Sams Teach Yourself MCSE Windows NT Server 4 in 14 Days
(Publisher: Macmillan Computer Publishing)
Author(s): David Schaer, et al
ISBN: 0672311283
Publication Date: 12/15/97

7.7.2. Implementing Roaming Profiles

Roaming profiles are an excellent solution when users log on at more than one computer. By implementing roaming profiles held at a network share point, settings can follow users from one computer to another. Within the realm of roaming profiles are two types: personal and mandatory.

A personal profile will be modified as the user changes settings regardless of which computer he is working on. If the personal profile cannot be found at logon, the user can use a cached copy of the profile or create a new local.

Never assign multiple users to the same personal profile. He who saves last wins...

A mandatory profile does not permit changes to the profile. Sharing a common mandatory profile is a good solution for a secure environment. Because the users cannot modify the profile it is possible to share a single profile with multiple users. If a user’s mandatory profile is not available during logon, she will not gain access to the system.

7.8. Lab

This lab will help in your learning by testing you on the information presented in this chapter, as well as by giving you exercises to hone your skills. You can find answers to the review questions in Appendix B, “Answers to Review Questions.”

7.8.1. Review Questions

Question 1

Which of the following services synchronizes user and group accounts from the PDC to the BDCs?

A.  Directory Replicator service

B.  Schedule service

C.  Alerter service

D.  NetLogon service

Question 2

Which of the following statements are true regarding the administrator account?

A.  It cannot be disabled

B.  It cannot be deleted

C.  It cannot be renamed

D.  It cannot be copied

Question 3

Which of the following statements are true regarding the guest account?

A.  It cannot be disabled

B.  It cannot be deleted

C.  It cannot be renamed

D.  It cannot be copied

Question 4

True or False. When a user account is deleted and then re-created with the same name it will receive a different SID.

Question 5

True or False. An account that has been renamed still maintains the same SID.

Question 6

Which of the following statements about local groups are true?

A.  local groups can contain global groups

B.  local groups can contain local groups

C.  local groups can be renamed

D.  local groups can be changed to global groups

Question 7

Which of the following can be members of a local group?

A.  Global groups from the same domain

B.  Global groups from trusted domains

C.  Global groups from trusting domains

D.  Global users from trusting domains

Question 8

Which of the following can be members of a global group?

A.  Global groups from the same domain

B.  Global groups from trusted domains

C.  Global groups from trusting domains

D.  Global users from the same domain

Question 9

Which of the following would need to be enabled to track a print job?

A.  Auditing on the printer

B.  Auditing of file and object access

C.  Auditing of the use of user rights

D.  Auditing of security policy changes

Question 10

Which of the following registry keys can be controlled through policy settings?

A.  HKEY_LOCAL_MACHINE

B.  HKEY_SECURITY

C.  HKEY_HARDWARE

D.  HKEY_CURRENT_USER

Question 11

What is the best methodology for restricting members of the Accounting group to a specific windows-based application?

A.  Create a personal profile for each member.

B.  Assign a shared mandatory profile to each member of the group.

C.  Set restrictions for the group in NTCONFIG.POL.

D.  Set restrictions for the accounting computers in NTCONFIG.POL.

7.8.2. Exercises

Exercise 7.1

You are installing a new Windows NT 4.0 network that will support 125 users in three different departments: Sales, HR, and Accounting. Three laser printers (one for each department) and one color printer (for the Sales department to use) are all on the network. Each department wants its managers to have access to all resources in the domain. How are you going to create these users accounts? What groups should you create?

Exercise 7.2

The company in Exercise 7.1 has bought another company with a similar network. You must continue to support both domains; however, management needs access to resources in both domains. How will this affect your configuration?