MCSEGuidetoMicrosoftWindowsXPProfess……2节.pptVIP

70-270: MCSE Guide to Microsoft Windows XP Professional * Group Types assigned by a Domain Client (continued) Power Users Remote Desktop Users Replicator Users 70-270: MCSE Guide to Microsoft Windows XP Professional * Active Directory Domain Containers Active Directory domain containers: Logical: Domain Organizational Unit (OU) Physical: Site 70-270: MCSE Guide to Microsoft Windows XP Professional * User Profiles Collection of desktop and environmental configurations Computer maintains profile for each user Material such as: Application data My Documents Cookies Etc. 70-270: MCSE Guide to Microsoft Windows XP Professional * Local Profiles Set of specifications and preferences For an individual user Stored on local machine Reside in the %username% subdirectory beneath the \Documents and Settings directory Set up by example Saved on logout 70-270: MCSE Guide to Microsoft Windows XP Professional * Roaming Profiles Resides on a network server Automatically downloaded to any system when user logs on Default path designation: \\computername\username 70-270: MCSE Guide to Microsoft Windows XP Professional * Application of Group Policies Several security and access controls Group policies (GPOs) can be defined for: Domain Sites Organizational units (OUs) Local computer group policy managed from a Windows XP Professional system Policies applied in order: LSDOU (local, site, domain, organizational unit) 70-270: MCSE Guide to Microsoft Windows XP Professional * Password Policy Defines the restrictions on passwords Includes password age, length, etc. 70-270: MCSE Guide to Microsoft Windows XP Professional * Account Lockout Policy Conditions that result when a user account is locked out Used to prevent brute force attacks against user accounts Items: Account lockout threshold Account lockout duration Reset account lockout counter after 70-270: MCSE Guide to Microsoft Windows XP Professional * Audit Policy Defines events recorded in Security log of Event Viewer Used to