controlled Estimated lesson time: 30 minutes Standard NTFS Folder Permissions You . difference between built-in system groups and built-in local groups found on computers running Windows XP Professional? Give at least two examples of each type of group. Built-in local groups give. What is the difference between built-in system groups and built-in local groups found on computers running Windows XP Professional? Give at least two examples of each type of group. Lesson. computers running Windows XP Pro- fessional that are part of a domain? You should create it on one of the domain controllers. You should not use local user accounts on Windows XP Professional computers

Định dạng
Số trang	132
Dung lượng	1,04 MB