Objective 4.3: Troubleshoot Security Settings and Local Security Policy

As a DST, you will typically not be responsible for configuring security policies, but you will need to troubleshoot issues related to security. Large companies look for ways to centralize administration and simplify the management of hundreds of users by the use of security settings and policies. These security settings make it easier to restrict user access and to control password security as well as logon and audits. A security policy can be configured and applied to a domain or an organizational unit as opposed to individuals. As a DST, you want to be aware of security policies and how they can affect an individual’s ability to access a resource or log on to a computer.

To answer the questions in this objective, you should know how local security policies and security settings function and the effect they can have on your users. You should also be aware of several tools that are used in the application of security policies, such as Security Configuration and Analysis and Resultant Set of Policy (RSoP).

Objective 4.3 Questions

1. You are a DST for a large company that is configured as a Windows 2003 domain. All users are running Windows XP Professional. A user is attempting to execute the Run command at his workstation, but it is unavailable. No local security policies are in effect on his computer. He wants you to tell him what is wrong. What is a possible reason for this problem?

   1. There might be a domain policy that is restricting the user from using certain commands.

   2. The user might have deleted the Run command from his computer.

   3. The Run command has been corrupted.

   4. The user needs to run the Security Configuration And Analysis utility.

2. What tool can be used to verify your security settings and make recommendations when problems are detected?

   1. Security Policy Wizard

   2. Security Configuration And Analysis

   3. Local Policy Settings Wizard

   4. System Monitor

3. You are a DST for a small art supply store. A user tells you that she is unable to run several computer programs installed on her Windows XP Professional computer. You suspect that multiple policies might be configured for her computer, and you want to see which ones might be preventing her from accessing resources. What command or utility can be used to see which policies are being applied to her computer?

   1. Resultant Set of Policy (RSoP) tool

   2. Local Policy Wizard

   3. poledit

   4. configpol

Objective 4.3 Answers

1. Correct Answers: A

   1. Correct: A domain-level policy would overrule any local policies configured on the local computer.

   2. Incorrect: It is unlikely that the user deleted the Run command. Typically, a user will not have access to a resource, rights to perform certain actions, or the ability to run specific applications because of a local, site, domain, or organizational unit policy preventing the user from doing so.

   3. Incorrect: In this example, the most likely reason the Run command is not available for the user is because of a security policy.

   4. Incorrect: In this example, the most likely reason the Run command is not available for the user is because of a security policy.

2. Correct Answers: B

   1. Incorrect: There is no such wizard. Security Configuration And Analysis is the tool that can be used to analyze security settings.

   2. Correct: Security Configuration And Analysis is the tool used to analyze your system security settings.

   3. Incorrect: There is no such wizard. The tool used to analyze security settings is the Security Configuration And Analysis console.

   4. Incorrect: System Monitor is the tool used to monitor and collect data about system resources, such as memory, processor, and disk usage. Security Configuration And Analysis is the tool used to analyze your system security settings.

3. Correct Answers: A

   1. Correct: Resultant Set of Policy (RSoP) can be run to determine which policies are applied to a workstation.

   2. Incorrect: There is no such wizard. Resultant Set of Policy (RSoP) is the best choice if you want to determine the policies applied to the user’s computer.

   3. Incorrect: Resultant Set of Policy (RSoP) is the best choice if you want to determine the policies applied to the user’s computer.

   4. Incorrect: There is no such utility. Resultant Set of Policy (RSoP) is the best choice if you want to determine the policies applied to the user’s computer.