1、Windows server 2003安全设置　教材编号：2274 第8章
2、证书管理　教材编号：2277 第9章
3、网络通讯安全IPSEC　教材编号：2277 第8章
4、规划通讯安全　教材编号：2278 第9章

讨论：实践案例讨论

微软2003专题七：系统与网络安全(20070323)在线专题授课音频

答疑整理：

1、A user has forgotten his or her password and attempts to log on several times with
an incorrect password. Eventually, the user receives a logon message indicating
that the account is either disabled or locked out. The message suggests that the
user contact an administrator. What must you do?
a. Delete the user object and recreate it.
b. Rename the user object.
c. Enable the user object.
d. Unlock the user object.
e. Reset the password for the user object.
The correct answers are d and e. Although the logon message text on Windows 2000 and other
previous operating system versions indicates that the account is disabled, the account is actually
locked. Windows Server 2003 displays an accurate message that the account is, in fact,
locked out. However, you can recognize the problem by examining what caused the message: a
user forgot his or her password. You must unlock the account and reset the password.

2、1. Which of the following tools allows you to administer a share on a remote server?
Select all that apply.
a. The Shared Folders snap-in.
b. Windows Explorer running on the local machine, connected to the remote
server’s share or hidden drive share.
c. Windows Explorer running on the remote machine in a Terminal Services or
Remote Desktop session.
d. The File Server Management console.
The correct answers are a, c, and d. Windows Explorer can be used only to administer a local
share, so you would have to run a remote desktop session to the remote server, and run
Windows Explorer in that session to manage that server’s shares. A more common, and a bet-
ter, practice is to use the Shared Folders snap-in, which is included in the File Server Manage-
ment console.

3、 Bill calls again to indicate that he still cannot access the departmental plan. You
use the Effective Permissions tool, select Bill’s account, and the tool indicates that
Bill is, in fact, allowed sufficient permissions. What might explain the discrepancy
between the results of the Effective Permissions tool and the issue Bill is reporting?
The Effective Permissions tool is only an approximation of a user’s access. It is possible that
a permission entry is assigned to a logon-related account, such as Interactive or Network, that
could be denying access. Permissions for logon groups are not evaluated by the Effective Per-
missions tool. Or, if you are not logged on as a Domain Admin, you may not be able to read all
group memberships, which might skew the resulting permissions report.

4、You’re installing a printer on a client computer. The printer will connect to a logical
printer installed on a Windows Server 2003 print server. What type or types of
information could you provide to set up the printer? (Choose all that apply.)
a. TCP/IP printer port
b. Model of the print device
c. URL to printer on print server
d. UNC path to print share
e. Printer driver
The correct answers are c and d. When you add a network printer, you can search for the printer
in Active Directory, enter the UNC or URL to the printer, or browse for the printer. When you connect
to the printer, the model is specified by the shared logical printer, and the driver is downloaded
automatically.