What is the most likely reason the new GPO configuration did not apply to the two OUs?

A Quick Answer Key follows the Self Test questions. For complete questions, answers, and explanations to the Self Test questions in this chapter as well as the other chapters in this book, see the Self Test Appendix.

1. You have created and linked a single GPO to your Windows Server 2003 domain to apply various security settings to your client workstations, as well as redirecting the contents of each user's C:\Documents and Settings\%username%\My Documents folder to a central server location of \\FILESERVER1\DOCS\%username%\My Documents. This server share is backed up every night; no client systems are included in the backups.You have several users in a remote branch office that is connected to the corporate headquarters via a 128Kbps ISDN line. One of your branch users calls the help desk needing a file in his My Documents folder restored from backup after he deleted it accidentally.You are dismayed to find that his information does not exist on the FILESERVER1 share. Most other GPO settings have been applied to the client workstation, including event log auditing and account lockout settings. What is the most likely reason that the branch user's files have not been redirected to the central file server?

A. Folder Redirection settings are not applied by default when a user logs onto the network using a slow link.

B. The branch users do not have the Apply Group Policy permission assigned to them for the GPO.

w^fll C. You need to link the GPO to the OU that the user objects belong to, not just the domain.

D. The GPO is being applied synchronously when the branch users log onto their workstations.

2. You have created an MSI installer package to distribute GPMC to your help desk.You have added the package information to the User Configuration | Software Settings section of the Default Domain GPO, and you have enabled the Apply Group Policy permission to the HelpDesk global group.You've saved the GPMC.MSI file to the E:\PACKAGES directory of the W2K-STD Windows Server 2003 file server, as shown in the following figure.Your help desk staff is reporting that the GPMC software has not been installed on their workstations, despite several reboots. Each help desk staffer is a local administrator on his or her workstation and is able to access shared directories on this and other Windows Server 2003 file servers. From the information shown in the figure, what is the most likely reason that the MSI package is not being distributed?

A. The Apply Group Policy permission can only be applied to individual user accounts, not to groups.

B. You need to create a share for the E:\packages directory so that the help desk staff can access the MSI package over the network.

C. MSI packages must be stored in the SYSVOL share on a domain controller.

Software Installation settings need to be applied to the Computer Configuration section of a GPO, not the User Configuration section.

3. You have a test lab consisting of four Windows XP Professional workstations that you use to investigate new software packages and security settings before rolling them out to a production environment. This lab exists in a separate TEST domain with its own domain controller, DC1.TEST.AIRPLANES.COM.You are making many changes to security settings on the Default Domain Policy on DC1 and would like to test the results immediately so that you can implement the security setting on your production network as quickly as possible. What is the most efficient way to accomplish this goal?

A. Use GPOMonitor to indicate when the Group Policy objects perform a background refresh.

B. Update the GPO to force Group Policies to refresh every 60 seconds.

C. Reboot the test lab workstations after each change that you want to test.

D. Run GPUpdate.exe from the command line on the test workstations after each change that you want to test.

4. You have a new accounting software package that you would like to install for the Payroll OU of your Windows Server 2003 domain.You would like this software to be available to any user who logs onto each Windows XP Professional workstation in the payroll department.You create a new GPO and assign the MSI package to the Computer Configuration section, and then link the new GPO to the Payroll OU with the appropriate security filtering permissions.You send an e-mail to the payroll department staff instructing them to log off their workstations and log back in to prompt the software installation to begin.Your help desk begins to receive calls from the users in the payroll department, saying that the accounting package has not been installed, even though they have logged off and onto their workstations several times. What is the most likely reason that the software package has not been installed?

A. The workstations in the payroll department need to be rebooted before the software package will be installed.

B. Software Installation packages can only be assigned at the domain level.

C. The software can be installed using the Add New Programs section of the Add/Remove Programs Control Panel applet.

D. Logon scripts are running asynchronously; they must be reconfigured to run synchronously.

5. You are the network administrator for a Windows Server 2003 network that has a corporate headquarters and several remote sales offices, each connected to the main office via 56K dialup modems. After a recent bout of attempted hacker attacks at the remote sites, your firewall administrator has decided to block NetBIOS, ICMP, and IGMP traffic from entering or leaving any remote site. Shortly after this solution is implemented, you receive several complaints from users at the remote sites that the logon times to their Windows XP Professional workstations have increased dramatically, often timing out and forcing them to reboot their machines. What is the most likely reason that this is occurring?

A. Each remote site should have its own domain controller to handle logon processing.

B. Group Policy does not function in environments that include firewalls.

C. Windows XP Professional requires NetBIOS to connect to a Windows Server 2003 domain controller.

D. Group Policy is no longer able to detect slow network links.

6. You are a network administrator for an accounting firm with 200 employees that has been contracted to perform an audit of data stored in a proprietary 16-bit data entry application that was never upgraded to a 32-bit format. The application will only be used for the duration of this contract and does not have any option for a network or Terminal Services installation. How can you install this application on each workstation most efficiently?

A. Use a ZAP file published via a GPO to automate the installation process.

B. Contract a software developer to upgrade the application to an Active Directory-aware platform such as Visual Basic.

C. Send a broadcast e-mail with installation instructions and the location of the setup files to all users who require the software.

D. Install the software once on the domain controller and create a link to the program on each user's desktop.

7. You have recently begun a new position as a network administrator for a Windows Server 2003 domain.Your predecessor created a number of GPOs, and it seems as if each network user has different policy settings applied to his or her account.You would like to simplify the GPO implementation on your network, and you want to begin by creating a baseline report of exactly which GPOs are in effect for the various users on the network.What is the most efficient means of accomplishing this goal?

A. Use the Resultant Set of Policy snap-in to view the GPO settings for each user/computer combination on the network.

B. Use the Group Policy Results report in the GPMC to export the GPO settings of each user/computer combination to a single XML file for analysis.

C. Use the GPResults.exe command-line utility to generate a report for all users on the domain.

D. Export the Event Viewer Security logs from each workstation and collate the results for analysis.

8. You are the network administrator for a Windows Server 2003 domain with network resources from each department grouped into separate OUs: Finance, IT, Sales, Development, and Public Relations.You have assigned the MSI package shown in the following figure to the Development OU. User EMandervile is a telecommuting user who is transferring from development to public relations. What is the most efficient way to remove this application from EMandervile's workstation?

Deployment type T Published (* Assigned

Deployment options

Auto-install this application by file extension activation

JJninstall this application when it falls out of the scope of management

Do not display this package in the Add/Remove Programs control panel

V Install this application at logon

Installation user interface options r Basic f* Maximum

A. Visit EMandervile's home office and manually uninstall the application from his home workstation.

B. Redeploy the MSI package to the Development OU after moving EMandervile's user account.

C. Email EMandervile instructions to uninstall the application from his home office workstation.

D. Since "Uninstall this application when it falls out of the scope of management" is selected, the application will automatically be uninstalled after you move EMandervile's account from the Development OU to the Public Relations OU.

9. You have been reading about the new features offered by the GPMC and would like to use it to manage your Windows environment, shown in the following figure.Your administrative workstation is located in Domain A, and you have administrative control over Domain A, Domain B, and Domain C. Which of the following would allow you to use GPMC from your present location? (Choose all that apply.)

A. Install the GPMC on your existing Windows 2000 Professional workstation.

B. Upgrade your administrative workstation to Windows XP Professional, SP1, and install the necessary hotfix from Microsoft before installing the GPMC.

C. Install a Windows Server 2003 member server in Domain A, and install the GPMC on the member server.

D. Install the GPMC onto a Windows 2000 Server in Domain A, and use the GPMC from the server console.

10. Your Active Directory domain is configured like the one shown in the following figure. Which GPO settings would be applied to a computer located in the Marketing OU? (Choose all that apply.)

A. The Network Connections applet will be hidden.

Northeast Site

Default GPO No run line

Assign word processing software package Hide network connections Applet

Security Settings GPO Complex passwords

10 character minimum password length Audit successful and failed logon events Enforce

Marketing GPO Assign desktop publishing package

Block inheritance

Payroll GPO Assign accounting software package

A. The Network Connections applet will be hidden.

B. Successful and failed logon events will be recorded to the event log.

C. A desktop publishing software package will be assigned.

D. The Run line will not be visible.

11. You are the network administrator of the Windows Server 2003 forest shown in the following figure. Which of the following Password Policy values will be in effect for clients in the sales.north.biplanes.airplanes.com domain?

A. Six characters

B. Eight characters

C. Ten characters

D. Not defined

12. By default, how does Windows Server 2003 process GPO settings at startup and at logon?

A. Startup: Synchronous

B. Startup:Asynchronous

C. Logon:Asynchronous

D. Logon: Synchronous

13. Your Active Directory environment is configured as shown in the following figure, with two conflicting Enforces.Which setting(s) will be applied to a client in the Collections OU? (Choose all that apply.)

Northeast Site

Default GPO No run line

Assign Word Processing Software Package Hide Network Connections applet

Security Settings GPO Complex passwords

10 character minimum password length Audit successful and failed logon events Enforce

Finance GPO Assign desktop publishing package

Hide network connections applet Enforce

Collections GPO Assign accounting software package Enable network connections applet Enforce

A. The desktop publishing package will be assigned.

B. The Network Connections applet will be hidden.

C. The Network Connections applet will be visible.

D. The Run line will be hidden.

Lull

Continue reading here: Securing Remote Access and VPN Servers

Was this article helpful?