Apply Your Knowledge

On the 70-270 exam, you will be tested with questions that require you to know how to

Apply desktop settings with a user profile
Understand the NTuser.dat file
Enforce settings with a mandatory profile
Use the Files and Settings Transfer Wizard to move settings between two different computers
Use the Regional and Language Options applet to configure multiple languages, character and numerical formats, and apply keyboard layouts
Understand Windows Installer components
Deploy an application using Msiexec.exe
Assign or publish a Windows Installer application using Group Policy

This chapter's exercises can assist you in refining your expertise. To perform these exercises, you should have at least two client computers and an Active Directory domain controller connected on a network. To master the skills, you may want to practice deploying applications using Msiexec.exe and Group Policy, transferring the settings to a Windows XP Professional computer from a previous version of Windows through a null modem cable, and using a different keyboard layout.

Exercises

10.1 Creating a Mandatory Profile

In this exercise, you create a mandatory profile based on a user's local profile. You can perform this exercise with a single computer running Windows XP Professional.

Estimated Time: 10 minutes.

1.	Right-click My Computer and select Properties.
2.	Click the Advanced tab.
3.	In the User Profiles section, click Settings.
4.	Click to highlight the profile that you want to assign as a mandatory profile.
5.	Click the Copy button. The Copy To dialog box opens, as shown in Figure 10.13. Figure 10.13. You can use the Copy To dialog box to assign a mandatory profile.
6.	Type the path to the profile folder where this profile should be assigned in the Copy Profile To text box. Click OK.
7.	Open Windows Explorer and browse to the folder where the `NTuser.dat` file has just been copied.
8.	Click the Change button and ensure that the users who should have access to the profile are granted permission to use it.
9.	Rename the file to `NTuser.man`.

Review Questions

1.	What would happen if a user logged on to a computer for the first time and no roaming profile was configured for the user?
2.	Barry is a user who had a recent eye operation. He logs on to his computer and implements a new High Contrast Display setting so it is easier for him to use the computer. When he comes in the next day, he is forced to reapply the Display setting. Why? How can you resolve this problem?
3.	Do you need to use the Files and Settings Transfer Wizard Disk when you are transferring settings between two Windows XP computers? Why or why not?
4.	When should you use `Msiexec.exe` instead of Group Policy to deploy an application?
5.	Which Group Policy deployment method would provide an application option in the Add/Remove Programs applet in Control Panelassign or publish to users?

Exam Questions

You are a new desktop administrator for the Smith and Jones accounting department. Your boss would like to deploy a custom application to the accounting department's Windows XP desktops. He decides to create a GPO to deploy the application. After the installation is completed, some users who work at a remote site call to say that the application does not appear when they log on. Others report that the application is working fine. What do you do?

	A.	Apply the GPO to the OU for the remote site.
	B.	Enable the Global Policy Slow Link Detection policy.
	C.	Change the GPO so that it assigns the application to users, not computers.
	D.	Change the GPO so that it assigns the application instead of publishing it.

You are a network engineer hired by Single Jingles, a company that produces cellular telephones. Your current project is to deploy Windows XP throughout the network. The sales department includes three salespeople who travel to Tokyo, Paris, and Rome. These salespeople are multilingual and need to read and create documents in both U.S. English and the language local to each of these cities. They often need to switch back to English very quickly, because most of their email is from the United States. How do you configure their laptops?

	A.	Under the Languages options, configure the Language bar to be displayed.
	B.	In the Advanced options, select U.S. English as the language for non-Unicode programs.
	C.	In the Advanced options, configure a keystroke sequence to switch back to English.
	D.	In the Advanced options, configure a keystroke sequence to switch quickly between languages.

You are the network administrator for Glazers, Inc. The company produces windows for commercial buildings. With the recent boom in construction, plus a need for stronger building materials because of construction codes, Glazer's business has tripled during the past year, and the employee count has done the same. To be able to re-use the existing network resources, the company now holds three work shifts daily, with employees sharing each Windows XP desktop computer with two other employees during other shifts. On a nearly monthly basis, employees are moved to other locations and given new desktop computers to keep pace with the company's growth and reorganization. Users have complained recently that with every move to a new computer, they have to reconfigure their computers for their jobs. Some users have lost data. You want to allow users to customize their own desktops, as well as be able to keep their configurations when they move to other locations. What should you do?

	A.	Implement a domain-wide GPO to prevent access to the Display applet.
	B.	In the Power Users local group, remove the permission for modifying the Documents and Settings\All Users profile folder.
	C.	In Active Directory Users and Computers, edit each user's account properties Profile tab and type in a network path under Roaming profile.
	D.	In the local Documents and Settings folder, rename each user's `NTuser.dat` file to `NTuser.man`.

You are the network administrator for Glazers, Inc., with the same network configuration described in question 3. The desktop administrator for a remote site, which provides a workgroup for the desktop computers and a single workgroup member server, has called you with a problem. Some of the users have had problems with Start menu and desktop icons that should be available to all the computer's users. The administrator wants to know how to prevent users from changing these items, but wants to retain the right to change them himself. All users are members of the Power Users group; the admin is a member of the Administrators group. What should you recommend the administrator do?

	A.	Implement a GPO that prevents users from accessing all Control Panel applets.
	B.	Using Windows Explorer, change the sharing for the Documents and Settings\All Users folder, granting Full Control to the Administrators group and Read to the Power Users group.
	C.	Rename the Documents and `Settings\Default User\NTuser.dat` file to `NTuser.man`.
	D.	In the Control Panel System applet, Advanced tab, click Settings in the User Profiles section, click any profile, and click Copy To. In the Permitted to Use section, click the Change button and add the Administrator group to the profile.

You are the network administrator for Glazers, Inc. Your company has hired an average of 30 new users weekly. To provide each user with access to necessary resources, you have selectively logged on as each user account and made changes to that user's profile. This has taken several hours of work to perform every week. How can you lighten your workload?

	A.	Using Windows Explorer, copy `NTuser.dat` from a correctly configured user to the Documents and Settings\All Users folder on each computer.
	B.	Using Windows Explorer, copy `NTuser.dat` from a correctly configured user to the Documents and Settings\Default User folder on each computer.
	C.	Using the Control Panel System applet, Advanced tab, User Profile Settings button, change the type of each user's profile from Local to Roaming.
	D.	Using the Computer Management console, navigate to System Tools, Local Users and Groups, Users. Open the properties dialog for the Guest user account. Click the Profile tab and type in the path to the Documents and Settings\Default User folder.

You have been hired to deploy Office 2003 to 2,400 desktop computers at Wells, Inc. The desktop computers all run Windows XP Professional and are configured as Active Directory domain member computers. All users are granted domain user accounts and are members of the OFFICE security group. The computers are located in three OUsACC, HR, and SCI. The users are located in 44 OUs throughout the Active Directory. User accounts are often moved between OUs because the network administrator is in the middle of an Active Directory reconfiguration that will incorporate changes from the recent merger of Wells, Inc. with another company. You need to provide Office 2003 so that any user who logs on to these desktop computers will receive the Office 2003 application, but you do not want the application to be installed on any other desktop. The name of the Office 2003 Windows Installer file is DATA1.msi. What should you do? (Choose all that apply.)

	A.	Create a network share named \\SERVER\OFFICE, and provide all users read-only access to it and all Administrators Full control.
	B.	Run `msiexec /A D:\DATA1.msi` where D: is the CD-ROM drive letter and target \\SERVER\OFFICE as the location of the files.
	C.	Configure a roaming profile that includes a shortcut icon to run `msiexec /I \\SERVER\OFFICE\DATA1.msi` and apply the profile to the users of the 2,400 desktop computers.
	D.	Configure a GPO to deploy `\\SERVER\OFFICE\DATA1.msi` by assigning the application to computers.
	E.	Attach the GPO to the ACC, HR, and SCI OUs.
	F.	Configure a GPO to deploy `\\SERVER\OFFICE\DATA1.msi` by publishing the application to users.
	G.	Configure a GPO to deploy `\\SERVER\OFFICE\DATA1.msi` by assigning the application to users.
	H.	Attach the GPO to the 44 OUs containing the users who should have Office 2003.
	I.	Run msiexec `/A D:\DATA1.msi` where D: is the CD-ROM drive letter and target each local computer as the location of the files.
	J.	Force each desktop computer to reboot.

Which of the following actions will repair a failed installation of a Windows Installer application, where App.msi is the Windows Installer file? (Choose two.)

	A.	Right-click the `App.msi` file and select Repair.
	B.	Double-click the `App.msi` file.
	C.	Run `msiexec /A app.msi`.
	D.	Run `msiexec /R app.msi`.
	E.	Run `msiexec /F app.msi`.
	F.	Run `msiexec /I app.msi`.

You are the network administrator for Junior Black, a restaurant chain with 250 restaurants, each connected as a small remote site. You have deployed a Windows Installer application, assigning the application to each of the management computers at each site by using Group Policy. All these computers are in the same OU. Some of the installations have worked correctly; others have failed. You have found that the failed installations are connected to the network with the slowest links. The successful installations each have 256Kbps links or higher. Which of the following actions can you take to resolve this problem?

	A.	Enable a GPO to make computers wait for the network before logging on.
	B.	Run `msiexec /FV jb.msi`.
	C.	Enable a GPO to assign the application to users and not to computers.
	D.	Run `msiexec /FA jb.msi`.
	E.	Run `msiexec /FM jb.msi`.
	F.	Force a Group Policy refresh.

You are configuring a new Windows XP laptop for Joe, a traveling salesman. Axel is another salesman who has a Windows 2000 Professional laptop. Both of the laptops are configured as members of a workgroup. Joe wants to have exactly the same settings and files that Axel has on his computer. The only things that Joe does not want are the contents of the My Documents folder and Axel's Outlook mail contents. What is the fastest way to provide these settings to Joe?

	A.	Copy the `NTuser.dat` file from Axel's Documents and Settings\Axel folder to the Joe's laptop's Documents and Settings\Joe folder.
	B.	Open the Control Panel System applet. Click the Advanced tab. Click the Settings button under User Profiles. Click Axel's user account and click Copy To. Then click the Change button and select Joe as another user to access this profile.
	C.	Create a roaming profile for Axel and copy the `NTuser.dat` file to Joe's roaming profile.
	D.	Use the Files and Settings Transfer Wizard on Joe's computer to create a Wizard Disk. Run the wizard disk on Axel's computer to collect the settings, making sure to omit the My Documents folder and Outlook mail, and then return to Joe's computer to retrieve the settings collected on Axel's computer.
	E.	Use the File and Settings Transfer Wizard on Joe's computer to create a Wizard Disk. Run the Wizard Disk on Axel's computer to collect the settings, then return to Joe's computer to retrieve the settings collected on Axel's computer, making sure to omit the My Documents folder and Outlook mail.

Answers to Review Questions

1.	A local user profile is created with the user's account name below the Documents and Settings folder on the hard disk. This profile is pulled from the default user's profile.
2.	Barry has a mandatory roaming profile that loses his changes every time he logs off the network. You can resolve the problem by renaming the profile to `NTuser.dat`, logging on as Barry's account, changing to the new High Contrast display, logging off, and then renaming the profile back to `NTuser.man`.
3.	You do not need to use a Wizard Disk when you are transferring settings between two Windows XP Professional computers because both the computers have a Files and Settings Transfer Wizard application in the Accessories\System Tools menu.
4.	You can use `Msiexec.exe` to deploy a Windows Installer application when your computers are not connected to an Active Directory network.
5.	Publishing an application to users via Group Policy provides the user the option to install the application when using Add/Remove Programs in Control Panel.

Answers to Exam Questions

1.	A. The common denominator for the error is the remote site, and it is likely that the GPO was not attached to the computers at that site. You should apply the GPO to the site. Answers B, C, and D are all incorrect because the slow link detection policy could prevent software installation, and because assigning the policy to users versus computers is not the issue. Also, you would prefer to assign an application rather than publish it because assigning it ensures that a user receives the application. For more information, see the section "Using Group Policy to Deploy MSI Packages."
2.	C. To enable each user to quickly switch back to English, you should configure the keystroke sequence in Advanced options that allows them to do so. Other things that you should do include installing the other languages and keyboard layoutsJapanese, Italian, and French in the Languages tab. Answers A, B, and D are all incorrect options. Configuring the Language bar to be displayed does not create the keystroke sequence you need. Selecting U.S. English for non-Unicode programs does not provide a way to switch back to English. And configuring a keystroke sequence to switch between languages does not make it easy to move directly back to English. For more information, see the section "Configuring Multiple-Language Support for Users."
3.	C. For a dynamic environment like Glazers, Inc., you should create a roaming profile for each user on the network so that each time a user logs on, the appropriate roaming profile downloads from the network. When a user logs off, any changes are saved back to the profile on the network. Answer A is incorrect because preventing access to the Display applet does not allow a profile to move around the network with the user. Answer B is incorrect because restricting Power Users from changing the All Users profile folder does not affect users' profiles. Answer D is incorrect because it prevents users from being able to change their own profiles. For more information, see the section "Implementing Roaming Profiles."
4.	B. The All Users files apply to all users, but there is no need for a `NTuser.dat` file in the C:\Documents and Settings\All Users\ folder and therefore, the files applicable to all users cannot be manipulated the same way as a user's individual profile. To restrict access to anyone other than the admin, you must grant Read rights to any user outside of the Administrators group, who are all included in the Power Users group according to the scenario. Answer A is incorrect because restricting users from accessing Control Panel does not restrict access to the files under C:\Documents and Settings\All Users. Answer C is incorrect because the `NTuser.dat` file may not exist and does not affect the files held in the Start menu, desktop, and other subfolders of C:\Documents and Settings\All. Answer D is not correct because the `NTuser.dat` file may not exist. For more information, see the section "Establishing Mandatory Profiles."
5.	B. The Default User profile, `NTuser.dat`, is copied to each new user when the user logs on for the first time. To provide a customized profile for all new users, you should copy a correctly configured user's `NTuser.dat` to the Default User profile. Answer A is incorrect because the Default User profile is copied, not the All Users profile. Answer C is incorrect because it does not affect the profile initially provided to new users. Answer D is incorrect because it causes users to share the Default User profile and potentially cause undesirable changes to it. For more information, see the section "Configuring and Managing User Profiles and Desktop Settings."
6.	A, B, D, E, J. To deploy the Office 2003 application to the computers, you need to create a network share to hold the installation files, run an administrative installation of Office 2003 with the `msiexec /A` command, create a GPO that will deploy Office 2003, assign that GPO to computers because the desktop computersand not the usersmust have the application, make certain that each affected OU that contains the computers has the GPO attached to it, and finally reboot the computers so that they will install the application at next startup. Answer C is incorrect because it is an incorrect method for deployment. Answers F and G are incorrect because you want to publish the application to computers. Answer H is incorrect because you should attach the GPO to as few OUs and as high in the Active Directory tree as possible to make it easier to change in the future. Answer I is incorrect because you do not want to reference a CD-ROM for network users unless all users have been given the CD. For more information, see the section "Managing Applications by Using Windows Installer Packages."
7.	A, E. You can either right-click the `App.msi` file and select Repair from the shortcut menu, or you can run the command `msiexec /F app.msi` from the Run dialog box or command line. Answers B, C, and D are incorrect because double-clicking installs the application, there is no `/R` switch, and the `/A` switch performs a reinstallation of all files. For more information, see the section "Managing Applications by Using Windows Installer Packages."
8.	B. You should run `msiexec /FV jb.msi`. This command forces the files to download to the local computer hard drive and the installation to commence from the local cache, instead of trying to run the installation across the network link. Answer A is incorrect because it will slow down the computer further. Answer C is incorrect because this will not fix the problem with the network. Answers D and E are incorrect because they do not copy the files locally before beginning the repair of the installation. Answer F is incorrect because the group policy has already been successfully appliedthe problem resides with the installation, not the group policy. For more information, see the section "Managing Applications by Using Windows Installer Packages."
9.	D. Using the Files and Settings Transfer Wizard is the fastest way to apply the settings. The wizard can create a disk to use on non-Windows XP computers. When collecting settings, you can filter out or omit settings that you do not want to apply. Answers A, B, and C are incorrect because none copy the correct files and settings. Answer E is incorrect because it runs the process backward. For more information, see the section "Transferring Files and Settings between Computers."