640-802 dumps, 350-001 testking and VCP-310

You work as a network administrator for Certifyme.com. The Certifyme.com
network contains Terminal servers that host legacy applications.350-001 Only
Certifyme.com users that have Power Users group membership can run these legacy
applications.

A new certifyme.com security policy states that the Power Users Group must be
empty on all servers.640-802 You are therefore required to ensure that the legacy
applications will be available to users on the servers when the new security
requirement is enabled.

What should you do?

A. In the domain, the Domain Users Global group should be added to the Remote
Desktop Users built-in group in the domain.
B.
Leading the way in IT testing and certification tools, www.certifyme.com
- 19 -

On each terminal server, the Domain Users Global group should be added to the Remote
Desktop Users local group.
C. Allow the Local Users group to run the legacy applications my modifying the
compatws.inf security template settings.
VCP-310
Import the security settings into the default
Domain Controllers Group Policy Object.
D. Allow the Local Users group to run the legacy applications by modifying the
compatws.inf security template settings. Apply the modified template to each terminal
server.
Answer: D
Explanation: The default Windows 2000 security configuration gives members of
the local Users group strict security settings, while members of the local Power
Users group have security settings that are compatible with Windows NT 4.0 user
assignments. This default configuration enables certified Windows 2000
applications to run in the standard Windows environment for Users, while still
allowing applications that are not certified for Windows 2000 to run successfully
under the less secure Power Users configuration. However, if Windows 2000 users
are members of the Power Users group in order to run applications not certified for
Windows 2000, this may be too insecure for some environments. Some organizations
may find it preferable to assign users, by default, only as members of the Users
group and then decrease the security privileges for the Users group to the level
where applications not certified for Windows 2000 run successfully. The compatible
template (compatws.inf) is designed for such organizations. By lowering the security
levels on specific files, folders, and registry keys that are commonly accessed by
applications, the compatible template allows most applications to run successfully
under a User context. In addition, since it is assumed that the administrator
applying the compatible template does not want users to be Power Users, all
members of the Power Users group are removed.

Incorrect Answers:
A, B: Global group is a group that is available domain-wide in any domain functional
level, so why would you add to another group.
C: The Compatws.inf template is not intended for domain controllers, so you should not
link it to a site, to the domain, or to the Domain Controllers OU

Reference:
Jill Spealman, Kurt Hudson & Melissa Craft, MCSE Self-Paced Training Kit (Exam
70-294); Planning, Implementing, and Maintaining a Microsoft Windows Server 2003
Active Directory Infrastructure, Microsoft Press, Redmond, Washington, 2004, p. 8:5
Leading the way in IT testing and certification tools, www.certifyme.com
- 20 -

Dan Holme, and Orin Thomas, MCSA/MCSE Self-Paced Training Kit: Upgrading Your
Certification to Microsoft Windows Server 2003: Managing, Maintaining, Planning, and
Implementing a Microsoft Windows Server 2003 environment: Exams 70-292 and
70-296, Chapter 9