Exercises Exercise 5.1 Creating a custom MMC In this exercise, you create a custom MMC. This MMC is for an enterprise administrator responsible for managing the configuration of sites, domains, and trusts. Estimated Time: 20 minutes 1. | From the Start menu, select Start, Run. Type MMC into the field and click OK.
| 2. | The MMC appears. Select File and then Add/Remove Snap-In from the Console menu.
| | | 3. | The Add/Remove Snap-in dialog box appears. Click the Add button.
| 4. | The Add Standalone Snap-In dialog box appears. Select the Active Directory Sites and Services snap-in and then click the Add button.
| 5. | Select the Active Directory Domain and Trusts snap-in and then click the Add button.
| 6. | Back at the Add Standalone Snap-In dialog box, click the Close button. This returns you to the Add/Remove Snap-In dialog box. If the selections are correct, click the OK button.
| 7. | This returns you to the custom MMC. To save it, select File, Save As from the system menu. Enter an appropriate name and location and then click the Save button.
|
Exercise 5.2 Creating a RunAs shortcut In this exercise, you will create a desktop shortcut that will start the Computer Management MMC and prompt you for your administrative credentials. This shortcut is used so that you can log on to your system with your domain user account and quickly access your administrative tools without logging off. Estimated Time: 10 minutes 1. | Right-click the desktop and select New, Shortcut from the pop-up.
| 2. | The Create Shortcut dialog box appears. Type in the following command: Runas/user:domain\administrator "mmc %windir%\system32\compmgmt.msc". Click Next.
| 3. | On the Select a Title dialog box, enter Computer Management. Click Finish.
| 4. | Double-click the shortcut you just created. On the command line that appears, enter your administrative password.
| 5. | The Computer Management MMC is opened with administrative permissions.
|
Exam Questions | 1. | You are the administrator of a small network. You have configured a Windows Server 2003 server to run in Remote Desktop for Administration mode. What is the maximum number of users that can be supported? 
| A. | The same amount as the number of Terminal Server licenses that were purchased. |
| B. | Two, plus one for the console. |
| C. | About 100 on Windows Server 2003 Standard Edition and 200 on Windows Server 2003 Enterprise Edition. |
| D. | As many as the performance of the server supports. |
| | | | 2. | You have just finished building a new Windows Server 2003 server. Your plan is to manage it remotely using Remote Desktop for Administration mode, just like you've been doing with your Windows 2000 servers. However, when you open the RDP client and try to connect to the new server, you can't seem to get connected. What is the most likely cause of the problem?
| A. | A bad network interface card. |
| B. | The personal firewall is blocking the ports for the browse list. |
| C. | Remote Desktop for Administration mode has not been enabled. |
| D. | Remote Desktop for Administration mode has not been installed. |
| | 3. | Bill is the lead administrator for BigCO, Inc. An associate administrator in one of the branch offices calls Bill and requests his help on a server problem. Bill attempts to assist the associate administrator, but the associate is fairly green, and he is having trouble describing what he is seeing on his screen. What technology in Windows Server 2003 can Bill use to show the associate how to fix his problem?
| A. | Remote Desktop for Administration |
| B. | Terminal Services |
| C. | Remote Assistance |
| D. | Remote Administrator |
| | 4. | You are the network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain. The functional level of the domain is Windows 2000 native. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. The network includes a shared folder named FlightSchedules1. Some of your users report that they are often unable to access this folder. You discover that the problem occurs whenever more than 10 users try to connect to the folder. You need to ensure that all appropriate users can access FlightSchedules1. What should you do?
| A. | Decrease the length of the folder name. |
| B. | Raise the functional level of the domain to Windows Server 2003. |
| C. | Purchase additional client access licenses. |
| D. | Move FlightSchedules1 to one of the servers. |
| | | | 5. | You are the network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. XML web services for the internal network run on a member server named Web1, which is configured with default settings. You are a member of the local Administrators group on Web1. You need the ability to remotely manage Web1. You have no budget to purchase any additional licensing for your network until the next fiscal year. How should you reconfigure Web1?
| A. | In the System Properties dialog box, enable Remote Desktop. |
| B. | Add your user account to the Remote Desktop Users local group. |
| C. | In the System Properties dialog box, enable Remote Assistance. |
| D. | Install Terminal Services by using Add or Remove Programs. |
| | 6. | You are the lead network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. Site License Logging is enabled in the domain. The junior administrators report that they cannot manage Client Access Licenses. When they attempt to open the Licensing utility, they receive the following error: "RPC Server too busy." You suspect there is a problem on the domain controller that functions as the site license server. However, you do not know which domain controller is the site license server. You need to locate the site license server. What should you do?
| A. | Open Licensing, click the Server Browser tab, and expand your domain. Inspect the properties of each server. |
| B. | Open Active Directory Sites and Services, and open the properties for the site name. Inspect the contents of the Location tab. |
| C. | Open the Active Directory Users and Computers, click your domain name, click Action, and select Operations Masters. Inspect the contents of the Infrastructure tab. |
| D. | Open Active Directory Sites and Services and click your site name. Inspect the properties of the Licensing Site Settings. |
| | | | 7. | You are the file server administrator for Skelly, Inc. The company network consists of a single Active Directory domain. The domain contains 10 Windows Server 2003 computers and 7,500 Windows XP Professional computers. You manage three servers named Skelly1, Skelly2, and Skelly3. You need to update the driver for the network adapter that is installed in Skelly1. You log on to Skelly1 by using a domain user account. You open the Computer Management console. When you select Device Manager, you receive the following error message: You do not have sufficient security privileges to uninstall devices or to change device properties or device drivers. You need to be able to run the Device Manager to update the driver. What should you do?
| A. | In Control Panel, open System Tools. Then right-click the Computer Management shortcut and click Run As on the shortcut menu. |
| B. | In Control Panel, open Administrative Tools. Then right-click the Computer Management shortcut and click Run As on the shortcut menu. |
| C. | In Control Panel, open Administrative Tools. Then right-click the Computer Management shortcut and click Run with Administrative rights on the shortcut menu. |
| D. | In Control Panel, open System Tools. Then right-click the Device Manager and click Run As on the shortcut menu. |
| | 8. | You are the administrator of a Windows Server 2003 computer named Skelly1. Backups of the System State data of Skelly1 occur each day by using the local Administrator account. A new company requirement restricts you from running services by using the Administrator account. To meet the requirement, you create a new service account named BackupSkelly1 to be used for backups. You want this account to have the minimum permissions necessary to perform backups. You need to grant the appropriate permissions to the BackupSkelly1 account and to configure the backup job to use the BackupSkelly1 account. What should you do?
| A. | Add the BackupSkelly1 account to the Server Operators global group. |
| B. | Add the BackupSkelly1 account to the Backup Operators domain local group. |
| C. | Add the BackupSkelly1 account to the Server Operators domain local group. |
| D. | Add the BackupSkelly1 account to the Backup Operators global group. |
| | | | 9. | You are the lead network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain. All network servers run Windows Server 2003, and all client computers run Windows XP Professional. One of the junior administrators reports that when she attempts to create a new volume on one of the servers, she receives the message Access Denied. What should you do?
| A. | Add the junior administrator's user account to the Server Operators domain group. |
| B. | Add the junior administrator's user account to the local Administrators group on the server. |
| C. | Configure the junior administrator's client computer to enable the IPSec Server (Request Security) policy. |
| D. | Assign the junior administrator's user account the Allow logon through Terminal Services user right for the server. |
| | 10. | You are the lead network administrator for FlyByNight Airlines. The network consists of a single Active Directory domain, spread across 20 locations. You are trying to install a new application on one of your severs in a remote office using the Remote Desktop for Administration feature, but the installation procedure seems to have hung. One of the junior administrators at the remote location reports that there is some kind of message displayed on the console of the server. This is a critical application, and it must be installed immediately. What should you do?
| A. | FedEx the installation disks to the remote location and have the junior administrator install it for you. |
| B. | Log off your session, log back on, then restart the application install using RunAs. |
| C. | Log off your session, enter mstsc /install on the command line, then restart the application installation. |
| D. | Log off your session, enter mstsc /console on the command line, then restart the application installation. |
|
Answers to Exam Questions | 1. | B. The number of concurrent Remote Desktop for Administration sessions on Windows Server 2003 is two RDP sessions, plus the console. Terminal Services connections on all versions of Windows Server 2003 are unlimited. See "Terminal Services in Remote Desktop for Administration Mode." | | 2. | C. Unlike in Windows 2000 Server, Windows Server 2003 Remote Desktop for Administration mode is installed by default; however, it is not enabled. See "Remote Desktop for Administration." | | 3. | C. The Remote Assistance feature allows both Bill and the associate administrator to see and control the console on the server. See "Remote Assistance." | | | | 4. | D. Since the magic number is 10, it is most likely that the share exists on a Windows XP client. That would lead to a situation where the Windows XP client computer allows only up to 10 connections at the same time, resulting in users being unable to access FlightSchedules1 when the 10 connections are full. Moving the shared folder to a server computer will allow more concurrent connections. Because the domain doesn't have any Windows 9x clients, the length of the share name isn't a problem. This is obviously a connectivity issue; the functional level of the domain is not the cause of the problem. Because the licensing service doesn't block connections, this is not a CAL problem. See "Managing and Administering Software Site Licensing." | | 5. | A. The solution is to enable the Remote Desktop feature, which will allow you to remotely manage the server while not requiring any additional licenses. B is not necessary because the administrator is a member of the group by default. Remote Assistance is useful only if someone is sitting at the console of the server and is able to grant you permission to connect to it. Installing Terminal Services would incur additional license expense, which is not in the budget. See "Remote Desktop for Administration." | | 6. | D. The Site License server is identified in the AD Sites and Settings MMC under Licensing Site Settings properties. See "Managing and Administering Software Site Licensing." | | 7. | B. The RunAs command is used to enable an administrator to run programs and processes with a different logon from the one the administrator used to log on to the system. The Computer Management MMC is available in the Administrative Tools folder in the Control Panel. There is not a System Tools folder in Control Panel. See "Managing a Server Using RunAs." | | 8. | B. By adding the account to the Backup Operators domain local group, the backups can be performed without granting an excessive amount of rights that using the Server operators would. All the Administrative groups are domain local groups, not global groups. See "Administrative Groups." | | 9. | B. Only members of the Administrators group have the necessary permissions to format a volume or partition. See "Administrative Groups." | | 10. | D. Some applications will display messages and prompts only to the system console. When using Remote Desktop for administration, you will be connected to one of the other sessions by default. You can connect to the system console on a remote server by entering mstsc /console on the command line. See "Remote Desktop for Administration." |
Suggested Readings and Resources 1. Boswell, William. Inside Windows Server 2003. New Riders, 2003. ISBN 0735711585. 2. Matthews, Marty. Windows Server 2003: A Beginners Guide. McGraw-Hill, 2003. ISBN 0072193093. 3. Minasi, Mark, et al. Mark Minasi's Windows XP and Server 2003 Resource Kit. Sybex, 2003. ISBN 0782140807. 4. Minasi, Mark, et al. Mastering Windows Server 2003 Server. Sybex, 2003. ISBN 0782141307. 5. Morimoto, Rand, et. al. Microsoft Windows Server 2003 Unleashed (R2 Edition). Sams, 2006. ISBN 0672328984. 6. Shapiro, Jeffrey, et al. Windows Server 2003 Bible. John Wiley & Sons, 2003. ISBN 0764549375. 7. Stanek, William. Microsoft Windows Server 2003 Administrator's Pocket Consultant. Microsoft Press, 2003. ISBN 0735613540. 8. Windows Server 2003 Deployment Guide. Microsoft Corporation. http://www.microsoft.com/windowsserver2003/techinfo/reskit/deploykit.mspx. 9. Windows Server 2003 Resource Kit. Microsoft Corporation. Look for a link to it on the Technical Resources for Windows Server 2003 page. http://www.microsoft.com/windowsserver2003/techinfo/default.mspx. |
