1

1. Cache zero interactive logons. 2. Create a scheduled task that runs Defrag.exe. 3. At the command prompt, run Ipconfig /all. 4. Run Sigverif.exe. 5. Modify the Account settings for User1. 6. Modify the properties of User1's account. 7. From the local security policy, modify the Security Options. 8. Xcopy 9. Remove the Research group. Add the ResearchManagers group and assign the group Allow - Change permission. 10. Remove User1 from the IT group. 11. Move the HR folder to D:\. Share D:\HR as HRData and assign the HR group Allow - Change. 12. Wuauclt 13. From the command prompt, run WSUSUTIL /Reset. 14. From the Active Directory Sites and Services console, modify the Licensing Site Settings. 15. Add an additional driver from the properties of Printer1. 16. From the Performance console, create an alert. 17. Delete the Default FTP Site. Create a new FTP site. Select the option to isolate users and specify the FTP site directory of c:\inetpub\ftproot. 18. Certutil.exe by using the -backup parameter

19. Restore the system state backup. 20. From the Local Area Connection properties, configure the Internet Protocol (TCP/IP) settings. 21. Convert Disk2 to a dynamic disk. 22. Right-click on Disk2 and then click Repair Volume. 23. IISCnfg.vbs /copy 24. Ntbackup.exe and Rsm.exe 25. Certification Authority snap-in 26. Add Paul's user account to the Enterprise Admins group. 27. Convert Disk3 to a dynamic disk. 28. From the D volume properties, modify the Shadow Copies settings. 29. Move the database to the second disk. 30. In the Boot.ini file, add the /PAE switch and then restart the server. 31. At the command prompt, run Ipconfig /all. 32. Memory : Pages Faults/sec 33. Install additional RAM. 34. one RAID-0 volume 35. Defragment the volume. 36. Disable write caching on drive D. 37. Restart the server by using the Safe Mode option. Review the contents of the ntbtlog.txt file.

38. From the Disk Management snap-in, change the drive letter. 39. 1-gigabit full-duplex 40. Use the Roll Back Driver option. 41. Run Sigverif.exe. 42. Modify the Driver Signing option. 43. From the properties of the device, select Roll Back Driver. 44. From the properties of each user account, configure a profile path. 45. Log on to Server1 as a local administrator. Create a shortcut to App1 in the All Users profile. 46. i ) From Active Directory Users and Computers, modify the properties of the User1 account. ii) On a file server, create a shared folder named Profiles and assign the Full Control share permission to the Everyone group. 47. Implement a roaming user profile for User1. In User1's roaming user profile, rename ntuser.dat to ntuser.man. 48. In the roaming user profile, rename the ntuser.dat file to ntuser.man. 49. On Server1, add the computer to a workgroup and then add the computer to the domain. Restart Server1. 50. Dsadd.exe 51. Active Directory Users and Computers 52. Join Server1 to a workgroup and then join Server1 to the domain. Restart Server1.

53. Contoso\Contoso-All to a domain local security group 54. Add the Managers-Global group to the Users-Global group. 55. Dsquery group 56. Csvde.exe 57. Active Directory Users and Computers 58. Ldifde.exe 59. ldifde.exe 60. \\server1\userdata\%username% 61. Dsquery.exe 62. Run the Netdom.exe reset command. 63. From Active Directory Users and Computers, enable the computer account. 64. Move the computer account to the Accounting OU. 65. In the Default Domain Policy, select Enforce password history. 66. In the Default Domain Policy, set the Account lockout duration to 0. 67. From the properties of the User1 account, modify the Log On To setting. 68. From the local security policy on Computer1, modify the Deny log on locally setting. 69. Enable auditing of logon event events in Server1's local policy. 70. Raise the functional level of the domain to Windows 2000 native.

71. Restart the server in Safe mode. 72. Instruct the user to log on to Server1 locally and then to change her password. 73. Instruct the user to log on as user1@contoso.com. 74. Instruct the user to restart her computer. 75. Remove the Users group from the Deny log on locally policy. 76. Modify the Default Domain Policy. 77. Register a service principal name (SPN) for the user account. 78. Change the share permission on Userdata to Authenticated Users: Change. 79. Assign the Sales group the Modify permission for the Sales folder. 80. On the Apps folder, remove Authenticated Users. 81. On the Apps folder, deny User1 the Write NTFS permission. 82. In the DFS root, create one link named Applications that has \\server1\applications and \\server2\applications as targets. 83. Modify the share permissions on the Data share. 84. Add the Helpdesk group to the App-install-global group. 85. Install and configure Terminal Server Licensing. 86. Terminal Services Manager 87. 3389 88. From Add or Remove Programs, add a new program.

89. From Add or Remove Programs, add the Terminal Server component. 90. Connect to Server1 by using Remote Desktop Connection. 91. From Terminal Services Manager, modify the RDP-TCP settings. 92. On the user's computer, modify the Remote Desktop Connection settings. 93. At the command prompt, run mstsc /console. 94. From Terminal Services Configuration, modify the server settings. 95. From the file properties, view the Advanced Security settings. 96. Modify the Advanced Security settings for the User1data folder. 97. On the Data folder, allow the Write permission. 98. Cacls.exe 99. Modify 100. On the Sales folder, block permission inheritance and copy permissions. On the Sales folder, assign the Allow - Modify permission to the SalesUsers group. 101. Create a scheduled task to run Icacls.exe. 102. Research Managers 103. On the HumanResources folder, disable permission inheritance and remove the inherited permissions. 104. i ) Add the EU-HR group to Contoso-HR. ii) Change the scope of the EU-HR group to global. 105. Assign User1 the Change permission for the Marketing share.

106. Allow-Modify permissions on the Marketing folder. 107. On ResearchConfidential.rtf, assign the Read permission to ResearchUsers. 108. In the Home folder, remove the NTFS permissions for Domain Users. 109. Open the Default Domain Controller Policy. Modify the Retain Security Log setting. 110. Examine the Security Event Log on both domain controllers. 111. Connect to each Web Server by using Event Viewer. Save the Application logs as the Event Log file type. 112. Configure an Alert by using a counter from the Logical Disk performance object. 113. From GPO1, configure the Specify intranet Microsoft update service location setting. 114. as a replica of Server1 115. i ) Configure a license group for each shared computer. ii ) Configure Server1 to support either Per Device or Per User licensing mode. 116. Run mstsc.exe /console, and then connect to Server1. 117. compmgmt.msc 118. Use a Group Policy Object (GPO) to disable the Allow users to connect remotely using Terminal Services setting. 119. Open the System properties, and then modify the Remote settings.

120. Offer Remote Assistance 121. Run mmc.exe and then add the Active Directory Users and Computers snap-in. 122. Start the Remote Registry service. 123. Run the command cscript %systemroot%\system32\prnmngr.vbs l > printers.txt. 124. Restart the Print Spooler service. 125. Assign the Manage Documents permission to the Sales group. 126. Add more RAM. 127. In Performance Logs and Alerts, create a counter log. 128. From the System Monitor snap-in, add a counter. 129. From Internet Information Services (IIS) Manager, modify the properties of the Web site. 130. From the Performance console, create a counter log. 131. From the properties of each volume, enable quotas. 132. Add two processors and upgrade to Windows Server 2003 Enterprise Edition. 133. From the properties of Printer1, modify the Security settings. 134. Create a counter log to capture the performance data for logical disk D:. 135. Move the Web site content. 136. Rewrite the application.

137. Task Manager 138. Install an additional network adapter. 139. Create a new application pool, and then configure App2 to use the new application pool. 140. Remove the App1 virtual directory. Create a new Web site, and then configure the Web site to use a host header of App1. In DNS, create a Host record for App1. 141. Disable the Directory browsing option. 142. Configure both Web sites to use different IP addresses. 143. Start the server by using the Windows Server 2003 SP2 installation media. 144. On Server1, install twcli32.msi. 145. From ntdsutil.exe, run Set DSRM Password. 146. On Server2, enable Shadow Copies for all volumes. 147. Modify the Shadow Copies settings. 148. volume E 149. Log on to Server1 by using the Administrator account. 150. From the %systemroot%\repair folder, copy asr.sif, asrpnp.sif, and setup.log to the floppy disk. 151. %systemroot%\sysvol\sysvol\contoso.com\scripts folder 152. the file by using the Previous Versions Client 153. From the DHCP snap-in, back up the server.

10

154. From Scheduled Tasks, examine the log. 155. Wednesday's ASR backup 156. Assign the Back up files and directories user right by using a Group Policy object (GPO). 157. Configure Folder Redirection by using a Group Policy object (GPO). 158. Remove the mirror. 159. Start Server1 by using the Windows Server 2003 SP2 installation media and access the Recovery Console. 160. Restore the system state data. 161. Restore the files to their original location and select the Replace existing files if they are older than the backup files option. 162. the files from the full backup and from the Monday, Tuesday, and Wednesday backups 163. the differential backup from Wednesday and then the full backup from Sunday 164. Start in Directory Services Restore Mode and restore the system state. 165. Attach an existing file server to the SAN storage locations. Configure the shared folders on the server. 166. Modify the user rights assignments in the local security policy on the branch office server. 167. Restore the backup to an alternate location.

11

168. On Server1, use Windows Backup to back up the Home folder. On Server2, use Windows Backup to restore the Home folder. 169. copy 170. Modify the General options from the WINS snap-in. 171. Log on as a batch job. 172. three 173. a copy backup to disk everyday a normal backup to tape on Friday a differential backup to tape on Sunday, Tuesday and, Thursday 174. incremental 175. differential 176. From Windows System Tools, run Scheduled Tasks. 177. Configure Server1 to perform a memory dump.