1. [单选题]You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.What should you do?
A. Add the managers group to the access control list of the GPO. Disable the permission of the managers group to read and apply the group policy.
B. Add the managers group to the access control list of the GPO. Deny the permission of the managers group to read and apply the group policy.
C. Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to apply the group policy. Deny the authenticated users group permission to read and apply group policy. Configure the new GPO to deny the ability to run System in Control Panel. Give the original GPO a higher priority than the new GPO.
D. Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.
2. [单选题]You are the administrator of a Windows 2000 network. Your network includes 75 Windows NT Workstation 4.0 computers. You are adding 50 new PXE-compliant computers to the network. The hardware on each computer is configured identically.You are using a RIS image to deploy Windows 2000 Professional to the 50 computers. You successfully install Windows 2000 Professional on the first 10 computers. However, you cannot install Windows 2000 Professional on remaining 40 computers.
A. What should you do?
B. Configure the DHCP scope to add additional IP addresses.
C. Run Rbfg.exe from the RemoteInstall\Admin folder on the RIS server.
D. Modify the startup sequence in the CMOS of the remaining computers.
E. Create computer accounts on the remaining computers in the Active Directory.
3. [单选题]You are the administrator of your company's network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs.What should you do?
A. Grant Paul NTFS permission so that he can access any parent folder to files in the shared folder.
B. Share the Sales folder and grant Paul shared folder permission to access the shared Sales folder.
C. Remove Paul from any other group that has been explicitly denied access to the Sales folder.
D. Delete the Sales local group and recreate it. Add individual user accounts from the Sales department back into Sales local group.
