To Use Run As To Start A Program As An Administrator

By Author: Mike Jones
Total Articles: 256
Comment this article

1.Log on to Serverl as User9.
On Serverl, use the procedure provided earlier in this lesson to use Run As to start mcse 2008 exam Active Directory Users And Computers as the Administrator for the contoso.com domain. Use the Administrator password. (Hint: You can access Active Directory Users And Computers from Control Panel.)
Verify that you can now use Active Directory Users And Computers as a domain administrator by attempting to add a new user to the Chicago OU. If you can add a new user, you are successfully running Active Directory Users And Computers as Administrator while logged on as User9.
Two security specialists have been contracted to create group policy for the Humongous.com domain. They have no need to perform most administrative tasks. How should you assign their group memberships?
Jean says that there are four internal auditors in the forest root domain. There are two internal auditors in each of the child domains. Each set of internal auditors has been placed in a global group within each domain. These groups are named IA_Main, IA_East, and IA_West ...
... after their respective locations. Jean wants all of the members of these groups to be able to access the same resources in every domain. What is the recommended way to configure this?
Create a universal group that all individual mcse exam global groups can become a member of. This will allow each internal auditor to have access to resources granted to the universal group. Choose a name for the group that represents the entire company, such as HumongousJA.
The network administrators from the East domain want to know why the option to
create a universal group is not available in their domain. What can you tell them?
Universal groups are only available to domains that have a functional level of Windows 2000 native or later. When using the mixed functional level, you cannot create universal groups. In order to change the functional level, all of the existing Windows NT 4 backup domain controllers (BDCs) must be removed or upgraded. Once the domain functional level is raised, the two Windows Server 2003 domain controllers will no longer replicate the domain database to Windows NT 4 BDCs.
3.The network administrators from the West domain want to know why everyone always recommends placing global groups into universal groups, instead of just
placing the users directly into the universal groups. What should you tell them?
Universal group membership changes cause forest-wide replication. If you use global groups in the universal groups instead of users, it is less likely that there will be membership changes to the universal groups. If instead you decided to place users in universal groups, every time a user was added to, or deleted from, a universal group, forest wide replication would take place. In most domains the user accounts are modified more frequently than the groups themselves. Once you are able to upgrade all the domain controllers in the forest, you'll be able to raise the domain functional level to Windows Server 2003, which would alleviate this issue and concern.
4.Jean approves a plan to hire assistants for each domain to create and manage user accounts. How can you give the assistants the immediate ability to help in this way without making them domain administrators?
Place the assistants in the Account Operators group of the
free comptia security+ exam domains for which they are expected to be assistants.