[单选题]You configure a Group Policy Object for the Marketing organizational unit (OU) to prevent users from accessing My Network Places and from running System in Control Panel. You want the Managers domain local group to be able to access My Network Places, but you still want to prevent them from running System in Control Panel.What should you do?

正确答案 ：D

Create a second GPO in the OU. Add the managers group to the access control list. Allow the managers group to read and apply the group policy. Disable the permission of the authenticated user group to read and apply the group policy. Configure the new GPO to allow access to My Network Places. Give the new GPO a higher priority than the original GPO.

解析：解析：Explanation:InthisscenarioweneedtocreateasecondGPOandapplyitonlytotheManagers.WemustallowaccesstoMyNetworkPlacesinthenewGPO.ThenwegivetheGPOhigherprioritythantheoriginalone.Incorrectanswers:A:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdisablethepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.B:WestillrequiretheoriginalGPOtoapplytothemanagers,aswewanttopreventthemfromrunningSysteminControlPanel.ThereforeweshouldnotdenythepermissionofthemanagersgrouptoreadandapplytheGroupPolicy,asthiswillresultintheGPOnotbeingappliedtotheManagers.C:WeneedtoallowtheManagersaccesstoMyNetworkPlaces.ThatmustbeconfiguredinthesecondGPO.

[单选题]You are the administrator of your company's network. A user named Paul in the service department has a Windows 2000 Professional computer. Paul needs to access the files that are in a shared folder on his computer. A local group named Sales has permissions to access the data. Paul is a member of the Sales local group but he cannot access the file he needs.What should you do?

正确答案 ：C

Remove Paul from any other group that has been explicitly denied access to the Sales folder.

解析：解析：Explanation: The Sales group, which Paul is a member of, has permission to access the files. However, Paul still cannot access the files. It would seem that Paul has a permissions conflict. A user can be granted file permissions in a number of contexts: as a user or as a member of a user group. When a user has different file permissions in multiple contexts, the most restrictive permission is applied. Furthermore, the deny permission overrides all other permissions. As Paul does not have access to the file you must therefore assume Paul has explicitly been denied access to the file in some context, as member of one or more groups that have been denied access to the file. You would thus have to remove Paul from such a group so that the restriction is not applied to Paul.

[单选题]You plan to install Windows 2000 Server on 10 new computers. These servers will provide file and print services in branch offices of Ezonexam.com. The company wants each branch office to purchase its own copy of Windows 2000 Server, and the installation in each branch office should use the serial number associated with the branch office's own copy.You want to install, configure, and test Windows 2000 Server on these computers at the main office before shipping the computers to the branch offices. You want users in the branch office to enter the computer names and serial numbers when they receive the computers.

正确答案 ：D

Install Windows 2000 Server on the computers, and then use Setup Manager to create a sysprep.inf file for sysprep.exe. Place the sysprep.inf file on the computers and run the sysprep-nosidgen command.

解析：解析：Explanation: To install Windows 2000 Server on different computers using different serial numbers, we would have to install Windows 2000 Server on one computer and then use sysprep to create a sysprep.inf file. We can the use the sysprep-nosidgen command to prevent the computers SID from being replicated: the users will enter computer names and serial numbers when they install the clone.

[单选题]You are the administrator of Ezonexam.com's Windows 2000 network.Your computer is configured to use both Windows 2000 Professional and Windows NT Workstation 4.0 Service Pack 3. Your computer has three hard disks: Disk 0, Disk1, and Disk2. Windows NT Workstation 4.0 is installed on Disk 0. Windows 2000 Professional is installed on Disk1. You want to store your project files on Disk2. You configure Disk2 as a basic volume and format the volume as NTFS in Windows 2000 Professional. You then start Windows NT Workstation 4.0. You find that you cannot access your project files.

正确答案 ：C

Upgrade Windows NT Workstation 4.0 to Service Pack 4 or later.

解析：解析：Explanation: Windows 2000 Professional uses the NTFS 5.0 file system while Windows NT Workstation 4.0 uses the NTFS 4.0 file system. Windows NT Workstation requires Service Pack 4 or later to be able to use the NTFS 5.0 file system.

[多选题]You recently upgraded all Windows NT Workstation 4.0 computers to Windows 2000 Professional. You want to give a new employee named Maria the ability to back up files, share resources, and install programs on a client computer that she shares with other users. You do not want Maria to be able to read other users' files.What should you do to accomplish these goals? (Choose all that apply)

正确答案 ：CE

Add Maria's user account to the Power Users group.

Add Maria's user account to the Backup Operators group.

解析：解析：Explanation: By adding Maria's user account to the Power Users group Maria will inherit the ability to share resources and install programs on the computer. To grant Maria the ability to backup files she must be added to the Backup Operators group, which has the permissions to backup files. As a member of this group Maria will be able to backup files as she will inherit those rights by virtue of being a member of that group. Maria will not have permissions to read the users' files as neither the Power Users group nor the Backup Operators group have the permissions to read other users' files.

查看原题