Apply Your Knowledge


Exercises

10.1. Using the gpresult tool

You just configured and applied a new GPO for your member servers. You need to make sure that it has been applied properly and is not in conflict with other GPOs. Because you haven't installed the Group Policy Management Console yet, you need to do it with command-line tools.

Estimated Time: 10 minutes

1.

Log on to one of your member servers as Administrator.

2.

Open a command window.

3.

Enter the following command: gpupdate /Force. This command will force a refresh of all GPOs to make sure that all the applicable GPOs are loaded.

4.

Enter the following command: gpresult /scope computer /v.

5.

The output of the command will appear in the command window.

Exam Questions

1.

You are the network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain. The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

You have just finished adding 20 new users, assigned them to a new OU, and assigned a couple of GPOs with several user-related configuration settings to that OU. You want to make sure that the GPOs are being applied correctly and that there are no conflicts. What should you do?

A.

Run the gpresults command-line tool with the /user parameter.

B.

Run the Group Policy Results Wizard in the Group Policy Management Console.

C.

Run the gpupdate command-line tool.

D.

None of the above.


2.

You are the network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain. The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows 2000 Professional.

A week ago, you added 20 new users, assigned them to a new OU, and assigned a couple of GPOs with several user-related configuration settings to that OU. You stop by the department and notice that the settings have not taken effect. What should you do to troubleshoot the problem?

A.

Run the gpresults command-line tool with the /user parameter.

B.

Run the Group Policy Results Wizard in the Group Policy Management Console.

C.

Run the gpupdate command-line tool.

D.

None of the above.


3.

You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

You have decided to implement Folder Redirection for your users' My Document folders. You configure the GPO and link it to your test OU. However, when you log on to your Windows XP Professional test machine, you see that the My Documents folder is still pointing to your local hard drive. What should you do to correct the problem?

A.

Log off, then log back on again.

B.

Run the OUupdate command-line tool.

C.

Move the settings to the Default Domain policy.

D.

Manually change the settings for My Documents.


4.

You are the network administrator for your company. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional.

A user has called and requested to have a software application installed on her PC. You're too busy to do it yourself, so you add the user's account to the local Power Users group on her machine so that she will have the necessary permissions to install the software.

The next morning when she tries to install the software, she gets an error message indicating that she doesn't have the appropriate permissions. When you check her PC, you see that she is no longer a member of the Power Users group. What is the cause of this problem?

A.

She is not a member of the Local Administrators group.

B.

You have Enforced Groups enabled.

C.

She is not a member of the Software Installers group.

D.

You have Restricted Groups enabled.


Answers to Exam Questions

1.

D. You will not be able to get any data for a user who has never logged on. This is because most user policies cannot be applied until the user logs on at least once. In this case, neither the gpresult tool nor the Group Policy Results Wizard would have any user data. The gpupdate tool is used only for refreshing Group Policy. See "GPResult."

2.

A. The only solution is to run the gpresult command-line tool. The Group Policy Results Wizard in the Group Policy Management console doesn't support Windows 2000 clients. The gpupdate tool is used only for refreshing Group Policy. See "Group Policy Results."

3.

A. Because of the fast user logon feature in Windows XP, you might have to logon 2 or 3 times before the Folder Redirection policy is applied. Moving the settings to the Default Domain policy is not necessary, and typically not a good idea, as is changing the settings manually. The OUupdate tool doesn't exist. See "Configuring Folder Redirection."

4.

D. The Restricted Groups feature allows an administrator to control the membership of the local groups on workstations and member servers. The administrator is able to control the membership in the group by specifying the members of the group in the GPO. Any additional members that may have been added to the group are removed during the Group Policy refresh. Because the PC sat overnight, it's likely that the Group Policy was refreshed, thereby removing her user account from the Power Users group. See "Restricting Group Membership."

Suggested Readings and Resources

1. Group Policy Management Console Step-by-Step Guide. Microsoft Corporation. http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/directory/activedirectory/stepbystep/gpmcinad.mspx.

2. Group Policy Resource Center. http://www.gpanswers.com/.

3. How to Use the Group Policy Results (gpresult.exe) Command Line Tool. Microsoft Corporation. http://www.microsoft.com/windowsxp/using/setup/expert/gpresults.mspx.

4. Morimoto, Rand, Noel, Michael, Lewis, Alex. Microsoft Windows Server 2003 Unleashed R2 Edition. Sams Publishing, 2006. ISBN 0672328984.

5. Performing Resultant Set of Policy Queries with the GPRESULT Tool. WindowsNetworking.com. http://www.windowsnetworking.com/articles_tutorials/Resultant-Set-Policy-Queries-GPRESULT.html.

6. Windows Server 2003 Deployment Guide. Microsoft Corporation. http://technet2.microsoft.com/WindowsServer/en/Library/c283b699-6124-4c3a-87ef-865443d7ea4b1033.mspx?mfr=true.

7. Windows Server 2003 Resource Kit. Microsoft Press, 2005. ISBN 0735614717.




MCSA. MCSE 70-290 Exam Prep. Managing and Maintaining a MicrosoftR Windows ServerT 2003 Environment
MCSA/MCSE 70-290 Exam Prep: Managing and Maintaining a Microsoft Windows Server 2003 Environment (2nd Edition)
ISBN: 0789736489
EAN: 2147483647
Year: 2006
Pages: 219
Authors: Lee Scales

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net