正确答案: E

Create a Windows 2000 Group Policy that denies user access to My Network Places.

题目：You are the administrator of a Windows 2000 Active Directory network. The network consists of a single domain. The domain includes 20 Windows NT Workstation 4.0 client computers. All other client computers are Windows 2000 Professional computers.You create a Windows NT 4.0 default user policy on the Windows 2000 Server computer that is configured as the PDC emulator. This default user policy denies access to Network Neighborhood. You then install Terminal Services on one of the servers and Terminal Services Client on the 20 Windows NT Workstation client computers.

解析：解析：Explanation: Windows NT 4.0 system polices affect computers running Windows NT 4.0. The Windows NT computers in this scenario are being used as Terminals for the Windows 2000 Server computer that is running Terminal Services. In effect the Windows NT clients are running locally on the Windows 2000 Server. The restriction must be applied on the Windows 2000 Server. This can be done by using a group policy.

查看原题

举一反三的答案和解析：

[多选题]You are the administrator of several SQL Server 2000 computers. A data Transformation Services (DTS) package uses native OLE DB providers to transfer data between the servers. Connection details for the servers are specified in .udl files. The .udl files are frequently updated as connection details change.You want to distribute the DTS package as a file to developers in your company. You want to make sure connection details are available to developers who receive the DTS package.

Enable the Always read properties from UDL file option in the Connection Properties dialog box.

Make the .udl files available on a network share.

解析：解析：Explanation:

[多选题]You have stored confidential financial data in a shared folder named AccSecured on your Windows 2000 Professional computer. Your company hires an intern named Richard. You create a subfolder named intern, which Richard needs to access. You want to allow Richard access to the intern subfolder only.You create a user account named intern. You want to allow the intern user account the ability to update, create, and delete files within the intern folder. You need to prevent Richard from accessing any other files or folders within the AccSecured folder.

Allow the intern user account modify permissions on the intern subfolder.

Allow the intern user account traverse folder/execute file permission on the AccSecured folder.

解析：解析：Explanation: The traverse folder/execute file permission" enables Richard to traverse the AccSecured folder to reach the intern folder, while the modify permissions on the intern folder allow Richard to modify information in the intern subfolder.

[单选题]You are the administrator of your company's network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs.What should you do?

Remove Paul from any other group that has been explicitly denied access to the Sales folder.

解析：解析：Explanation: The Sales group, which Paul is a member of, has permission to access the files. However, Paul still cannot access the files. It would seem that Paul has a permissions conflict. A user can be granted file permissions in a number of contexts: as a user or as a member of a user group. When a user has different file permissions in multiple contexts, the most restrictive permission is applied. Furthermore, the deny permission overrides all other permissions. As Paul does not have access to the file you must therefore assume Paul has explicitly been denied access to the file in some context, as member of one or more groups that have been denied access to the file. You would thus have to remove Paul from such a group so that the restriction is not applied to Paul.

[单选题]Ezonexam uses static TCP/IP addressing for its servers. You are installing Windows 2000 Server on a new computer named VE32. VE32 needs to join an existing Windows 2000 Active Directory domain named Ezonexam.com. While installing VE32 you are unable to join the existing domain. You use another Windows 2000 Server to attempt to create a computer account for the new server in the domain. When attempting to create the new computer account you receive the following message.Active Directory Service

Restart the domain's RID master server.

解析：解析：Explanation: The domain controller assigned the RID master role allocates sequences of relative IDs to each of the various domain controllers in its domain. At any time, there can be only one domain controller acting as the RID master in each domain in the forest.