Need help with Active Directory questions. Thanks
1. Enter the following PowerShell command on ServerDCI and answer the question 1.1 Get-Aduser -Identity guest Select-Object - Property Enabled 1.1 What is the value of the property Enabled? Enter the following PowerShell commands on ServerDCI and answer the question 1.2 Enable-AdAccount - Identity guest Get-Aduser-Identity guest Select-Object - Property Enabled 1.2 What is the value of the property Enabled? 1.3 What is the PowerShell command for disabling the Guest account? Enter the following PowerShell commands on ServerDCI and answer question 2 New-ADOrganizational Unit -Name "UserAccountOU' Get-ADOrganizationalUnit -Identity *OU=User AccountOU,DC-mcsa2016,DC-Local' 2. What is the value of the property ObjectClass? Enter the following PowerShell command on ServerDCI and answer question 3. Get-ADOrganizationalUnit -Identity 'OU=User AccountOU,DC=mcsa2016,DC=Local' | Get-Member 3.1 How many methods does this object contain? 3.2 How many properties does this object contain? Review the Default Domain Controllers Policy" and answer questions 4 & 5 4. This policy has the Enforce flag set to "Yes. a. True b. False 5. How many security groups are provisioned to the Allow log on locally" policy? Location: Computer Configuration Policies Windows Settings Security Settings\Local Policies User Rights Assignment a. 0 b. 1 c. 6 d. 12 Enter the following PowerShell command on ServerDCI and use the information to answer question 6.1. Get-ADGroup 'Schema Admins' format-list 6.1 What is this object's SID? Locate the SID from question 6.1 in registry on ServerDCI to answer question 6.2 & 6.3 HKEY_CURRENT_USER\SOFTWARE\Microsoft Windo ws\CurrentVersion Group Policy Group Membership 6.2 What is the group number of this SID as stored in the registry? 6.3 What is data type of the registry value storing your SID? a. Binary b. DWORD c. String d. QWORD Add your ADTestUser account as a member to the "Server Operators" security group, then logon to the DC using this account issue the following command from a command prompt. Whoami/groups 7. This user is a member of how many Well-Known groups? a. 0 b. 1 c. 5 d. 7 Enter the following PowerShell command on ServerDCI and use output to answer question 8. get-adcomputer-Identity Serverdel - Properties 8.1 When was the password last set in terms of date? 8.2 The PasswordNeverExpires property is currently set to "True". a. True b. False Move your ADTestUser account to your OU titled Network Support then answer question #9 9. What is the DN of the ADTestUser security principal? Use PowerShell to set the property "ProtectedFromAccidentalDeletion" to False for the OU "Network Support" and verify success using ADUC. {Hints) Set-ADObject %DN%%propertyname% SFalse Replace %DN% with the distinguished name for your OU Replace %Propertyname% with the property name mentioned Note: you will need to have a leading character prefixed to the property name 10. What is the complete PowerShell command for performing this action? 1. Enter the following PowerShell command on ServerDCI and answer the question 1.1 Get-Aduser -Identity guest Select-Object - Property Enabled 1.1 What is the value of the property Enabled? Enter the following PowerShell commands on ServerDCI and answer the question 1.2 Enable-AdAccount - Identity guest Get-Aduser-Identity guest Select-Object - Property Enabled 1.2 What is the value of the property Enabled? 1.3 What is the PowerShell command for disabling the Guest account? Enter the following PowerShell commands on ServerDCI and answer question 2 New-ADOrganizational Unit -Name "UserAccountOU' Get-ADOrganizationalUnit -Identity *OU=User AccountOU,DC-mcsa2016,DC-Local' 2. What is the value of the property ObjectClass? Enter the following PowerShell command on ServerDCI and answer question 3. Get-ADOrganizationalUnit -Identity 'OU=User AccountOU,DC=mcsa2016,DC=Local' | Get-Member 3.1 How many methods does this object contain? 3.2 How many properties does this object contain? Review the Default Domain Controllers Policy" and answer questions 4 & 5 4. This policy has the Enforce flag set to "Yes. a. True b. False 5. How many security groups are provisioned to the Allow log on locally" policy? Location: Computer Configuration Policies Windows Settings Security Settings\Local Policies User Rights Assignment a. 0 b. 1 c. 6 d. 12 Enter the following PowerShell command on ServerDCI and use the information to answer question 6.1. Get-ADGroup 'Schema Admins' format-list 6.1 What is this object's SID? Locate the SID from question 6.1 in registry on ServerDCI to answer question 6.2 & 6.3 HKEY_CURRENT_USER\SOFTWARE\Microsoft Windo ws\CurrentVersion Group Policy Group Membership 6.2 What is the group number of this SID as stored in the registry? 6.3 What is data type of the registry value storing your SID? a. Binary b. DWORD c. String d. QWORD Add your ADTestUser account as a member to the "Server Operators" security group, then logon to the DC using this account issue the following command from a command prompt. Whoami/groups 7. This user is a member of how many Well-Known groups? a. 0 b. 1 c. 5 d. 7 Enter the following PowerShell command on ServerDCI and use output to answer question 8. get-adcomputer-Identity Serverdel - Properties 8.1 When was the password last set in terms of date? 8.2 The PasswordNeverExpires property is currently set to "True". a. True b. False Move your ADTestUser account to your OU titled Network Support then answer question #9 9. What is the DN of the ADTestUser security principal? Use PowerShell to set the property "ProtectedFromAccidentalDeletion" to False for the OU "Network Support" and verify success using ADUC. {Hints) Set-ADObject %DN%%propertyname% SFalse Replace %DN% with the distinguished name for your OU Replace %Propertyname% with the property name mentioned Note: you will need to have a leading character prefixed to the property name 10. What is the complete PowerShell command for performing this action
