Practice: Controlling Access To Active Directory Objects

By Author: smileyi
Total Articles: 30
Comment this article

In these free Microsoft exam papers free Microsoft exam papers, you assign standard and special permissions for an object, set inheritance for the permissions, and remove security principals and their permissions from an object.

Exercise 1: Assigning Standard and Special Permissions

In this exercise, you assign a standard permission and a special permission to the Sales group for the East OU.

^ To assign standard and special permissions

1. Log on to Server 1 as Administrator.

2. On Serverl, use the procedure provided earlier in this lesson to assign the Full

Control standard permission to the Sales group for the East OU.

3. Use the procedure provided earlier in this lesson to edit the special permissions

already assigned to the Sales group for the East OU. Change the special permissions to not allow the Modify Owner permission.

4. Access the Security tab in the Properties dialog box for the East OU. The Sales

group should be listed in the Group Or User Names box.

5- ...
... Access the Security tab in the Properties dialog box for the Chicago OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

No, the Sales group is not listed for the Chicago OU because inheritance has not been set.

6. Access the Security tab in the Properties dialog box for User One in the Chicago OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

No, the Sales group is not listed for User One in the Chicago OU because inheritance has not been set.

Exercise 2: Setting Inheritance for a Permission

In 70-298 Exam 70-298 Exam, you set inheritance for the permissions you assigned to the Sales group for the East OU in Exercise 1. First, you set the permissions to be inherited by all child objects. Then, you set the permissions to be inherited only by immediate child objects. You check the results of your inheritance settings.

^ To set inheritance for a permission

1. On Serverl, use the procedures provided earlier in this lesson to apply the per-missions you assigned to the Sales group in Exercise 1 to this object and all child objects.

2. Access the Security tab in the Properties dialog box for the East OU. The Sales

group should still be listed in the Group Or User Names box.

3. Access the Security tab in the Properties dialog box for the Chicago OU. Is the

Sales group listed in the Group Or User Names box? Why or why not?

Yes, the Sales group is listed for the Chicago OU because inheritance has applied the permission to the East OU and all of its child objects. The Chicago OU is a child object of the East OU.

4. Access the Security tab in the Properties dialog box for User One in the Chicago

OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

Yes, the Sales group is listed for User One because inheritance has applied the permission to the East OU and all of its child objects. User One is a child of the Chicago OU, which is a child object of the East OU.

5. On Serverl, use the procedures provided earlier in this lesson to apply the permissions and free CompTIA exam questions free CompTIA exam questions you assigned to the Sales group in Exercise 1 to only the immediate child objects of the East OU.

6. Access the Security tab in the Properties dialog box for the East OU. The Sales group should still be listed in the Group Or User Names box.

7. Access the Security tab in the Properties dialog box for the Chicago OU. Is the

Sales group listed in the Group Or User Names box? Why or why not?

Yes, the Sales group is listed for the Chicago OU because inheritance has applied the permission to the East OU and its immediate child objects. The Chicago OU is an immediate child object of the East OU.

8. Access the Security tab in the Properties dialog box for User One in the Chicago

OU. Is the Sales group listed in the Group Or User Names box? Why or why not?

No, the Sales group is not listed for User One because inheritance has applied the permission to the EastOU and its immediate child objects. User One is a child of the Chicago OU and is not an immediate child object of the East OU.

Exercise 3: Removing Security Principals and Their Permissions

In this exercise, you remove the Sales group and the permissions assigned to it for the East OU.