Flashcards
Lecture 4 Managing accounts
Cards in this deck (40)
- 1Why create groups ?Creating groups allow you to easily manage rights and resources that they are allowed to access
- 2How do users access groupsUsers are given access tokens with a security identifier for the group their a member of.
- 3Are tokens examined to see if users can perform actions ?Yes they are
- 4How many entries are allowed in a group ?1015 but 1024 by default but 9 are taken up by comment entries
- 5Can users log on when the group is too large ?Nope since there is a limit for each group
- 6Name 3 types of groups you can create*Workgroup
*Members of a domain
*On domain controllers - 7What are local groups ?These are groups which contain local accounts created on the computers they belong to
- 8What memberships can local groups havelocal accounts
- 9What group must you be a member of to create local groupsadministrator group
- 10If the computer is part of the domain can it access the local groupYes since the computer has been added to the domain and it has local accounts on it
- 11What are domain groupsThese are groups which contain domain user accounts which exist on the domain controller
- 12What memberships can domain groups have ?domain users accounts
- 13What can security groups be used for ?*Access to resources
*Rights to do things
*Email distribution - 14What can distribution groups be used for ?*Email distribution
- 15Why might you want to separate users into a security and email distribution groupTo separate users who can only send messages and who can perform other actions like accessing resources and performing actions
- 16Does the functional level have an effect on the group you can createYes it does
- 17What is a global group used for ?To organise users
- 18What can be created in a mixed functional level global groupDomain user accounts from the same domain
- 19What can be created in a native functional level global groupDomain user accounts and global users accounts from the same domain
- 20What is a domain local group used for ?To give users access to resources
- 21What can be created in a mixed functional level domain local groupDomain user accounts and global groups from anywhere in the forrest
- 22What can be created in a native functional level domain local groupDomain user accounts, global groups and universal groups from anywhere in the forrest and other local domain groups from the same domain
- 23Give 3 things to consider when creating a group*OS running on the server providing resources
*Number of domains
*How much effort you want to put in against maintaining it - 24What does A G DL L P mean*Accounts
*Global groups
*Domain local groups
*Local groups
*Permissions - 25What is the A G DL L P used forIt's a strategy used to maintain different groups
- 26What is the A G L P strategy ?It's when Global groups on a domain controller have user accounts within them this is then placed into a local group which is on the server which then has permissions to resources
- 27When is it best to use the A G L P strategy ?When you have multiple people controlling their individual servers
- 28Give 2 pros and cons for A G L P strategy ?Pro
*Centralised management
*Works with NT4 servers
Cons
*Have to create local groups for each server their on
*SID changes if the OS is upgraded so they need to be recreated - 29What is the A G DL P strategy ?It's when you have a global group on the domain controller which contains a domain user account. This global group is placed within a domain local group and is able to access resources on the server with permissions
- 30When is it best to use the A G DL P strategy ?When you want to have one person in control of many different domain local groups
- 31What are the 2 pros and cons of the A G DL P strategy ?Pros
*User and group management centralised
*Avoid creating duplicate groups
Cons
*Complex to set up
*Can't be used with NT4 servers - 32What is the A G P strategy ?It's when you have a global group with domain user accounts within them this then has permissions to access resources on the server
- 33When is it best to use the A G P strategy ?When you want a simple group structure
- 34What is the 1 pro and con of the A G P strategy ?Pro
*Simpler group structure
Con
Creates more network traffic since the server may check if the user is still part of the global group - 35What is the A DL P strategy ?Is when domain user accounts are placed within domain local groups on the domain controller this is then able to access resources on the server with the permissions
- 36When is it best to use the A DL P strategy ?When you want a simple group structure on non NT4 member server
- 37What is the 1 pro and 2 cons of the A G P strategy ?Pro
*Simple group structure
Con
*Can't be used with NT4 servers
*Local groups can't be used to give permissions to access resources outside their own domain - 38Give 3 default groups that exist on member servers and domain controllers*Administrators
*Guest
*Backup operators - 39Which of the 3 default groups that exist on member servers and domain controllers have default membershipsAdministrator and Guest
- 40What tool do you use to manage system groupsNone you can't manage them
Information
- Description
- Managing and maintaining accounts
- Created by
- Tunds · Dec 2014
- Updated
- Feb 19, 2016
- Views
- 17
- Rating