正确答案: D

Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.

题目：You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.What should you do?

解析：解析：Explanation:InthisscenarioweneedtocreateasecondGPOandapplyitonlytotheManagers.WemustallowaccesstoMyNetworkPlacesinthenewGPO.ThenwegivetheGPOhigherprioritythantheoriginalone.Incorrectanswers:A:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdisablethepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.B:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdenythepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.C:WeneedtoallowtheManagersaccesstoMyNetworkPlaces.ThatmustbeconfiguredinthesecondGPO.

查看原题

举一反三的答案和解析：

[多选题]You want to upgrade a Windows NT Server 4.0 computer named Server34 to Windows 2000 Server. Server34 is a member server in a Windows 2000 domain named marketing.fabrikam.local. The domain runs in native mode.You want to change the role of Server34 from a member server to a domain controller in the same domain. What should you do? (Choose Two)

D

in the marketing domain.

解析：解析：Explanation: To upgrade a Windows NT 4.0 member server to a Windows 2000 Domain Controller we must first upgrade the Windows NT 4.0 member server to Windows 2000 Server and then install Active Directory Services through the Active Directory Installation Wizard, which can be started with the DCPROMO.EXE command or by the Configure Your Server utility in Administrative tools.

[单选题]You are the administrator of your company's network. An employee named Mark is leaving the company. A new employee named Eric has been hired to replace him.Mark has a local user account on a Windows 2000 Professional computer. Mark has rights to multiple files and folders on the computer.

Rename Mark's user account to Eric and change the account password.

解析：解析：Explanation: A user account and the permission and rights attached to them can easily be transferred to another user by renaming the account and changing the password. By renaming Mark's user account and by changing the password, Eric will have the same rights and permissions as Mark had, and Mark will not be able to use his old account. This provides the solution with least amount of administrative effort.

[单选题]You are the administrator of a Windows 2000 Server network. On each server, you format a separate system partition and a separate boot partition as NTFS.Several months later, you shut down one of the servers for the maintenance. When you try to restart the server, you receive the following error message "NTLDR is missing. Press any key to restart".

Start the computer by using the Windows 2000 Server CD-ROM and choose to repair the installation. Select the Recovery Console and copy the NTLDR file on the CD-ROM to the root of the system volume.

解析：解析：Explanation: If the boot sector cannot find NTLDR, Windows 2000 cannot start. This can be caused by moving, renaming, or deleting Ntldr, corruption of Ntldr, or corruption of the boot sector. Under these circumstances, the computer might not respond to input or might display an error message. The Recovery Console can be used to restore the ntldr.exe file. This process would not create any other side effects.