why professionals are taking microsoft office classes in maryland

Maryland is home to quite a few government agency and administration offices, also as some of America's biggest corporations. With all of the laptop or computer advice and administration services essential to help keep even one of these offices up and running, it's no wonder that comprehensive understanding and practical use competencies for Microsoft Workplace is one of the most sought soon after credentials for prospective new office hires, so a lot in order that Microsoft Office classes in Maryland oriented towards seamless integration with other office technology and workplace dynamics are becoming increasingly well-liked for job-seekers on the lookout for a competitive edge.

Whereas proficiency in Microsoft Office is just not widely viewed as an IT specialty, authorities who specialize inside a total understanding of its capabilities realize that Microsoft Workplace offers a large number of productive advanced functions that even those people that have a look at themselves Microsoft Workplace savvy are likely to ignore or know small about. Practically every workplace makes use of Microsoft Office computer software just like Word and Excel to handle documentation, internal and external communication, activity and project organization, information consolidation, analysis, and reports.

Most specialists know the right way to use these programs to create whatever the project manager desires to stay on track, then again, several waste valuable time and effort just simply because they are unaware of ways to use the advanced system attributes to automate countless from the tasks or document modifications they painstaking carry out 1 by a single, nor do they know learn how to ideal integrate their perform across the Microsoft Office suite to reach the highest high quality, most efficient work item for each project process.

Microsoft Office- Greater than Meets The Eye

Every single with the programs inside the Microsoft Office suite have their very own specialized advanced attributes that a knowledgeable and skillful experienced can use to maximize efficiency and job performance, at the same time as unique amongst intra-program functions that enable exemplary integration of tasks and project across the complete spectrum of Microsoft Office software program. Corporate management is specifically impressed by the capacity to deal with office tasks and projects applying this type of interdisciplinary approach, creating this a highly marketable ability set.

Pros who undertake Microsoft Office classes in Maryland find out how to perfect function inside every plan, too as methods to manage across various programs, but they turn into specially desirable to potential employers since they also gain the expertise and information necessary to pass on their expertise by coaching other workplace employees.

Uncovering The most beneficial Microsoft Workplace Instruction In Maryland

There are actually a number of Microsoft Workplace instruction and certification programs on the market, also as expert specialization certificates for specific programs or activity management. Besides instruction and certifications provided for the existing iteration with the Microsoft Workplace computer software, a lot of experts locate merit in Microsoft Office classes focusing on older versions, considering the fact that such legacy software is normally identified in Maryland's countless governmental offices and corporate workplaces.

what is a virus

A virus can be a malicious program that passes from one personal computer to one more within the same way as a biological virus passes from one individual to one more. Most viruses are written with a malicious intent, so that they could cause damage to programs and information as well as spreading themselves. Viruses infect existing programs to alter the behavior of programs, actively destroy data, and carry out actions to storage devices that render their stored information inaccessible.

Viruses attack computer software just like operating systems, information files, application software program, and e-mails. Nevertheless, viruses don't have an effect on laptop hardware.

Viruses infect the computers and spread themselves making use of many strategies. Some viruses attach themselves to a standard system, which include a well known game or word processor. When a person downloads the infected game and runs it, the attached virus system begins to execute. The virus loads itself in to the memory and searches for any other system on the disk. If the virus finds any plan, it modifies the program by adding the malicious code towards the system. The next time this plan gets executed, it infects other programs, plus the cycle continues thereafter.

There are many types of viruses, that include Trojan horse, worm, boot-sector virus, and macro virus.

A Trojan horse is often a malicious computer software program code that resembles another typical plan. When a user runs the infected plan, the hidden code of the Trojan horse runs also. An example of a Trojan horse is often a plan that masquerades as a method logon to retrieve user names and password information, to ensure that the writers from the Trojan horse can use them later to acquire unauthorized access into the laptop. Trojan horses are typically spread by e-mail attachments.

A worm may be a software plan that makes use of computer networks and security holes to replicate itself. It scans the whole network for other computers that have distinct security holes. It copies itself to the new computers working with the security holes,facebook, after which starts replicating from there.

A boot-sector virus locations itself within the boot sector of a challenging disk drive that is certainly utilised to boot the laptop. When the pc is re-booted, the virus automatically executes itself.

A macro virus may be a macro or script that attaches itself to a file or template. When the file is loaded, the directions with the macro or script are executed.

To stop computers against viruses, the following actions should really be taken:

An anti-virus software that may detect, determine, and eliminate viruses really should be installed on the computer.
All specifics downloaded from the net or from other unknown sources should be quickly scanned for viruses.
Any e-mail attachment that comes from unknown sources should in no way be opened.

About uCertify

Established in 1996, uCertify specializes within the development of computer system assisted test preparation computer software. The organization supplies exam simulation PrepKits for the certification exams of Microsoft, CIW, CompTIA, Oracle, Sun and other top vendors.

uCertify PrepKits are created after rigorous investigation and innovation by a panel of very experienced and certified authors to equip the aspirants with just what they have to have for IT certifications.

Study much more about uCertify

MCSE Certification -- How Does One Purchase It?

MCSE certification can pave the way for IT professionals to get excessive paying IT positions in main software companies. One can take an MCSE course after fulfilling the opposite requirements as a way to evaluation and cross the MCSE test.

The MCSE certification or Microsoft Licensed Programs Engineer is among the hottest tech certifications out there for information expertise professionals. An MCSE certificate is helpful to be able to get good jobs as a systems engineer professional in addition to for comparable IT positions in major IT companies. The MCSE certificates is tailor made for IT professionals that dissect enterprise wants with the intention to create viable solutions based on software developed by Microsoft company which incorporates its Home windows operating system. Among different jobs obtainable for holders of this certificate embody positions as a tech support engineer, programs analyst, network analyst and as a technical consultant.

As an IT skilled, I came upon that as a way to get MCSE certification I wanted to not less than have a couple of years of expertise in the field. The extent of exposure I needed to get was data in set up, configuration and familiarity with troubleshooting network systems.

As soon as I had the time wanted for expertise below my belt, I now proceeded with the subsequent step to be able to obtain my goal of getting an MCSE certificate. The first thing I wanted to do is to get the correct information on becoming an MCSE professional. I took up an MCSE course with a view to get what I needed to know. An MCSE course helps you to put together for the actual exam as a way to be able to go it on your first attempt. One of many methods you will get an 70-298 course is to attend an MCSE boot camp. It is a complete examine program that is designed to offer you the important information and sensible know-how you want to be able to go the MCSE exam. The issue with that is it may be a tad expensive. What I ended up doing with a view to prepare for my MCSE certification was to take some on-line lessons instead. This allowed me to evaluation in the comfort of my own residence at my own pace so to speak.

If you want to get your MCSE certificates as rapidly as possible, hone your expertise for the exam by testing your self repeatedly. Benefit from the advantages provided by observe exams available. An MCSE course can provide you with the knowledge but your performance in the exam will ultimately decide your fate. Taking observe checks is a good way to overview for MCSE certification as a result of it gives you with actual performance data on what areas you're good at and what subjects you want to put more consideration to. I came upon that as I carried out better on the follow checks, it helped enhance my general confidence come the day of my MCSE certification. I used to be in a position to familiarize in detail how the actual examination is taken and how a lot time I needed to finish it. This allowed me to make use of strategies to make use of the exam time judiciously once I got here across tough questions that needed extra attention. I made certain that I used to be able to simulate the exact testing environment of the MCSE certification examination as close as possible with a purpose to have a greater deal with on how you can take it efficiently.

What is essential to find out about 70-298 Exam is that there are seven exams to move all in all. I need to get a passing rating of seven hundred factors in the entire exams with a purpose to obtain my MCSE certificate. It's not simple, however with a lot of laborious work and apply I used to be able to move it.

MCSE Certification - Still a Relevant Qualification

The MCSE certification indicates you can work at a high standard on all several Windows servers up to and including the 2003 server. Although there are more recent systems and qualifications available, it shows that you can design, implement and administrate Information systems on these servers and can really boost your CV.

The MCITP certification has arrived and does cover all the aspects of more recent Microsoft servers. On the other hand, while it is important to be up-to-date, it always takes a while for older technology to filter out of use and it does not look as though server 2003 is going to disappear any time soon and having a certification for this system can only be beneficial.

MCSE stands for Microsoft Certified Systems Engineer, and the qualification has been around for several years now, meaning that most officials are aware of it. With the arrival of the new Microsoft MCITP qualifications many people believe that the MCSE is out of date, but this is not necessarily true.

By no means is this an either/or situation. On the contrary, an extra certification can only help you. Starting out with the MCSE and then progressing to the MCITP will show that you have a broader understanding of your subject and the development of information systems. There are also MCSE 2008 upgrade courses available to show that you have that range of knowledge.

After all, it is better to be able to show a commitment to the career, and this certification might not be around forever. The broader your range of experience and qualification the better equipped you are. The MCSE certification can also help you gain CISSP or MCITP qualifications if you choose to expand on it.

In order to get an MCSE qualification there are seven exams you have to pass. This could seem like a lot of work but gaining MCSE certification does not need to take over your life. With user friendly computer based training available you can learn in your own time. These  courses are put together by experts as well, so you do not need to worry about the quality of what you are studying. So, do not dismiss the MCSE qualification just yet. It will be useful for several years yet and still improves your CV.

70-680 Exam Questions & Answers-Part 1

Exam     :  Microsoft 70-680

 Title    :  TS: Windows 7, Configuring

1. You have a computer that runs Windows 7.

You need to identify which applications were installed during the last week.

What should you do?

A. From Reliability Monitor, review the informational events.

B. From System Information, review the Software Environment.

C. From Performance Monitor, review the System Diagnostics Report.

D. From Performance Monitor, run the System Performance Data Collector Set.

Answer: A

2. You have a computer that runs Windows 7.

You need to view the processes that currently generate network activity.

What should you do?

A. Open Resource Monitor and click the Network tab.

B. Open Windows Task Manager and click the Networking tab.

C. Open Event Viewer and examine the NetworkProfile Operational log.

D. Open Performance Monitor and add all the counters for network interface.

Answer: A

 

3. You have a computer that runs Windows 7.

You discover that an application named App1 runs during the startup process.

You need to prevent only App1 from running during startup. Users must be allowed to run App1 manually.

What should you do?

A. From the local Group Policy, modify the application control policy.

B. From the local Group Policy, modify the software restriction policy.

C. From the System Configuration tool, select Diagnostic Startup.

D. From the System Configuration tool, modify the Startup applications.

Answer: D

 

4. You have a computer that runs Windows 7. The computer contains two volumes, C and D.

You create a new folder called D:\Reports.

You need to ensure that all files stored in the Reports folder are indexed by Windows Search.

What should you do?

A. Enable the archive attribute on the folder.

B. Modify the Folder Options from Control Panel.

C. Modify the properties of the Windows Search service.

D. Create a new library and add the Reports folder to the library.

Answer: D

5. You have a computer that runs Windows 7.

You perform an image backup.

A virus infects the computer and causes the computer to become unresponsive.

You need to restore the computer as quickly as possible.

What should you do?

A. Start the computer by using the Last Known Good Configuration feature.

B. Start the computer from the Windows 7 DVD and then use the Startup Repair tool.

C. Start the computer from the Windows 7 DVD and then use the System Image Recovery tool.

D. Start the computer from Windows Preinstallation Environment (Windows PE) and then run Imagex.exe.

Answer: C

 

6. You have a computer that runs Windows 7.

You update the driver for the computer’s video card and the computer becomes unresponsive.

You need recover the computer in the minimum amount of time.

What should you do?

A. Restart in safe mode and then roll back the video card driver.

B. Restart in safe mode and then revert the computer to a previous restore point.

C. Start the computer from the Windows 7 installation media. Select Repair your computer and then select System Restore.

D. Start the computer from the Windows 7 installation media. Select Repair your computer and then select System Image Recovery.

Answer: A

 

7. Your network consists of one Active Directory domain. You have two computers named Computer1 and Computer2 that run Windows 7. Both computers are members of the domain.

From Computer1, you can recover all Encrypting File System (EFS) encrypted files for users in the domain.

You need to ensure that you can recover all EFS encrypted files from Computer2.

What should you do?

A. On Computer1, back up %systemroot%\DigitalLocker. On Computer2, restore %systemroot%\DigitalLocker.

B. On Computer1, export the data recovery agent certificate. On Computer2, import the data recovery agent certificate.

C. On Computer1, run Secedit.exe and specify the /export parameter. On Computer2, run Secedit.exe and specify the /import parameter.

D. On Computer1, run Cipher.exe and specify the /removeuser parameter. On Computer2, run Cipher.exe and specify the /adduser parameter.

Answer: B

 

8. You have a computer that runs Windows 7. The computer has System Protection enabled.

You need to retain only the last System Protection snapshot of the computer. All other snapshots must be deleted.

What should you do?

A. Run Disk Cleanup for Programs and features.

B. Run Disk Cleanup for System Restore and Shadow Copies.

C. From the System Protection Restore settings, select Turn off System Restore.

D. From the System Protection Restore settings, select Only restore previous versions of files.

Answer: B

 

9. You have a computer that runs Windows Vista.

You install Windows 7 on a new partition on the computer.

You need to ensure that the computer always starts Windows Vista by default.

What should you do?

A. Run Bcdedit.exe and specify the /default parameter.

B. Run Bcdedit.exe and specify the /bootems parameter.

C. Create a boot.ini file in the root of the Windows 7 partition.

D. Create a boot.ini file in the root of the Windows Vista partition.

Answer: A

 

10. You plan to install Windows 7 on a computer that contains a single hard disk drive. The hard disk drive is connected to a RAID controller.

During the installation, you discover that the Windows 7 installation media does not include the files required to install the RAID controller.

You need ensure that you can install Windows 7 on the hard disk drive.

What should you do?

A. Insert the Windows installation media and press F8 during the computer’s power-on self test (POST).

B. Insert the Windows installation media and press F6 during the computer’s power-on self test (POST).

C. Start the computer from the Windows installation media. From the Install Windows dialog box, click Load Driver.

D. Start the computer from the Windows installation media. From the Install Windows dialog box, click Drive options (advanced).

Answer: C

 

11. You have a computer that runs Windows 7 Professional. A USB disk is attached to the computer.

You need to ensure that you can enable BitLocker To Go on the USB disk.

What should you do?

A. Enable Encrypting File System (EFS).

B. Upgrade the computer to Windows 7 Enterprise.

C. Initialize the Trusted Platform Module (TPM) hardware.

D. Obtain a client certificate from an enterprise certification authority (CA).

Answer: B

 

12. You have a computer that runs Windows Vista Service Pack 2 (SP2).

You need to upgrade the computer to Windows 7.

What should you do?

A. Start the computer from the Windows 7 installation media and select the Upgrade option.

B. Start the computer from the Windows 7 installation media and select the Custom (advanced) option.

C. From Windows Vista, run Setup.exe from the Windows 7 installation media and select the Upgrade option.

D. From Windows Vista, run Setup.exe from the Windows 7 installation media and select the Custom (advanced) option.

Answer: C

13. You have a computer named Computer1 that runs Windows Vista and a computer named Computer2 that runs Windows 7.

You plan to migrate all profiles and user files from Computer1 to Computer2.

You need to identify how much space is required to complete the migration.

What should you do?

A. On Computer1 run Loadstate c:\store /nocompress

B. On Computer1 run Scanstate c:\store /nocompress /p

C. On Computer2 run Loadstate \\computer1\store /nocompress

D. On Computer2 run Scanstate \\computer1\store /nocompress /p

Answer: B

 

14. You have a computer that runs Windows Vista. The computer contains a custom application.

You need to export the user state and the settings of the custom application.

What should you do?

A. Run Loadstate.exe and specify the /config parameter.

B. Run Scanstate.exe and specify the /genconfig parameter.

C. Modify the miguser.xml file. Run Loadstate.exe and specify the /ui parameter.

D. Modify the migapp.xml file. Run Scanstate.exe and specify the /i parameter.

Answer: D

 

15. You have a reference computer that runs Windows 7.

You plan to deploy an image of the computer.

You create an answer file named answer.xml.

You need to ensure that the installation applies the answer file after you deploy the image.

Which command should you run before you capture the image?

A. Imagex.exe /append answer.xml /check

B. Imagex.exe /mount answer.xml /verify

C. Sysprep.exe /reboot /audit /unattend:answer.xml

D. Sysprep.exe /generalize /oobe /unattend:answer.xml

Answer: D

Questions to solve

If you are looking into CompTIA certifications for the first time, then there are a few questions that you probably have and want answered about CompTIA training and the whole CompTIA certification process.

You may be asking yourself: "Why CompTIA certification?" or for that matter "Why should I get certified?" This is a common question asked by just about every candidate at least once in his or her career. To keep the answer simple, look at CompTIA certification this way: By becoming CompTIA certified you are displaying a core level of skills that essentially rate you as a CompTIA professional. Employers can look at a potential new hire, or employee seeking a promotion, recognize the CompTIA training and know that this individual has passed standardized CompTIA tests.

Achieving a certification after passing the CompTIA exam also announces to your peers and employer that you are abreast of current technology trends and familiar with the latest CompTIA software and networking protocols.

Whereas there is no substitute for experience, you will find that achieving your CompTIA certification will simultaneously grease the corporate wheels and prepare you for difficult tasks that will demonstrate your knowledge and ability - that can only be confirmed through CompTIA exams.

Exact-Exams.com is a premier developer and supplier of quality CompTIA training materials, including CompTIA Questions and Answers and CompTIA Study Guides. For the last five years, we have made it our business to be the best online provider of complete CompTIA certification resources to help you pass your CompTIA exam. In fact Exact-Exams.com GUARANTEES that you will pass your next CompTIA exam after using our reliable training program.

From the Back Cover

From the Back Cover

CompTIA A+ Exam Cram, Fourth Edition, is the perfect study guide to help you pass CompTIA’s newly-updated versions of the A+ exams. It provides coverage and practice questions for every exam topic. The book contains an extensive set of practice questions, including 200 printed questions in two full practice exams, while the CD-ROM test engine provides real-time practice and feedback with an additional 200 questions.

Covers the critical information you’ll need to know to score higher on your A+ exams!

  • Understand PC components, including motherboards, processors, memory, power, storage, audio, video, and I/O devices
  • Install, configure, maintain, troubleshoot, and fix desktop and notebook PC hardware
  • Install and configure Windows Vista and other Windows operating systems
  • Use Windows utilities to troubleshoot and fix operating system problems
  • Understand essential networking technologies, devices, protocols, cabling, and connections
  • Set up small office/home office networks, including Internet and Wi-Fi connections
  • Troubleshoot and fix failed client-side network connections
  • Secure computers and networks, identify security problems, and eliminate viruses and malware
  • Detect and solve the most common printing problems
  • Perform essential preventive maintenance
  • Master essential safety and operational procedures for PC technicians
  • Prepare yourself effectively for exam day

Are you worried about passing your MCP, MCSA, MCITP, MCPD, MCSE, CCNA, CCNP, MCTS, A+, CCSP, CCVP, CCIE, OCP, OCA, VCP 310, Network+, Security+, Server+, Linux+ Vmware, ITIL, Apple, Avaya, Ciw, Citrix, Juniper, blackberry, Oracle, Sun, Java, Nortel, IBM, HP, EMC, Novell, nokia and Many more. We will use your name to take your test in our testing center, so you no need to take any training, no need to take the test or go anywhere. You can certified at home without any effort. We have 100% pass rate so we give you 100% guarantee for your All IT- certification. All that you need to do is wait for 7 business days only.

Administrative Templates Node

Administrative Templates Node

In both the Computer Configuration and the User Configuration nodes, the Administrative Templates node (shown in Figure 10-4) contains registry-based Group Policy settings. There are more than 550 of these settings available for configuring the user environment. As an administrator, you might spend a significant amount of time manipulating these settings. To assist you -with the settings, a description of each policy setting is available in three locations:

•       In the Explain tab in the Properties dialog box for the setting. In addition, the Set¬

ting tab in the Properties dialog box for the setting lists the required operating sys¬

tem for the setting.

•       In Administrative Templates Help (a new feature of Windows Server 2003). The

required operating system for each setting is also listed.

•       In the Extended tab (a new feature of Windows Server 2003, selected by default)

in the Group Policy Object Editor. The Extended tab provides a description of

each selected setting in a column between the console tree and the settings pane.

The required operating system for each setting is also listed.

Each of the settings in the Administrative Templates node can be:

•       Not Configured    The registry is not modified.

•       Enabled    The registry reflects that the policy setting is selected.

•       Disabled    The registry reflects that the policy setting is not selected.

Settings in the Administrative Templates node in the Computer Configuration node are saved in the HKEY_LOCAL_MACHINE (HKLM) registry key. Settings in the Administrative Templates node in the User Configuration node are saved in the HKEY_CURRENT_USER (HKCU) registry key. HKLM and HKCU each place registry information that is specific to Group Policy in one of the following four reserved trees:

•       HKEY_LOCAL_MACHINE\Software\Policies (computer settings)

•       HKEY_CURRENT_USER\Software\Policies (user settings)

•       HKEY_LOCAL_MACHINE\Software\Microsoft\

Windows\CurrentVersion\Policies (computer settings)

•       HKEY_CURRENT_USER\Software\Microsoft\

Winclows\CurrentVersion\Policies (user settings)

In the Computer Configuration and the User Configuration nodes, the Administrative Templates node contains the Windows Components, System, and Network nodes. The nodes in the Windows Components node enable you to administer Windows Server 2003 components including Microsoft NetMeeting, Internet Explorer, Application Compatibility, Task Scheduler, Terminal Services, Microsoft Windows Installer, Microsoft Windows Messenger, Microsoft Media Player, and Microsoft Update. For the Computer Configuration node only, the Windows Components folder also includes the Internet Information Services node. For the User Configuration node only, the nodes in the Windows Components folder also include Help and Support Center, Windows Explorer, and MMC. The settings in the System node are used to control how the Windows Server 2003 operating system is accessed and used, including settings for user profiles, scripts, logon and logoff functions, and Group Policy itself. For the Computer Configuration node only, the settings in the System node also include settings for disk quotas, the Net Logon service, remote assistance, system restore, error reporting, Windows File Protection, Remote Procedure Call, and Windows Time Service. For the User Configuration node only, the settings in the System node also include settings for Ctrl+Alt+Del options and power management.

The settings in the Network node enable you to control how the network is accessed and used, including settings for offline files and network and dial-up connections. For the Computer Configuration node only, the settings in the Network node also include settings for the Domain Name System (DNS) client, the quality of service (QoS) packet scheduler, and Simple Network Management Protocol (SNMP).

For the Computer Configuration node only, the Administrative Templates node contains additional registry-based Group Policy settings pertaining to printers in the Printers node. For the User Configuration node only, the Administrative Templates node contains additional registry-based nodes for the Start menu and taskbar, the desktop, Control Panel, and shared folders. The settings in these nodes control a user's Start menu, taskbar, desktop, Control Panel, and shared folders.

Because there are so many settings in the Administrative Templates node, a feature that filters the view of administrative templates has been developed in Windows Server 2003 in an effort to reduce screen clutter. You might want to filter your view of administrative templates if you are inconvenienced by seeing too many administrative template settings at once in the Group Policy Object Editor. Administrative templates view filtering simply selects the settings that are visible in the editor.

Review


Lesson 1 Review

1.      What are two ways to locate Active Directory objects?

There are two ways to locate Active Directory objects: 1) use the Find option on the Active Direc-tory Users And Computers console, and 2) use the Dsquery command.

2.      Which Dsquery command should you use to find users in the directory who have

been inactive for two weeks?

Dsquery user -inactive 2

3.      Which Dsquery command should you use to find computers in the directory that

have been disabled?

Dsquery computer -disabled

4.      What is the purpose of the saved queries feature?

The saved queries feature enables administrators to create, edit, save, organize and e-mail saved queries in order to monitor or perform a specific task on directory objects.

5.      Which of the following is not a valid object type in the Find option?

a.      Users, Contacts, and Groups

b.      Sites

c.      OUs

d.      Computers

The correct answer is b. Sites is not an object type in the Find option.

Lesson 2 Review

1.      What is a security principal?

A security principal is a user, group, computer, or service that is assigned a SID. A SID uniquely identifies the user, group, computer, or service in the enterprise and is used to manage security principals.

2.      You are trying to assign permissions to an object in its Properties dialog box, but

you cannot find the Security tab. How can you fix this problem?

To view the Security tab in the Properties dialog box, you must select Advanced Features on the View menu on the Active Directory Users And Computers console.

3.      The permissions check boxes for a security principal are shaded. What does this

indicate?

If a permission is inherited, its check boxes (located in the Security tab in the Properties dialog box for an object, and in the Permission Entry dialog box for an object) are shaded. However, shaded special permissions check boxes do not indicate inherited permissions. These shaded check boxes merely indicate that a special permission exists.

4.      What are effective permissions?

Effective permissions are the overall permissions that a security principal has for an object, including group membership and inheritance from parent objects.

5.      User X is a member of the Sales group and the Marketing group. The Sales group

has Write permission for the Accounts shared folder. The Marketing group has Full

Control permission for the Accounts shared folder. User X alone has Read permission for the Accounts shared folder. Which of the following permissions does User

X have for the Accounts shared folder?

a.      Write permission only

b.      Read permission only

c.      Read and Write permissions only

d.      Full Control permission only

e.      All permissions

The correct answer is e. When you assign a permission to a security principal for access to an object and that security principal is a member of a group to which you assigned a different permission, the security principal's permissions are the combination of the security principal and group permissions. User X has Full Control permission through membership in the Marketing group. By definition, Full Control permission contains all of the other permissions.

Practice: Controlling Access to Active Directory Objects


In this practice, you assign standard and special permissions for an object, set inheritance for the permissions, and remove security principals and their permissions from an object.

Exercise 1: Assigning Standard and Special Permissions

In this exercise, you assign a standard permission and a special permission to the Sales group for the East OU.

^      To assign standard and special permissions

1.      Log on to Server 1 as Administrator.

2.      On Serverl, use the procedure provided earlier in this lesson to assign the Full

Control standard permission to the Sales group for the East OU.

3.      Use the procedure provided earlier in this lesson to edit the special permissions

already assigned to the Sales group for the East OU. Change the special permissions to not allow the Modify Owner permission.

4.      Access the Security tab in the Properties dialog box for the East OU. The Sales

group should be listed in the Group Or User Names box.

5- Access the Security tab in the Properties dialog box for the Chicago OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

No, the Sales group is not listed for the Chicago OU because inheritance has not been set.

6. Access the Security tab in the Properties dialog box for User One in the Chicago OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

No, the Sales group is not listed for User One in the Chicago OU because inheritance has not been set.

Exercise 2: Setting Inheritance for a Permission

In this exercise, you set inheritance for the permissions you assigned to the Sales group for the East OU in Exercise 1. First, you set the permissions to be inherited by all child objects. Then, you set the permissions to be inherited only by immediate child objects. You check the results of your inheritance settings.

^      To set inheritance for a permission

1. On Serverl, use the procedures provided earlier in this lesson to apply the per-missions you assigned to the Sales group in Exercise 1 to this object and all child objects.

2.      Access the Security tab in the Properties dialog box for the East OU. The Sales

group should still be listed in the Group Or User Names box.

3.      Access the Security tab in the Properties dialog box for the Chicago OU. Is the

Sales group listed in the Group Or User Names box? Why or why not?

Yes, the Sales group is listed for the Chicago OU because inheritance has applied the permission to the East OU and all of its child objects. The Chicago OU is a child object of the East OU.

4.      Access the Security tab in the Properties dialog box for User One in the Chicago

OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

Yes, the Sales group is listed for User One because inheritance has applied the permission to the East OU and all of its child objects. User One is a child of the Chicago OU, which is a child object of the East OU.

5.      On Serverl, use the procedures provided earlier in this lesson to apply the permissions you assigned to the Sales group in Exercise 1 to only the immediate child objects of the East OU.

6.      Access the Security tab in the Properties dialog box for the East OU. The Sales group should still be listed in the Group Or User Names box.

7.      Access the Security tab in the Properties dialog box for the Chicago OU. Is the

Sales group listed in the Group Or User Names box? Why or why not?

Yes, the Sales group is listed for the Chicago OU because inheritance has applied the permission to the East OU and its immediate child objects. The Chicago OU is an immediate child object of the East OU.

8.      Access the Security tab in the Properties dialog box for User One in the Chicago

OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

No, the Sales group is not listed for User One because inheritance has applied the permission to the EastOU and its immediate child objects. User One is a child of the Chicago OU and is not an immediate child object of the East OU.

Exercise 3: Removing Security Principals and Their Permissions

In this exercise, you remove the Sales group and the permissions assigned to it for the East OU.