RELIABLE PAPERS

worksheet

Securing a Server

24. Press Ctrl+Prt Scr to take a screen shot of the Active Directory Users and Computers console, showing the Accounting01 OU and the objects you created in it, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

16. Press Ctrl+Prt Scr to take a screen shot of the Share and Storage Management console, showing the share you just created, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

17. Press Ctrl+Prt Scr to take a screen shot of the Budget Properties sheet, showing the Security tab and the three security principals you just added, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

18. On your worksheet, list the steps you must perform to correct the problem and enable the members of the Acctg01-Full and Acctg01-RW groups to modify the Report01 file.

Lab REview Questions

1. In Exercise 8.3, what would happen if you accidentally reversed the group memberships and tried to add the Budget01-Full group as a member of the Acctg01-Full group?

2. If Don Funk is hired as a full-time employee after his internship ends, what would you have to do to grant him the permissions to the Budget share that he needs?

3. In Exercise 8.4, what test could you perform to prove that your reason for BenM01’s and JohnE01’s inability to modify the Report01 file is correct?

Lab Challenge: Configuring Password Policies

The IT director is planning to deploy the Accounting department network as a separate domain, and she wants to impose more stringent password and account requirements on them. To complete this exercise, you must create a new Group Policy object in the contoso.com domain named Accounting01, where 01 is the number assigned to your computer, that enforces the following policies:

Users must change their passwords weekly.

Users can reuse any password for a period of four months.

User passwords must be ten characters or longer and include a combination of uppercase letters, lowercase letters, and numbers.

Users have three chances to log on correctly during a one-hour period, after which the account is locked until an administrator releases it.

Do not link the Group Policy object to an Active Directory object. Simply create the GPO. List the steps you performed in this process. Press Ctrl+Prt Scr to take screen shots of the Group Policy Management Editor console, showing the policy settings you configured, and then press Ctrl+V to paste the resulting image into the lab08_worksheet file in the page provided.

1