Windows creates two built-in user accounts automatically: Administrator and User.

Domain

his occurs because you are trying to access a domain resource from a system that is outside the domain (the server install in the lab is not joined to the domain.)

When specifying the credential, it is infotech\first.last (no \\ in front. That is for a UNC name)

While you are working the help desk for a corporate network, a user named Leo calls to request access to the files for Trinity, a new classified project. The Trinity files are stored in a shared folder on a Windows Server 2016 file server, which is locked in a secure data storage facility in New Mexico. After verifying that he has the appropriate security clearance for the project, you create a new group on the file server called TRINITY_USERS and add Leo's user account to that group. Then, you add the TRINITY_USERS group to the access control list for the Trinity folder on the file server and assign the following NTFS permissions:

• Allow Modify
• Allow Read & Execute
• Allow List Folder Contents
• Allow Read
• Allow Write

Share: Change

NTFS: FC

Effective: Change

You attempted to connect to a network file share but the connection failed. You pinged the server by it's name but did not receive a response. What is the next thing you should try?

System

Share: FC

NTFS: R & E

Effective: R & E

Answer the following question either 'most restrictive' or 'least restrictive':

When NTFS permissions for a user are combined with NTFS permissions for a group that the user is a member of, the effective permissions are the ______________________ permissions

Share: Not Applicable

NTFS: Modify

Effective: Modify

Each group ends up with the appropriate desired permissions when the share and NTFS combine.

Answer the following question either 'most restrictive' or 'least restrictive':

When NTFS permissions for a group are combined with Share permissions for a user that is a member of that group, the effective permissions are the ______________________ permissions.

▪ Domain

Schema

master database containing definitions of all objects in the Active Directory

the Schema contains rules and definitions for creating and modifying object classes within Active Directory  

Contains information about each object in every domain in the forest o Stored on DCs that have been designated as GC servers o Data is distributed through replication o A GC contains full information about objects in its own domain and partial information about objects in other domains in the forest o Applications such as Exchange rely heavily on GC servers o The first DC in a New Forest has to be a GC server o In a single domain forest, it is recommended that you make every DC a GC server

Each site should have a GC server so that searches are not done over expensive WAN links o Configured in the NTDS settings properties (in AD Sites & Services)

• DNS is a hierarchical method of associating domain names with IP addresses
• The 13 root servers are the ultimate authorities 
• DNS names are resolved using one or more queries to a server or servers that are ‘authoritative’ for a given name. The queries may follow the path of the FQDN from the top of the hierarchy (the TLD) down to the host 
• A Domain Name must be registered with the appropriate managing authority so that the name and address is added to the namespace and can be resolved
• Internet Domains must be registered with an approved registrar and the addresses for DNS servers that will resolve the domain name must be provided. This process facilitates the appropriate creation of the namespace

• Aging and scavenging are processes for cleaning up the DNS database after DNS records become out of date
• o Configure aging and scavenging through the DNS Tool in the properties of the zone. 

• What are the Types of Resource records?

• SOA (Start of Authority)Indicates the server that is the best authoritative source for the zone Each zone must have and SOA record and only one SOA record can be in a zone
• ▪ NS (Name Server) Indicates a DNS server functioning as an authority for the zone
• ▪ A (Address) Name to IP v4 address mappings for hosts
• ▪ AAAA (Address) Name to IP v6 address mappings for hosts
• PTR (Pointers) Address to name mappings used in reverse lookup zones
• PTR (Pointers) Creates an alias that points to the canonical name of a host identified by an A record

must be selected for domain controllers to register their records with DNS.

Verify that dynamic updates are selected through the zone properties in the DNS tool. 

Reverse Lookup Zones answer queries in which a client provides an IP address and DNS resolves the IP address to a hostname

Reverse lookup zones can be created through the DNS tool.

• Display folder and file names ▪ View attributes ▪ Read file data ▪ Run programs ▪ Access subfolders

Create files and folders ▪ Change and append data in files ▪ Change attributes ▪ Delete folders and files

also includes Read property

Display folder and file names ▪ View attributes ▪ Read file data ▪ Run programs ▪ Access subfolders

Description of Full Control

Change permissions ▪ Take ownership of files

Change:

-Create files and folders ▪ Change and append data in files ▪ Change attributes ▪ Delete folders and files

-Create files and folders ▪ Change and append data in files ▪

Read:

Change attributes ▪ Delete folders and files

Display folder and file names ▪ View attributes ▪ Read file data ▪ Run programs ▪ Access subfolders

▪ Apply to local and network users

▪ When combined – result is most permissive

▪ Can be applied to folders and files

▪ Are only available on NTFS partitions (volumes)

Who overrides who? 

Do groups override users

or do users override groups?

Permissions Inheritance

list as many as you know.

When permissions appear to be greyed out, it is usually because they are being inherited

Turn inherited permissions off in the ‘Advanced’ window o Recommendation: when you disable inherited permissions, copy the existing permissions to the object and then edit them o When permissions are not inherited, they are said to be ‘Explicit’ permissions