Exam Objectives Frequently Asked Questions

The following Frequently Asked Questions, answered by the authors of this book, are designed to both measure your understanding of the Exam Objectives presented in this chapter, and to assist you with real-life implementation of these concepts. You will also gain access to thousands of other FAQs at ITFAQnet.com.

1.	I want to set up Windows Server 2003 in the role of a Web server, but when I use the Configure Your Server Wizard, there isn’t a Web server role offered in the list. What should I do?
2.	My network consists of servers running Windows 2000 Advanced Server. It was my understanding that multiple objects could be modified in Active Directory, but I find that I’m unable to do so. Why is this?
3.	Why do Windows Server 2003 domain controllers use NetBIOS names in addition to DNS names?
4.	I want to apply security settings to computers after regular business hours so I don’t disrupt work being performed during the day. What tool should I use?
5.	I want to create a custom security template. Which programs could I use to create this file?
6.	I have created a custom security template and applied it to the Local Security Policy of workstations in a Windows Server 2003 domain. When users log on to the domain, the settings I changed in the Local Security Policy don’t take effect. Why is this?

Answers

1.	The Configure Your Server Wizard doesn’t offer a Web server role, but it can be set up through the application server role. You can also set up Internet Information Services (IIS) 6.0 through Add or Remove Programs in Control Panel. Adding IIS installs all of the basic features needed to implement a Web server.
2.	Different versions of Windows offer different features. Windows Server 2003 allows you to select multiple objects and change some of their common attributes at the same time. This ability wasn’t available in previous versions.
3.	NetBIOS names are used to provide backward-compatibility. They are used by pre-Windows 2000 computers and allow users of those operating systems to log on to Windows Server 2003 domains.
4.	Secedit is a command-line tool that allows you to configure machines using security templates. Because it is a command-line tool, it can be invoked through batch files and scripts, which you can schedule to run after regular business hours.
5.	Security Configuration and Analysis, Security Templates, Secedit, and Group Policy Object Editor are tools that come with Windows Server 2003 that can be used to create template files. You can use Security Configuration and Analysis to view an existing template and customize it to your needs. The Security Templates snap-in can be used to create new templates and modify existing ones. The Group Policy Object Editor allows you to review a GPO’s current settings and export them to a template file. Finally, Secedit can export settings to a template file from the command line.
6.	Settings in a GPO take precedence over those in the Local Security Policy. Any setting obtained from a GPO will override those on the local computer.