Nt1330 Unit 5 Study Guide

Lab 5 – CITM315 – RAHUL GOPAL 940758642
PART 1
Question 1) Create the following OU structure below your Dovercorp012.

Question 2) Create two global groups HRMGR012 and SOUTHMGR012 in HR012 and South012 OUs.

Question 3) Create two users Mikexxx and Suexxx and make them member of HRMGRxxx

Question 4) Create two users Paulxxx and Cathyxxx and make them member of SOUTHMGRxxx group.

Question 5) Create Normanxx, Jamesxxx and Parisxxx in Northxxx OU

Question 6) Add the following attribute to Mikexxx & Suexxx (you need to find proper command parameters for the following attributes)

Question 7) Using a proper command delete Jamesxxx

Question 8) Create a Computer under HRxxx OU called WSxxx.

Question 9) Create A domain
Question 13) Login as Mikexxx with his assigned password (you need to know how to login as a new user).

Question 14) Right click on Mikexxx user and make a print screen that shows his profile (indicating his assigned home directory).

Part 2
1.
The two types of access control lists are Discretionary (DACL) and System (SACL).

DACL is a list of Access Control Entries (ACE) that store the information about which user(s) has access to a secure object, such as a file.

SACL logs the attempts to access a secure object. This is used to audit files to see who has attempted to access files that they do not have permission for.

2.
Active Directory in Windows Server 2008 houses information about:
a) Computers in the domain
d) User
The exception to this would be if the permissions on /bar were changed to a more strict setting. These settings will be able to manage access to resources for network and local users.
Share permissions: The shared permissions are only applicable to users that are accessing a file over the network. If the user is local administrator to the server (or workstation) the directory resides on that user would be able to access.
4. You are managing a Windows Server 2008 Standard edition which has the File Server role added. You explicitly gave a user “Modify” access to a file. However, when this user tried to append data to that file, he got access denied message. What might be the problem?
This could happen for multiple reasons, the user could either have conflicting permissions or there could be multiple users manipulating the file. The user may have modify permissions in NTFS but the share folder permissions may be stricter, read-only; the most restrictive permissions takes precedence. For the user to be able to modify the file, the permissions should be loosened. The problem may also be that another user modified the file while our user had the file open, this would prevent the file to be modified. The user can save another copy of the file and re-write the original file