Permissions
GPOs
Groups
Users
Rules
100
Do this to ensure that every IT user account can be accurately audited by the Security log.
What is Create unique administrator level user accounts for each administrator. Then ensure that each administrator has only the rights and permissions they need to do their job.
100
You set log on hours for a user. Explain what happens when the user is still logged in at the end of the set time.
What is The user remains logged on. It does not forcibly log the user off?
100
You have deny permissions applied to a group. The group is changed to a distribution group. List the permissions applied.
What is none? The permissions no longer apply.
100
Use for the |more command in PowerShell
What is results that fill the screen will pause at the end of a page and wait for any key press to continue to the next page?
100
GPO tab which shows where a GP is linked.
What is the scope tab?
200
Command line command used to create a new user account.
What is net user /ADD?
200
Alternative an administrator can use to 'lock out' a user account.
What is disable the user account?
200
Group scope that can be changed to universal group.
What is domain local and global groups can be changed to universal but cannot be changed to any other scope.
200
Processing order for Group Policy
What is LSDOU?
200
Method for saving a GPO.
What is your GPO is saved when you click okay or apply?
300
The difference between net user and dsadd user.
What is net user creates a local user. dsadd user adds a domain user?
300
Time when a user joined to a new group will receive new rights or permissions.
What is at next logon?
300
Method used to launch the AD module for Windows PowerShell.
What is enter a command that the shell recognizes as an Active Directory cmdlet. The module will load automatically.
300
Name for assigning a GPO.
What is linking?
300
Two basic conflict-resolution rules for GPOs.
What is Rule 1 Listen to the last policy that you heard from. Rule 2 Execute policies from the bottom up, as they appear in the GUI?
400
The difference between DN and CN.
What is DN describes where in Active Directory the user account object is created and how it is named. The Component Name (CN) is the name of an object?
400
Group type which is used to group a number of objects together that will be addressed collectively.
What is a distribution group?
400
Use for the -confirm flag in PowerShell.
What is PowerShell will seek confirmation before executing the command?
400
Explain "Group Policies are All or Nothing".
What is a GPO linked to a domain cannot be selectively applied?
400
Accounts included in the Authenticated Users group.
What is all users and computers except the guest account?
500
The purpose of the Remote Control Tab on the user account properties.
What is - It allows administrators to control how an administrator can interact with a user’s Remote Desktop Services session?
500
The group which is stored in the global catalog.
What is a universal group?
500
Use for the -reset flag in PowerShell for password updates.
What is you must supply the old password and the new password?
500
Services used for Group Policy replication.
What is KCC and ISTG?
500
Use this to ensure there are no conflicts with GPOs from the parent domain.
What is block policy inheritance?
M
e
n
u