Microsoft 070-290 : Managing and Maintaining a Microsoft Windows Server 2003 Environment

Your network consists of a single Active Directory domain. All servers run Windows Server 2003 Service
Pack 2 (SP2).
All client computers run Windows XP Professional Service Pack 3 (SP3).
You have an organizational unit (OU) named Accounting. You create a Group Policy object (GPO) and link
it to the Accounting OU.
You join a new client computer to the domain.
You discover that the new client computer fails to receive the settings from the new GPO. You need to
ensure that the new GPO is applied to the new computer.
What should you do?

• A. Move the computer account to the Accounting OU.
• B. Modify the Managed By attribute of the computer account.
• C. Modify the Location attribute of the computer account.
• D. Enable the Trust computer for delegation option on the computer account.

The Certidea.com network consists of a single Active Directory domain named Certidea.com.
All servers on the Certidea.com network run Windows Server 2003 and all client computers run Windows
XP Professional.
All Certidea.com executive's user accounts are members of a global group named Execs.
The Chief Executive Officer named Rory Allen creates a folder named ExecData on a server named
Certidea-SV2.
ExecData is to be a shared folder with all executives granted the ability to review employee documents.
Other executives must be able to browse and read the documents in ExecData, but they are not to have
any other permissions to the shared folder.
You have received instruction from the CIO to add the Execs global group to the Access Control List (ACL)
on the Security tab for the ExecData and configure permissions for the shared folder while making sure not
to grant any unnecessary permissions.
How will you accomplish the task?

To answer, configure the appropriate option or options in the dialog box in the work area.

For managers to be able to browse and read, documents that are in the shared folder, you should assign
the allow Read .Execute, List Folder Contents and Read permissions.
NTFS Folder Permissions are as follows:
1.Read -Enables objects to read the contents of a folder, including file attributes and permissions.
2.Write - Enables objects to create new files and folders within a folder, write attributes and extended attributes on files and folders, and can read permissions and attributes on files and folders.
3.List Folder - Gives objects the same rights as the Read permission, but also Contents enables the object to traverse the folder path beneath the folder where this permission is applied.
4.Read .Execute - Gives objects the same rights as the List Folder Contents permission, but also enables the object to execute program files stored in the folder.
5.Modify - Gives the object the same permissions as the Read, Write, List Folder Contents, and Read .Execute permissions, but also enables the object to delete files and folders within the designated folder.
6.Full Control - Gives objects full access to the entire contents, including the capability to take ownership of files and change permissions on files and folders.

You are a network administrator for your company. You manage a computer named Server6 that runs
Windows Server 2003 with the default settings.
You install Terminal Services on Server6. You attempt to connect to Server6 by using the URL http://
Server6/Tsweb.
You cannot connect to Server6. You need to be able to access Terminal Services on Server6 by using
Internet Explorer 6.0.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

• A. Install IIS.
• B. Create a new Web site named Tsweb.
• C. Install the Remote Administration IIS subcomponent.
• D. Create a new virtual directory named Tsweb.
• E. Install the Remote Desktop Web Connection IIS subcomponent.

You are the network administrator for your company. Your network consists of a single Active Directory
domain. All network servers run Windows Server 2003.
Each domain controller contains one disk that is configured with both the system partition and the boot
partition.
Every day, you use custom software to perform a full backup of user profiles and user data.
The custom backup software provides a bootable floppy disk that includes the drivers for the backup
media.
Every Sunday, you run the Automated System Recovery (ASR) wizard on your domain controllers in
conjunction with removable backup media.
Data is backed up in a file named Backup1.bkf. One Monday morning, you install a new application on a
domain controller named DC1.
When you restart DC1, you receive the following error message:
"NTLDR is missing. Press any key to restart."
You need to bring DC1 back online as quickly as possible.
What should you do?

• A. Restart DC1 by using the bootable floppy disk. Copy the contents of Backup1.bkf from the backup media to C:\winnt. Restart DC1.
• B. Restart DC1 by using the bootable floppy disk. Copy the contents of the ASR disk to C:\. Restart DC1.
• C. Restart DC1 by using the installation CD-ROM. Reinstall the operating system and restore the contents of the latest full backup by using the Restore wizard. Restart DC1.
• D. Restart DC1 by using the installation CD-ROM. Restore the contents of Backup1.bkf by using the ASR disk. Restart DC1.

You are the network administrator for your company. The network consists of a single Active Directory
domain. All network servers run Windows Server 2003.
Some client computers run Windows 2000 Professional, and the rest run Windows XP Professional.
All user accounts in the sales department are located in the Sales organizational unit (OU).
To store roaming user profiles, you create a shared folder named Profiles on a member server named
File1.
You assign the Allow - Full Control permission on the Profiles folder to the Everyone group.
Now you need to create roaming user profiles for the user accounts in the Sales OU.
What should you do?

• A. Select all user accounts in the Sales OU. Modify the account properties to specify \\File1\Profiles\%username% as the profile path.
• B. Create a Group Policy object (GPO) and link it to the Sales OU. In the User Configuration section of the GPO, configure Folder Redirection to use \\File1\Profiles.
• C. Create a Group Policy object (GPO) and link it to the Domain Controllers OU. In the User Configuration section of the GPO, configure Folder Redirection to use \\File1\Profiles.
• D. Select all user accounts in the Sales OU. Modify the account properties to specify \\File1\Profiles as the profile path.