Home

MCP EXAM 70-270 PREPARATION.

1. After the users are logged on they see a list of images to choose from The users select an image from the list and RIS reformats the entire drive and downloads the image to the target computer After about 30 to 40 minutes users have a clean installation of the operating system and applications MCP Exam 70270 Preparation doc 49 Joining a Workgroup When you are installing your Windows XP Professional client you will be asked whether you want to be a member of a workgroup or domain This is a very important issue but one that can be addressed easily to help you decide A workgroup is a great option for a small company or a home office environment In a workgroup the usernames are kept locally in a decentralized manner So for example if Derek needs to gain access to Dan s PC Dan will need to add Derek to his list of users which is located on his local PC Of course you can see that this arrangement can get out of hand very quickly and become too much overhead for even a small environment To join a domain you need to right click My Computer and select Properties Then select the Computer Name tab Here you can select either the manual option the Change button or the automated wizard option the Network ID button Figure 2 illustrates the interface Figure 2 Interface to change between a workgroup and domain Computer Name Changes IK You can change the name and the membership of this computer Changes may affect acc
2. Before a user can log on to a system with a Smart Card the user must be enrolled for a Smart Card certificate by an administrator who has the proper security privileges to enroll other users This enrollment process creates a certificate and a public encryption key for the user The user also needs to create or to be assigned a personal identification number PIN code which must be used in conjunction with the Smart Card when logging on to a Smart Card enabled computer MCP Exam 70270 Preparation doc 241 Practice Questions ile Brendan has just installed a brand new updated version of the software driver for his Zip drive removable media device After the driver installs successfully he is prompted to restart his Windows XP computer Unfortunately whenever he attempts to copy files to a Zip disk now he receives an error message and the files do not get copied to the disk He doesn t have the original Zip disk driver diskette but he wants to replace the new driver with the previous version What is the fastest and easiest way that he can accomplish this A Restart the computer press the F8 key during startup and select the Last Known Good Configuration option B Restart the computer press the F8 key during startup and select the Safe Mode option Uninstall the printer and then reinstall it and let Windows locate the correct driver C Open Device Manager right click the Zip device select Properties click the Driver tab an
3. Downloads the update in the background and then prompts the user for the installation of the update e Notify me before downloading any updates and notify me again before installing them on my computer First prompts the user to download the update and then prompts the user for the installation of the update after it is downloaded e Turn off automatic updating want to update my computer manually Disables the automatic update feature forcing manual installation of the updates or the use of Start Windows Update to obtain the new updates Figure 5 Automatic Updates tab of the System Properties dialog System Properties General Computer Name Hardware Advanced System Restore i Automatic Updates j Remote EA How do you want to be notified when updates are available for your computer Notification Settings Download the updates automatically and notify me when they are ready to be installed oO Notify me before downloading any updates and notify me again before installing them on my computer Turn off automatic updating wantto update my computer manually Previous Updates MCP Exam 70270 Preparation doc 58 Dynamic Update Dynamic Updates allows Windows XP Professional Setup to function with the builtin Windows Update feature Dynamic Update will allow the download of critical fixes and drivers needed during the setup process This feature is designed to help reduce difficulties during setup One way th
4. need to be a local account for authentication which is frowned upon in most enterprises You are the network administrator for a growing Web development company You have needed to purchase multiple Class C address ranges to keep up with the growth of the company and the number of computers You need to combine two of the Class C licenses that you have to increase the number of clients on a single network segment How will you accomplish this A Use DHCP instead of statically configuring your IP addresses B Use Classless Interdomain Routing to combine the two IP address ranges into one C Use Classful IP address ranges to combine the two IP address ranges into one D Use variable length subnet masking to combine the two IP address ranges into one Answer b is correct Classless Interdomain Routing CIDR is the technology that allows two or more IP address ranges to appear as if they are on the same network segment Answer a is incorrect because CIDR will still be needed even if DHCP is used Answer c is incorrect because a Classful IP address range will not solve the problem of combining the two Class C licenses together Answer d is incorrect because VLSM would make more network segments not reduce them You have just installed Windows XP Professional and want to use the new built in Windows Messenger service You have been using MSN Messenger but want to take advantage of the new features that the Windows Messenger offers To
5. Alerts enable you to generate actions based on a counter reaching a particular threshold For example you might want to be notified when a disk s capacity reaches 90 percent so that you might work to increase the disk s capacity before it fills up By specifying a counter such as Free Space for a logical disk and a threshold under 10 percent you can cause an event to be logged a program to be run a log to be started or a network message to be sent To configure alerts select the Alerts node in the Performance Logs and Alerts snap in Then right click in the Details pane and choose New Alert Settings Enter a name for your alert settings the name is for your use only Then in the Properties dialog box add the counter s appropriate for the alert you are configuring For each counter you must specify a threshold over or under a particular amount You select either Under or Over from the Alert When The Value Is drop down list and then specify the threshold amount in the Limit text box on the General tab You can then configure on the Action tab what will happen when those alerts are generated The General and Action tabs are shown in Figure 6 On the Schedule tab you can specify when the selected counters should be scanned If you specify no schedule scanning will begin as soon as you click OK The alert settings you have specified will appear in the Alerts node of the Performance Logs and Alerts snap in Right click an alert set
6. Driver IOMEGA ZIP 100 pp Device type Disk drives Manufacturer Standard disk drives Location Location 1 1 Device status This device is working properly If you are having problems with this device click Troubleshoot to start the troubleshooter Troubleshoot Device usage Do not use this device in the current hardware profile disable jUse this device enable Do not use this device in the current hardware profile disable Do not use this device in any hardware profiles disable MCP Exam 70270 Preparation doc 235 Figure 8 The Log On tab of the Properties dialog box for a service allows you to enable or disable it for each hardware profiles stored on the Removable Storage Properties Local Computer an General Log On Recovery Dependencies Log on as Local System account C Allow service to interact with desktop O This account fou can enable or disable this service for the hardware profiles listed below Hardware Profile Service ZIP Drive Enabled No ZIP Drive Disabled MCP Exam 70270 Preparation doc 236 Figure 9 The Hardware Profiles dialog box enables you to copy remove and configure hardware profiles Hardware Profiles pS You can set up hardware profiles for different hardware ga configurations At startup you can choose the profile you want to use Available hardware profiles ZIP Drive Current er ZIP
7. centralized authentication authorization auditing and accounting of connections for dial up and VPN remote access and demand dial connections it does not negotiate security settings 6 John is the network administrator for SofaKing Inc which has 15 print devices distributed throughout the enterprise SofaKing uses Internet Connection Sharing in its company to provide Internet access to its users The users computers receive an address from the server that is sharing the Internet connection The print devices must have static TCP IP addresses You want to ensure that the Dynamic Host Control Protocol DHCP service does not assign a conflicting IP address How should you accomplish this A Edit the Registry and change the STOP value to 192 168 0 200 B Edit the Registry value STOP to 192 168 0 1 C Exclude the print devices IP address from the DHCP scope D Exclude the servers IP address from the DHCP scope A6 Answer a is correct To ensure that the Dynamic Host Control Protocol DHCP service does not assign a conflicting IP address you must edit the Registry and change the STOP value to 192 168 0 200 You would then assign to the printers static IP addresses from the range above 192 168 0 200 including 192 168 0 201 through 254 Answer b is incorrect because the value expressed in the answer would not allow enough addresses for the clients on the network Answer c is incorrect because the DHCP scope is hard coded an
8. e Update packs Due to the major differences between the Windows XP Registry and those of Windows 95 and 98 some applications may not work after the upgrade Software vendors may supply an update pack also called migration dynamic link libraries or DLLs that you can use during the upgrade process Obtain an upgrade pack and place it on the local hard drive During the upgrade process the installer asks whether any upgrade packs should be used Select Yes and then type in the file path to the upgrade pack to continue the installation process e File system selection Windows XP has three options from which to choose for a file system the old stand by FAT the newer option FAT32 and the best option for the systems that support it NT File System NTFS NTFS is the best option because it supports compression disk quotas encryption mount points and remote storage e Disk utilities Windows XP Professional uses a new version of NTFS that causes conflicts with antivirus software and disk defragmenting software You should remove such applications before you upgrade e Drive compression Before upgrading you should uncompress any drives that you have compressed with DriveSpace or DoubleSpace These Windows 95 and 98 drive compression utilities are incompatible with Windows XP e BlOS Ensure you have the latest BIOS that will support Windows XP e Backup The only true way to recover from a failed installation or OS is with a
9. A wizard appears if you are using this feature for the first time asking whether offline files should be synchronized during logon and logoff Click Next to accept the default Additional options are available after the wizard is finished 3 If you want the operating system to remind you that you are not connected to the network click the Finish button to accept the default option Enable Reminders If you accept this option a computer icon appears in the system MCP Exam 70270 Preparation doc 163 tray Whenever you are disconnected from the network a balloon appears notifying you that offline files are available After you have completed these steps a little double arrow icon appears on the file or folder that you have selected for offline usage This is simply a graphic indicator to inform users that the file is located on the network and that a local cached copy of the file is located on their computer Note A Windows NT 4 client cannot use the offline feature of Windows 2000 or Windows NET servers However a Windows XP Professional client can make files available for offline usage from a Windows NT 4 server share When using a Windows XP computer you can make network files available offline from any remote computer that supports Server Message Block SMB based file sharing such as Windows 9x Windows NT 4 Windows 2000 and Windows XP computers To view offline files after you are disconnected from the network open My Net
10. AppPatch folder AppHelp sdb Stores only the Help messages that prompt users for patches provides them with a URL from which to download non Microsoft patches or tells them where to find further information This file is also found in the Windir AppPatch folder A compatibility check is performed during the installation of Windows XP Professional This check serves to warn the user of any serious compatibility problems before the setup routine is complete Problematic applications are listed along with hardware compatibility information in the upgrade report generated by the setup program Windows XP compatibility support consists of three different modes End user modes Accessible via the Compatibility tab on the Properties dialog box for an application program shortcut or from the Program Compatibility Wizard You can access the Program Compatibility Wizard by clicking Start All Programs Accessories Program Compatibility Wizard Users can access six basic modes through the GUI Windows 95 Windows 98 Windows Me Windows NT 4 with Service Pack 5 Windows 2000 Run in 256 Colors and Run in 640480 Screen Resolution see Figure 13 Figure 13 The Compatibility tab for a program shortcut s Properties dialog box Shortcut to IMGMGR EXE Properties General Shortcut Compatibility If pou have problems with this program and it worked correctly on an earlier version of Windows select the compatibility mode that matches that earli
11. CHAPTER SIX CHAPTER SEVEN CHAPTER EIGHT CHAPTER NINE CHAPTER TEN CONCLUSION Page 5 MICROSOFT CERTIFICATION EXAMS Page 9 INSTALLING and DEPLOYING WINDOWS XP PROFESSIONAL Page 31 ESTABLISHING CONFIGURING and MANAGING RESOURCES Page 69 SETTING UP MANAGING and TROUBLESHOOTING SECURITY ACCOUNTS and POLICIES Page 123 IMPLEMENTING and MANAGING USER and DESKTOP SETTINGS Page 153 INSTALLING CONFIGURING and TROUBLESHOOTING HARDWARE DEVICES and DRIVERS Page 209 IMPLEMENTING MANAGING and TROUBLESHOOTING DISK DRIVES and VOLUMES Page 247 IMPLEMENTING MANAGING and TROUBLESHOOTING NETWORK PROTOCOLS and SERVICES Page 298 SYSTEM MONITORING PERFORMANCE OPTIMIZATION And RECOVERY FEATURES Page 323 INSTALLING ADMINISTERING and TROUBLESHOOTING REMOTE ACCESS SERVICES Page 365 Page 387 THIS COURSE SHOULD BE COMINED WITH e Other MCP and MCSE Exams eg MCP 70 290 MCP Exam 70270 Preparation doc 3 Majestic Mt Aoraki is an awe inspiring site My pledge my students To help you with your Learning Climb which is like scaling the heights of Mt Aoraki New Zealand s highest peak There are times when you will be stretched beyond your comfort zone and there will be other days when the upward journey seems difficult just like bad weather on the mountain Aoraki is not the easiest challenge There are many easier but less rewarding climbs Remember the words of Winston Churchill Never e
12. Likewise you might be asked to select the MCP Exam 70270 Preparation doc 11 best or most effective solution to a problem from a range of choices all of which technically are correct Taking the exam is quite an adventure and it involves real thinking This E Book shows you what to expect and how to deal with the potential problems puzzles and predicaments Next you will learn more about how Microsoft test questions look and how they must be answered Exam Layout and Design The format of Microsoft s Windows 2000 exams is different from that of its previous exams For the Core Four exams 70 210 or 70 270 70 215 70 216 and 70 217 the same six types of questions may appear but you are not likely to encounter complex multiquestion case studies Note The new Windows 2000 MCSE requirements include this Windows XP Professional exam as a possible Core Four exam You can either take the 70 270 Windows XP Professional exam or the 70 210 Windows 2000 Professional exam So now when someone refers to a Core Four exam they could mean more than just four possible exams For design exams each case study or testlet presents a detailed problem that you must read and analyze Figure 1 shows an example of what a case study looks like You must select the different tabs in the case study to view the entire case Figure 1 This is how case studies appear Overview Curent LAN Proposed LAN Curent WAN Proposed WAN Directoy
13. MCP Exam 70270 Preparation doc 281 Figure 9 The Properties dialog box for the local Recovery Policy for the Encrypting File System Encrypting Fle System Properties General Moving and Copying Encrypted Files Encrypted files that are moved or copied to another NTFS folder remain encrypted Encrypted files that are moved or copied to a FAT or FAT32 drive volume become decrypted because EFS is supported only on NTFS 5 volumes Files also become decrypted if they are moved or copied to a floppy disk Unless users have been granted shared access to an encrypted file or folder the following rules apply e Users who did not originally encrypt a file or folder receive an Access Is Denied message if they try to copy an encrypted file or folder e f users other than the one who encrypted the file attempt to move it to a different NTFS volume or to a FAT or FAT32 drive volume they receive an Access Is Denied error message e f users other than the one who encrypted the file attempt to move the encrypted file to a different folder located on the same NTFS volume the file is moved MCP Exam 70270 Preparation doc 282 Sharing Access to Encrypted Files with Other Users You can now share confidential access to encrypted files under Windows XP Professional This shared access applies only on a file by file basis it does not apply to folders To grant other users access to an encrypted file each user must have already encrypted at least
14. Practice Questions A1 Gregory has just installed Windows XP Professional on a new computer that is a member of a workgroup named Sales When he goes to create a network shared folder by right clicking a folder and selecting Sharing And Security the Properties dialog box for the folder displays only four tabs General Sharing Web Sharing and Customize The Sharing tab is divided into two sections Local Sharing and Network Sharing And Security No Security tab exists for NTFS permissions nor does any way exist to set Share permissions Even when Greggory right clicks a folder and selects Properties he still gets the same tabbed dialog box with the same four tabs The folder resides on an NTFS drive volume How can Greggory fix this problem A Go to Control Panel Administrative Tools Local Security Policy and enable the policy for Network Access Sharing And Security Model For Local Accounts B Open My Computer or Windows Explorer click Tools Folder Options click the View tab and clear the checkbox for Use Simple File Sharing C Open the Computer Management Console expand Services And Applications and click the Services node Right click the Workstation service and select Start Double click the Workstation service and set the Startup Type to Automatic D Open Control Panel and double click Network Connections Right click the Local Area Connection and select Properties Mark the checkbox for File And Printer Sharing For Micro
15. Subfolders And Files to specify the object s that you want encryption to affect 7 Click OK the encryption attribute is applied to the appropriate objects If you want to unencrypt a file or folder perform the same steps as outlined previously and simply clear the Encrypt Contents To Secure Data checkbox in the Advanced Attributes dialog box MCP Exam 70270 Preparation doc 279 Issues to Remember about Using EFS Only files and folders located on NTFS volumes may be encrypted If you encrypt a file or folder that is already compressed using NTFS compression that file or folder will become uncompressed You cannot and should not encrypt any files that are marked with the System attribute nor can you encrypt files that are stored within the systemroot folder structure which by default is the Windows folder Windows XP offers you the option of displaying both compressed and encrypted folders and files in a different color This feature enables you to readily identify objects that have one of these advanced attributes You configure this feature as a part of the View tab of the Folder Options dialog box available from the Control Panel as shown in Figure 8 Figure 8 The Show Encrypted Or Compressed NTFS Files In Color option on the View tab of the Folder Options dialog box General View File Types Offline Files Folder views You can apply the view such as Details or Tiles that you are using for this folder t
16. You can also eliminate the user portion of the RSoP if you only want to see the computer based settings MCP Exam 70270 Preparation doc 141 Note For Windows XP Professional you can only view Logging mode Planning mode will be available only on Windows NET servers or XP Professional client computers that have the administrative pack installed from the future release of Windows NET Server When the tool is run and finishes it gives you the results in the MMC that you initially opened Figure 5 show the resulting RSoP format which is the same format as the original Group Policy Editor Figure 5 RSoP snap in results for both the local computer and currently logged on user a Consolet Console Root alex on XPPRO1 RSoP Computer Configuration Windows Setting DEOR alex on XPPROI RSP 1 passwords remembered B Computer Configuration 42 days __ Software Settings f n O days LL Windows Settings O characters E Securty Settings Ei Password must meet complex Disabled op Account Policies a EP Password Policy Ed Store password using reversi Disabled EP Account Lockout g Local Policies dg Event Log LB Restricted Groups J Software Restriction C Administrative Teenplates GB User Configuration J Software Settings C Windows Settings MCP Exam 70270 Preparation doc 142 Security Configuration and Analysis It was back in the late days of Windows NT 4 that Microsoft introduc
17. You can run this program within a batch file or inside of a Windows script which in turn can be scheduled to run automatically using the Scheduled Tasks folder MCP Exam 70270 Preparation doc 265 Understanding Why Files Are Not Moved to the Beginning of NTFS Volumes On NTFS volumes Windows XP reserves a portion of the free space for a system file called the master file table MFT The MFT is where Windows stores all the information it needs to retrieve files from the volume Windows stores part of the MFT at the beginning of the volume Windows reserves the MFT for exclusive use so Disk Defragmenter cannot and does not move files to the beginning of volumes Using the Disk Cleanup Wizard Disk Cleanup helps free up space on your hard drive by searching your drive s and then showing you a list of temporary files Internet cache files and potentially unnecessary program files that you can safely delete You can instruct Disk Cleanup to delete none some or all of those files To use the Disk Cleanup Wizard perform the following steps 1 Click Start All Programs Accessories System Tools 2 Click the Disk Cleanup icon and follow the on screen instructions MCP Exam 70270 Preparation doc 266 File Systems Supported in Windows XP The Compact Disc File System CDFS has full support for CD based media in Windows XP Although Windows XP does not support the High Performance File System HPFS as used under IBM s OS 2 operating syst
18. computer To apply a transform file MST to the installation specify the t switch on the command line To write all installation errors to a log file add the L v logfile txt option to the command line MCP Exam 70270 Preparation doc 183 Multiple Language Support and Regional Options Windows XP offers excellent support for multiple languages It enables you to support people and companies that need to communicate in different languages by adding installed services for each input language that you need supported Installed services include the input language and the keyboard layout for that input language In addition the Multilingual User Interface MUI Pack for Windows XP lets administrators or users specify the language for the user interface for any of the 33 supported languages If your organization operates in a single language other than English you can deploy one of 24 different localized versions of Windows XP Professional For example if you are responsible for maintaining PC desktops in a company that operates only in French you could obtain the French localized version of Windows XP Professional Your users would still have support to view edit and print in hundreds of languages but the interface would only be available in French Windows XP Multilingual User Interface Pack The MUI Pack is an add on to the English version of Windows XP Professional and is available only via volume licensing programs to corporate users T
19. e Windows 98 Windows 98 Second Edition SE e Windows Millennium Edition ME e Windows NT 4 e Windows 2000 e Windows XP Transferring Settings from One Computer to Another The FAST Wizard offers several options for copying user and application settings to a new computer The Direct Cable Connection and the Network Connection options are the fastest and easiest methods To transfer settings and files from one computer to another using a network connection follow these steps On the old computer 1 Run the FASTWIZ exe program from the SUPPORT TOOLS folder on the Windows XP Professional CD ROM 2 At the Welcome window click Next to continue See Figure 17 MCP Exam 70270 Preparation doc 189 Figure 17 Selecting files and settings to copy using the File Settings and Transfer Wizard Files and Settings Transfer Wizard What do you want to transfer What do you want to transfer Based on your current selection the following items will be transferred O Settings only O Eles only sea and multimedia A options Both files and settings Windows Media Player Windows Movie Maker Specific folders Desktop Fonts My Documents My Pictures Let me select a custom list of files and Shared Desktop pool when click Next for advanced Siuued Documerts 3 Select a transfer method to use a network connection click either Home Or Small Office Network or Other and specify a local or network folder in which
20. located on the Taskbar tab of the Taskbar and Start Menu Properties dialog box This option keeps similar opened documents and files together on the taskbar while you are working on them In addition if the taskbar becomes too crowded with buttons this option will automatically group all the same applications into a single button on the taskbar When you click a grouped taskbar button you can choose from a pop up list of all the currently open documents for that group When you right click a blank area on the taskbar you can view many customization choices One of the available selections is Lock The Taskbar If you select Lock The Taskbar you cannot move or size it it remains stationary The Toolbars option enables you to add one or more toolbars to the taskbar for quick access to frequently used features or applications The available toolbars are the following e Address Adds an Address box for entering URLs on the taskbar e Links Adds the default Links for Internet Explorer 6 that ships with Windows XP as well as any custom links that you create e Desktop Adds icons such as My Documents My Computer and My Network Places to the taskbar that by default appear on the desktop under Windows 2000 and Windows 9x e Quick Launch Adds three icons by default that contain shortcuts to programs that you use most frequently Under Windows XP the default MCP Exam 70270 Preparation doc 172 Quick Launch toolbar places the Show D
21. network data packets through a router MCP Exam 70270 Preparation doc 305 Using APIPA If a computer is set up to obtain an IP address automatically from a DHCP server but no DHCP servers are available APIPA temporarily assigns an IP address to the local computer while it searches the network to make sure that no other network devices have been assigned the same IP address By running ipconfig you can view the current TCP IP information for the local computer An address such as 169 254 x y generally indicates that APIPA is currently in effect Windows XP clients will not indicate that they were unable to obtain an IP address from the DHCP server They will simply obtain an APIPA address without any warning or message It is essential that the help desk and IT staff be made aware that this is the default behavior and that they be sure to add it to their list of items to troubleshoot TCP IP communication issues MCP Exam 70270 Preparation doc 306 Working with TCP IP Profiles You now know that when a DHCP enabled client can t find a DHCP server it will be allocated an IP address from the APIPA range A new feature that Windows XP offers is the alternate TCP IP configuration option sometimes referred to as a TCP IP profile This feature is excellent for laptop users who need to connect to multiple networks A good example of this might be an executive who receives a DHCP allocated IP address at work but needs a static IP address for the h
22. restart the computer for the change to take effect B Reinstall Windows XP Professional on the system C Launch the Hardware Update Wizard by right clicking the existing processor in Device Manager and selecting Update Driver D Copy the Halacpi dll file from the Windows XP Professional Setup CD ROM to the systemroot system32 folder and then restart the computer A7 Answer b is correct The only way that you can enable ACPI support after you have upgraded your system s BIOS to support ACPI is to reinstall Windows XP Answer a is incorrect because there is no option button for Enable ACPI under the Power Options applet in the Control Panel Answer c is incorrect because the Hardware Update Wizard does not support enabling ACPI on systems that were not installed with ACPI support Answer d is incorrect because copying DLL files from the Windows XP CD ROM is not supported for upgrading the operating system to support ACPI 8 Which of the following statements about support for DVD and CD media are not true under Windows XP Professional Check all correct answers A You can write to CD R and CD RW media under Windows XP without using any third party applications B You can write to DVD R and DVD RW media under Windows XP without using any third party applications C You can play back DVD movies without third party decoder software or hardware by using the new Windows Media Player that ships with Windows XP D You cannot read DVD
23. setting was set in multiple places Answer a is incorrect because the scope specified in the syntax is user and you wanted to see computer settings Answer c is incorrect because the switch v is used which will not let you see whether a setting was set in multiple places This requires super verbose mode Answer d is incorrect because of the switch used as well 6 You make changes to the local policy on a Windows XP Professional workstation named WKSTN1 You want to refresh only the policy settings that have changed for the computer What command will you run to accomplish this A gpupdate target computer B gpupdate target computer force C gpresult scope computer D gpresult scope computer z A6 Answer a is correct The Group Policy Update tool refreshes Group Policy settings and has a number of different switches The target switch has two options Computer or User By default both User and Computer policy settings are refreshed if no switch is specified Therefore because you want to refresh only the settings for the computer you need to specify the option Computer Answer b is incorrect because the force switch reapplies all policy settings and you only want the settings that have changed to be refreshed Answers c and d are incorrect because the gpresult command only gives the Resulting Set of Policies it does not refresh them in any manner MCP Exam 70270 Preparation doc 150 A7 A8 You have made changes to
24. 168 1 20 with a subnet mask of 255 255 255 0 is determined to have the network ID of 192 168 1 The host address for the computer therefore is 20 This is analogous to the street name of a postal MCP Exam 70270 Preparation doc 300 address versus the actual house number of the address The street may have many houses but only one house has a house number of 20 e Default gateway This IP address specifies the router for the local network segment or subnet If this address is absent the computer cannot communicate with other computers that are located outside of the local network segment Default gateway information is often obtained through DHCP if the computer is configured to obtain an IP address automatically e Preferred and alternate DNS servers Having more than one DNS server on a network helps provide load balancing and fault tolerance for client computers that need to perform hostname to IP address lookups as well as IP address to hostname lookups DNS is also used to find domain based services such as domain controllers DFS roots and Global Catalog servers Name resolution is a critical issue in TCP IP DNS server information is often obtained through DHCP if the computer is configured to obtain an IP address automatically e WINS addresses WINS provides name resolution between NetBIOS computer names and IP addresses WINS server addresses are often obtained through DHCP if the computer is configured to obtain an IP addr
25. 60 Product Activation Product activation is an attempt to reduce the piracy of the Windows XP Professional product Every system that is installed needs to be activated within 30 days or the system will no longer function until it is activated Note Those enterprises both large and small that have an open license agreement for Windows XP do not have to activate the installations of XP Professional This is to allow for the disperse methods of installation and optimize the installation process The activation of your OS is based on the Product ID as well as hardware that is located within the system For those of you who change hardware on your systems this can cause some issues However if you significantly overhaul your hardware you will need to reactivate your system Activation can be done over the Internet or via a phone call to Microsoft In either case the process is rather painless and takes only a few minutes In the latest release from Microsoft Windows Product Activation WPA will be tied solely to the BIOS This means that any hardware device can be swapped and the product will not need to be reactivated However if the motherboard manufacturer changes the system will require a reactivation Don t expect to see this information detailed on the exam for some time because it was released after the exam went to beta If you upgrade your system the same rules apply which means that if you significantly overhaul your har
26. B The Windows NT 3 51 application C Both applications can be properly supported D Neither application can be properly supported Answer d is correct Windows NT 3 51 applications are not supported by Windows XP Compatibility Support Although Windows NT 4 Service Pack 5 applications are supported Windows NT 4 Service Pack 6a specific programs are not explicitly supported Other supported environments are Windows 95 98 ME 2000 Jon is a network administrator who has created a ZAP file for a legacy 16 bit application He wants to assign the application to the users in the Marketing OU within his company s Active Directory domain How can Jon accomplish this using a software Group Policy A Create a Computer Configuration policy to assign the application using the ZAP file B Create a User Configuration policy to assign the application using the ZAP file C Create an MSI Windows Installer Package file for the legacy application using third party repackaging software D Create an administrative template to add to the User Configuration settings for the Group Policy of the OU Answer c is correct You can only publish not assign legacy applications using ZAP files Answer a is incorrect because applications installed using ZAP files can only be published therefore you cannot use ZAP files for software Group Policies under Computer Configuration Answer d is incorrect because you create software Group Policies from the Software
27. Back Up page expand My Computer and mark the checkbox for System State click Next and follow the remaining instructions from the wizard To configure the System State backup using Advanced Mode perform the following steps 1 Click the Backup tab 2 Expand My Computer and mark the checkbox for System State click Next and follow the remaining on screen instructions Scheduling Backup Jobs You can use the Backup utility in conjunction with Task Scheduler to schedule backups to occur at regular intervals or during periods of relative inactivity on the network Scheduling a Backup with the Backup Wizard To schedule a backup when using the Backup Wizard perform the following steps 1 In the Backup Wizard on the Completing The Backup Or Restore Wizard page click the Advanced button 2 Select the backup type if you need to change it and click Next 3 Select any options that you want and click Next again 4 Select either to append this backup to any existing backups on the backup media or to replace any existing backups on the backup media and then click Next 5 On the When To Back Up page click Later type in a Job Name and click the Set Schedule button 6 Specify the schedule for the backup job as shown in Figure 1 and click OK Figure 1 The Schedule Job dialog box for the Windows MCP Exam 70270 Preparation doc 330 Schedule Settings A At 10 00 PM every Mon Tue Wed Thu Fri of every week start
28. Deny Traverse Folder Execute File List Folder Read Data Read Attributes Read Extended Attributes Create Files Write Data Create Folders Append Data Write Attributes Write Extended Attributes Delete Subfolders and Files Delete Read Permissions Change Permissions Take Ownershio g Apply these permissions to objects and or Clear All containers within this container only JOOOOOOOOOOOO v lv v From this dialog box you can perform the following e Change the Name so that this permission entry applies to some other user or group e Modify the Apply Onto drop down list to specify exactly where these advanced permissions should apply e Alter the actual permission entries themselves by marking or clearing the Allow or Deny checkbox for each permission that you want to affect MCP Exam 70270 Preparation doc 85 To change NTFS security permissions you must be the owner of the file or folder whose permissions you want to modify or the owner must grant you permission to make modifications to the object s security settings Groups or users who are granted Full Control on a folder can delete files and subfolders within that folder regardless of the permissions protecting those files and subfolders If the checkboxes for the Security tab under Permissions are shaded the file or folder has inherited the permissions from the parent folder By clearing the Inherit From Parent The Permission Entries That Apply To Child Objects checkb
29. Design Intemet Setup Goal Kayakopia a water sports oriented company in Princeton West Virginia primarily focuses on selling outdoor gear including camping equipment and kayaking supplies Kayakopia has recently merged forces with a waterproof camera company called Click a Fish Click a Fish is located in Sebring Florida The corporate side of the merger has gone well but the network infrastructure is under some reconsideration Following each case study is a set of questions related to the case study these questions can be one of six types which are discussed next Careful attention to details provided in the case study is the key to success Be prepared to toggle frequently between the case study and the questions as you work Some of the MCP Exam 70270 Preparation doc 12 case studies also include diagrams which are called exhibits that you ll need to examine closely to understand how to answer the questions After you complete a case study you can review all the questions and your answers However after you move on to the next case study you may not be able to return to the previous case study and make any changes The six types of question formats are the following Multiple choice single answer Multiple choice multiple answers Build list and reorder list prioritization Create a tree Drag and connect Select and place drag and drop Note Exam formats may vary by test center location You may want to c
30. Do this if you know the type and model of the device you are installing and you want to select it from a list of devices 5 Click Next and then follow the instructions on your screen 6 You may be prompted to restart your computer depending on the type of non Plug and Play device you just installed Tips on Installing Devices Using a PnP driver to install a non PnP device may provide some PnP support Don t get your hopes up Although the system cannot recognize the hardware and load the appropriate drivers on its own PnP can oversee the installation by allocating resources interacting with Power Options in the Control Panel and recording any issues in the Event Log If your computer is connected to a network network policy Group Policy settings may prevent you from installing any devices on your computer To add and set up a non PnP device connected directly to your computer you must be logged on as an administrator or a member of the Administrators group If an administrator has already loaded the drivers for the device you can install the device without having administrator privileges Troubleshooting Installed Hardware Devices To troubleshoot an installed device perform the following steps 1 Click the Add Hardware icon in the Control Panel 2 Click Next and then click Yes Have Already Connected The Hardware Click Next again 3 Select the installed hardware device that you are having trouble with and c
31. Drive t Hardware profiles selection When Windows starts Wait until I select a hardware profile Select the first profile listed if I don t select a profile in 30 seconds To configure a hardware profile copy the default profile and rename it appropriately Restart the computer and select the profile you want to configure if you are configuring hardware devices In the Properties dialog box for any device you can specify whether that device is enabled or disabled for the current profile To configure services you can specify which hardware profile a particular service is enabled or disabled for the computer does not need to be restarted with a specific hardware profile when you configure services If Windows XP detects that your computer is a portable laptop or notebook it tries to determine whether your system is docked or undocked it then selects the appropriate hardware profile for the current conditions Do not confuse hardware profiles with user profiles the two are not related Hardware profiles deal with devices and services settings for the entire computer user profiles deal with user configuration settings for individual users MCP Exam 70270 Preparation doc 237 Advanced Power Management Windows XP supports the APM version 1 2 specification APM helps to greatly reduce your computer s power consumption which is particularly helpful for mobile users You use the Power Options applet in the Control Pane
32. File radio button it is selected by default and click Next The next page displays which product the answer file installs The three choices are Windows XP Unattended Installation Sysprep Install and RIS Select the Windows XP Unattended Installation radio button and click Next Choose the Windows XP Professional radio button and click Next The next page displays several options regarding user interaction Typically no user interaction is required If however you want the installation to stop so you can enter the computer name select Hide Pages This option hides all pages in which answers were provided but stops at any areas that you have left blank Select the Fully Automated radio button and click Next Next you will determine whether you will use this answer file with the CD or a distribution folder For the purposes of this example select Yes Create Or Modify A Distribution Folder The next window ask where the installation files will be obtained copied from the CD or from the file system Select Copy The Files From CD After selecting the source you need to determine the destination folder The next page offers suggested locations and folder names for the distribution share point If you have already created the distribution share select Modify An Existing Distribution Folder If you select this option just the answer file is created Accept the default by clicking the Next button Select the checkbox to agree to the EULA an
33. Microsoft provides will come in handy the number of questions completed and questions outstanding For fixed length and short form tests it s wise to budget your time by making sure that you ve completed one quarter of the questions one quarter of the way through the exam period and three quarters of the questions three quarters of the way through e f you re not finished when only five minutes remain use that time to guess your way through any remaining questions Remember guessing is potentially more valuable than not answering because blank answers are always wrong but a guess may turn out to be right If you don t have a clue about any of the remaining questions pick answers at random or choose all a s b s and so on The important thing is to submit an exam for scoring that has an answer for every question At the very end of your exam period you re better off guessing than leaving questions unanswered The Adaptive Exam Strategy If there s one principle that applies to taking an adaptive test it could be summed up as Get it right the first time You cannot elect to skip a question and move on to the next one when taking an adaptive test because the testing software uses your answer to the current question to select whatever question it plans to present next Nor can you return to a question after you ve moved on because the software gives you only one chance to answer the question You can however take notes because so
34. Preparation doc 29 MCP Exam 70270 Preparation doc 30 Chapter 2 Installing and Deploying Windows XP Professional Terms you ll need to understand FAT FAT32 and NTFS Unattended installation Setup Manager Answer file System Preparation Tool Sysprep exe Remote Installation Services RIS Risetup exe Riprep exe Automatic Updates Dynamic Updates Windows Update User State Migration Tool USMT FAST Wizard Techniques you ll need to master Understanding installation advantages and disadvantages of using FAT FAT32 and NTFS Creating an answer file using Setup Manager Creating an image using Sysprep Configuring the RIS server Creating an image for the RIS server using Riprep Scanning and loading user data using the USMT Troubleshooting installation failures Planning for the installation of Windows XP is an essential part of getting the job done right If an attempt is made to install XP without taking a look at your current environment and hardware the installation will most likely fail and it will be hard to determine why With all of this in mind let s take a look at some of the requirements and items to consider during the planning phase of your installation MCP Exam 70270 Preparation doc 31 Hardware Requirements The following are the minimum hardware requirements for installing Windows XP Professional e 233MHz Pentium or higher central processing unit CPU 64MB of memory Microsoft recommen
35. Remote Desktop up and running you will need to configure the computer that will be connected to which is called the work computer in this discussion The computer that will be connecting to the work computer is called the home computer We will look at the requirements for the home computer in just a little bit For the work computer you must be running Windows XP Professional You must enable the work computer to allow Remote Desktop To access this option you need to follow this path Control Panel Performance and Maintenance System Remote tab After you get to the interface for this path you can just enable Remote Desktop as shown in Figure 5 Figure 5 Remote Desktop options under System Properties System Properties General Computer Name Hardware Advanced System Restore Automatic Updates Remote 9 Select the ways that this computer can be used from another location Remote Assistance Allow Remote Assistance invitations to be sent from this computer Leam more about Remote Assistanc Remote Desktop Allow users to connect remotely to this computer Full computer name xpprorc2 Leam more about Remote Desktop Select Remote Users OK Cancel MCP Exam 70270 Preparation doc 312 After you get Remote Desktop enabled you will then need to configure which users will have the ability to connect This is accomplished by adding the correct users to the Remote Desktop Users group This is the group that users
36. User Rights In Windows XP users are granted two types of access control settings e Permissions Windows XP permissions pertain to what the user can do to objects for example permissions for reading creating modifying or deleting files folders or printers Windows XP objects include a wide variety of items in addition to files folders and printers including processes threads ports devices and Registry keys e Rights Windows XP user rights determine what privileges the user has to interact with the operating system for example shut down the system install software log on locally log on over the network and so on Administrators for Windows XP Professional computers can modify the default rights for users through the Local Security Settings snap in of the Microsoft Management Console MMC Controlling Access to Files and Folders by Using Permissions Users gain access to NTFS files and folders by virtue of being granted explicit or implicit inherited permissions for those resources directly to their user account or through access permissions granted to groups to which the users belong To assign Read Only security permissions to a user or a group for a specific folder follow these steps 1 2 Right click the folder on which you want to apply permissions and select either the Sharing And Security option or the Properties option Click the Security tab If the permissions checkboxes for the user or group
37. a D 7S seh y E here jiao itenim att asp WS 5 1 Documentation Adorirwatretion Aceves Server Pages Guide 105 Fetes Qi rede 2 S Microsoft Vntomet information Services Getting Started Internet Ir ormation Services 5 1 185 is the Windows XP Web service that makes essy to pubksh informadon on your intranet You can chek the Symachwenize button D on the Contents tab to abon the content and nNaviganon Danes of the documentaton Use the Search tab to locate a togec and you want to see dck the topsc link dck the Centents tab and cick the Synchronize button The table of contents displays where that topic located e Releave Nater techie the ataa infeemahon Sj Local werent IIS Console Administering the Default Web and FTP Sites You can view and modify the settings for each IIS service through the IIS Console by right clicking the root folder for a service such as Default Web Site in the left hand pane of the console window and selecting Properties Unlike IIS 5 there are no Master Properties that you can modify that control both Web and FTP settings You must configure each site separately IIS stores all of its configuration information for its Web site s FTP site s and so forth in its metabase If the IIS metabase gets damaged or deleted an administrator must reconfigure all of the IIS sites and services To avoid such a catastrophe be sure to back up the metabase on a regular basis by ri
38. a log file is available that can store information about the dropped packets successful connections or both Figure 8 illustrates the configurations that are possible for the ICF log configurations Figure 8 Log file configuration for the ICF service Advanced Settings Services Secunty Logging ICMP agna Options C Log dropped packets C Log successful connections Name D WINDOW S pfirewall log Size imit 4096 l Restore Defaults Remember that HTTP traffic will be logged as port 80 and FTP traffic will be logged as ports 20 and 21 MCP Exam 70270 Preparation doc 377 Configuring and Troubleshooting ICS Windows XP Professional enables you to have one IP address from an ISP and share that connection through the Windows XP Professional computer with other computers on the network This feature is known as Internet Connection Sharing ICS ICS translates or maps a set of nonroutable IP addresses by default from the 192 168 x y network range to an external public IP address that exists on the Internet Computers on the LAN can then access external resources on the Internet such as Web sites and FTP sites but the LAN computers are somewhat sheltered from outside intrusions because the LAN computers are using nonroutable IP addresses Configuring ICS To set up ICS perform the following steps 1 Click Start Control Panel Network Connections 2 Right click a connection icon for an Internet connec
39. able to connect to the Internet Answer d is incorrect because it would cause the remote clients to have connectivity problems if ICF is installed You want to host a family Web site from your home on your Windows XP Professional workstation You want to enable your family to access the Web site and add content via FTP You create the site register its name and enable Internet Connection Firewall Later you receive reports that your family can access the Web page without problems but no one can upload their files What can you do to resolve the issue A Ensure that the FTP box on the Services tab of the Advanced Settings page of the ICF VPN Properties dialog box is checked B Ensure that the FTP box on the Services tab of the Advanced Settings page of the ICF VPN Properties dialog box is cleared C Ensure that the HTTP box on the Services tab of the Advanced Settings page of the ICF VPN Properties dialog box is checked D Ensure that the HTTP box on the Services tab of the Advanced Settings page of the ICF VPN Properties dialog box is cleared Answer a is correct Any service that you want to provide for remote clients must be enabled on the Services tab of the Advanced Settings page on the ICF VPN Properties dialog box Answer b is incorrect because the FTP service option must be selected not cleared Answer c Is incorrect because the scenario clearly indicates that users are able to connect to the Web site so the option had to have bee
40. and TCP IP Microsoft supports all three of these protocols and more Windows XP Professional must be configured with TCP IP if it is going to be communicating on a network that runs Microsoft s MCP Exam 70270 Preparation doc 293 Active Directory The configuration of the TCP IP protocol can be confusing and troubleshooting communication problems related to TCP IP can be more difficult However after an overview of the technology configurations and tools the confusing aspects of protocols and network services will be crystal clear MCP Exam 70270 Preparation doc 294 Configuring and Troubleshooting TCP IP TCP IP encompasses a vast array of utilities and network services This suite of services has evolved to become the industry standard for both the Internet and for local area networks LANs using personal computer network operating systems like Novell NetWare 5 Unix and Windows XP TCP IP is the default protocol when you install Windows XP Professional It provides a means for connecting dissimilar computer systems TCP IP scales well and is typically the best choice for any size of organization TCP IP and its name resolution partner Domain Name System DNS are both required components for implementing Active Directory in the Windows 2000 NET Server family of products Deciphering the TCP IP Protocol Suite for Windows XP TCP IP is more than just a standardized specification for data transport over a network wire It is a sop
41. and recovery features than any previous Microsoft operating system This chapter explores the skills required to properly prepare for and recover from computer system failures This chapter also examines how to maintain systems to run under peak conditions by providing a foundation for performance monitoring and system optimizing MCP Exam 70270 Preparation doc 324 Backing Up and Restoring Data In Windows XP Windows Backup helps you plan for and recover from data loss by enabling you to back up and restore files folders and System State data which includes the Registry manually or on a schedule The new and improved backup tool supports all kinds of storage devices and media including tape drives logical drives removable disks and recordable CD ROMs by integrating the Removable Storage feature The term media refers to any fixed or removable objects that store computer data such as hard disks floppy disk tape cartridges compact discs CDs and Digital Versatile Discs DVDs The Windows Backup tool also has wizards to help administrators new to Windows XP to implement backup and recovery processes Using Windows Backup To run the Windows Backup utility perform one of the following actions e Click Start Run type ntbackup and click OK e Select Start All Programs Accessories System Tools and click Backup e Use the NTBackup exe tool from the command line Run ntbackup from a command prompt window to view all of its
42. are grayed out this means that those permissions are being inherited from a parent folder To set your own permissions and not allow permissions to be inherited click the user and or group that you want to work with and click the Advanced button Clear the checkbox labeled Inherit From Parent The Permission Entries That Apply To Child Objects Include These With Entries Explicitly Defined Here As soon as you clear that checkbox a Security message box will appear shown in Figure 5 MCP Exam 70270 Preparation doc 91 Figure 5 The Security message box for disallowing inherited NTFS permissions l Advanced Security Settings for Samples ix Persons Auditing Owner Effective Permissions To view more infomation about Special pennissions select a permission entry and then click Edt Selecting this option means that the parent permission entries that apply to child objects wil no longer be applied to this object To copy the permission entries that were previously appbed from the parent to this object cick Copy To remove the pemnission entries that were previously applied from the parent and keep only those permissions expicily defined here cick ve To cancel this action cick Cancel lt 7 7 thet from parent the pemission ertnes that apply to chid objects include these wth entries expictiy defined here C Replace pennission entries on all ch d objects with entries shown here that apply to chid objects 4 For
43. as a valid startup option Then if you wish to start the system using the Recovery Console you do not need the Windows XP CD ROM installation files Simply boot the machine and press the F8 key to display the startup options Launching the Recovery Console The Recovery Console is quite powerful so only advanced users who have a thorough understanding of personal computers and Windows XP should use it Also it is recommended that you install the Recovery Console on each Windows XP machine so that it is always an available startup option If you install the Recovery Console as a startup option on a FAT or FAT32 volume and then convert that volume to NTFS the Recovery Console will no longer function You must reinstall the Recovery Console if you convert the system s boot drive to NTFS After you start the Recovery Console you must choose which installation of Windows XP or Windows 2000 that you want to log on to if you have a dual boot or multiboot system and you must log on with a local administrator account and password You are allowed three attempts to enter the correct password f you enter three incorrect passwords the system automatically restarts the computer The design of the Recovery Console grants the administrator access to the root of the hard drives the Cmdcons directory if it exists and the Windows directory and all directories below it You have read only access to CD ROM drives to floppy drives and to other rem
44. configuration options Typical and Advanced Choosing the Typical option enables you to make a fast configuration setting If you want to see what the Typical settings are and perhaps make changes to them just select the Advanced option and then click the Settings button Clicking the Settings button will give all the detailed settings that are configured for the current settings MCP Exam 70270 Preparation doc 366 The default authentication protocols for a dial up connection are PAP SPAP MS CHAP and MS CHAPv2 The default protocols for a VPN connection are MS CHAP and MS CHAPve2 EAP Extensible Authentication Protocol EAP is an extension of PPP for dial up networking DUN L2TP and PPTP clients EAP supports a negotiated authentication model where the actual authentication mechanism is determined between the dial up connection client and the remote access server EAP provides support for a few authentication protocols including the following Message Digest 5 Challenge Handshake Authentication Protocol MD5 CHAP Encrypts usernames and passwords using its own MD5 algorithm Transport Level Security TLS Works with Smart Cards and other types of security certificates A Smart Card stores a user s security certificate and private key electronically on the card Smart Card technology requires physical cards and card readers Note By using EAP application programming interfaces APIs software developers can design and imp
45. disk It can consist of a single area on a disk or multiple areas on the same disk that are linked together To create a simple volume perform the following steps 1 Open Disk Management 2 Right click the unallocated space on the dynamic disk where you want to create the simple volume and then click New Volume 3 Using the New Volume Wizard click Next click Simple and then follow the instructions on your screen Here are some guidelines about simple volumes e You can create simple volumes on dynamic disks only e Simple volumes are not fault tolerant e Simple volumes cannot contain partitions or logical drives e Neither MS DOS nor Windows operating systems other than Windows XP and Windows 2000 can access simple volumes MCP Exam 70270 Preparation doc 258 Spanned Volumes A spanned volume is made up of disk space from more than one physical disk You can add more space to a spanned volume by extending it at any time To create a spanned volume perform the following steps 1 Open Disk Management 2 Right click the unallocated space on one of the dynamic disks where you want to create the spanned volume and then click New Volume 3 Using the New Volume Wizard click Next click Spanned and then follow the instructions on your screen Here are some guidelines about spanned volumes e You can create spanned volumes on dynamic disks only You need at least two dynamic disks to create a spanned volume You can exten
46. drive volumes Bob must create a backup window interval during which the Backup program can back up his important files Answer b is incorrect because VSCT is not available for data or application files stored on FAT or FAT32 drive volumes Answer c is incorrect because open and locked files do not get backed up and you should not leave good backups to MCP Exam 70270 Preparation doc 360 chance Answer d is incorrect because the Inuse exe tool is meant for replacing locked operating system files not for helping to back up locked or open files 4 How can you boot your Windows XP system into the Recovery Console after you have just installed Windows XP Professional on the computer Check all correct answers a Restart the system press the F8 key as Windows XP starts up and select Recovery Console from the default list of advanced startup options b Restart the system by booting from the Windows XP Professional CD ROM and select the repair option when prompted c Click Start Run and run the command winnt32 exe cmdcons from the i386 folder on the Windows XP Professional CD ROM Restart the system press the F8 key as Windows XP starts up and select Recovery Console from the list of advanced startup options d Restart the system press the F8 key as Windows XP starts up and select Safe Mode Using Recovery Console from the default list of advanced startup options A4 Answers b and c are correct You can boot into the Windo
47. encryption Just as with NTFS data compression data encryption is set as an advanced attribute for a file or a folder With NTFS data encryption Microsoft has given you a secure method for keeping confidential documents private Keeping Data Private with the Encrypting File System EFS Microsoft designed EFS for Windows XP to ensure the confidentiality of sensitive data EFS employs public key private key based cryptography EFS works only with the NTFS 5 file system under Windows XP and Windows 2000 Its use is transparent to users You can either compress or encrypt files and folders but you can t do both Files that are encrypted using EFS remain encrypted even if you move or rename them Encrypted files that are backed up or copied also retain their encryption attributes as long as they reside on NTFS formatted drive volumes EFS leaves no file remnants behind because it modifies an encrypted file nor does it leave any traces of decrypted data from encrypted files in temporary files or in the Windows XP paging file You can encrypt and decrypt files and folders from the graphical user interface GUI by using Windows Explorer as well as from the command line by using the Cipher exe tool Encrypting Folders and Files The best practice for using encryption is to first encrypt a folder and then move files into the encrypted folder Folders do not actually become encrypted folders get marked with the encryption attribute The files conta
48. files and folders via the Owner tab by clicking the Advanced button e View the effective permissions for the printer similar to viewing the effective permissions for NTFS files and folders via the Effective Permissions tab by clicking the Advanced button For a Windows XP computer that is not a domain member the default security permissions for printers are as follows Administrators Allow Print Allow Manage Printers and Allow Manage Documents Creator Owner Allow Manage Documents Everyone Allow Print Power Users Allow Print Allow Manage Printers and Allow Manage Documents For a Windows XP computer that is joined to a domain the default security permissions for printers are as follows Administrators Allow Print Allow Manage Printers and Allow Manage Documents Creator Owner Allow Manage Documents Everyone Allow Print Print Operators and Server Operators Allow Print Allow Manage Printers and Allow Manage Documents The Device Settings Tab The Device Settings tab enables you to configure printer specific settings The available settings on this tab vary depending on the manufacturer and the model of the printer that you are working with For example many printers enable you to configure paper tray assignments font cartridge settings and any installable options such as printer memory settings MCP Exam 70270 Preparation doc 116 Using the Internet Printing Protocol IPP Windows XP Professional computers
49. for connecting through the Remote Desktop Web Connection Figure 6 Interface for the Remote Desktop Web Connection with Internet Explorer Remote Desktop Web Connection Microsoft Internet Explorer OR Fle Edt View Favorites Tools Hep p Osx 9 BOD Pseach seravorites meta O 2 http Approrc2b tsweb Microsoft Windows Remote Desktop Web Connection Type the name of the remote computer you want to use select the screen size for your connection and then Sze Full screen click Connect Server C Send logon information for this connection When the connection page opens you can add it to your Favorites for easy connection to the same computer wJ Loca ntranet Regardless of whether you are connecting through the Remote Desktop Web Connection interface or the Web based Remote Desktop interface the user whom you are connecting with must have a password A blank password is not acceptable for the use of Remote Desktop MCP Exam 70270 Preparation doc 314 Understanding Remote Assistance The underlying technologies of Remote Desktop and Remote Assistance are the same but the application is much different As you just saw with Remote Desktop the goal is to allow a user access to their work computer from their home computer With Remote Assistance the goal is to have another user typically a help desk or IT employee remotely help the end user with an issue that they are experiencing on their Windows XP Pr
50. group policy and need to import the new template What are some different ways to apply these new security template settings to the computers in the enterprise Check all correct answers A Use the secedit command B Use an Active Directory based Group Policy Object C Use the Local Group Policy D Use the gpupdate command Answers a b and c are correct The secedit command as well as the Group Policy options at the local and Active Directory level can apply the security templates to a computer The secedit command is manual whereas the other two options are more automated because they will automatically refresh for the computer Answer d is incorrect because gpupdate will update an existing Group Policy but not apply the security templates themselves You are the administrator of a multidivisional company s network and some of your users are using network applications from a server that may not be approved for their division All applications are in the same folder Which software restriction rule would you apply A Hash rule B Certificate rule C Zone rule D Path rule Answer d is correct A path rule can identify software by a full path name such as C Program Files Microsoft Office Office excel exe or by the path name leading to the containing folder such as C Windows System32 Answer a is incorrect because a hash is a digital fingerprint that uniquely identifies a program or file You would have to identify all t
51. happen to their NTFS permissions A The folders and files moved will retain their same NTFS permissions B The folders and files moved will inherit their NTFS permissions from the target destination folder C The folders and files moved will have their NTFS permissions reset to the default settings for drive volumes such as Allow Everyone Read and Execute and Administrators Full Control D You will be prompted by a message box asking whether you want the folders and files moved to retain their permissions or if you want them to inherit their permissions from the target destination folder A6 Answer A is correct Folders and files that are moved within the same NTFS drive volume always retain their permissions from the source folder Answer b is incorrect because folders and files moved to a different NTFS drive volume inherit their permissions from the target destination folder Answer c is incorrect because folders and files that are moved never have their NTFS permissions reset to drive volume defaults Answer d is incorrect because Windows Explorer does not prompt the user about retaining or inheriting NTFS permissions when moving or copying files 7 As a network administrator how can you ensure that members of the Interns group are allowed only to print documents on Printer4 and that they can print only those documents during nonbusiness hours In addition how can you make sure that their print jobs have a higher priority
52. in XP However for compatibility reasons and functionality you might want to stick with your FAT32 file system at least for a little while One main reason is the new uninstall feature discussed next If you want to take advantage of both uninstall and NTFS do your file system configuration in phases First keep FAT32 until your XP Professional box has proved itself to be stable Then convert your system to NTFS using the convert command to get the benefits of the better security compression and encryption features Windows XP Uninstall Feature for Windows 98 and Windows ME Upgrades Microsoft has built in an uninstall feature to Windows XP Professional but it has serious limitations The main reason that the option was built in was to accommodate those who want to move from Windows 98 to Windows XP Professional Of course many of these installations will be for those who work in a small office or home environment Those who work in a medium to large corporate environment will be better off installing Windows XP Professional fresh to eliminate some of the potential Registry security and folder structure differences that occur with an upgrade Some of the limitations that come with the uninstall feature include the following e You cannot uninstall if you have converted the file system from FAT to NTFS e You do not have the uninstall option if you have upgraded from Windows NT or Windows 2000 e Applications that have been r
53. in the Computer Management Console By selecting the Security Log you can view all of the auditing events that the system has recorded based on the parameters you have set If a user deletes an object for example that event is listed with all the pertinent information in the MCP Exam 70270 Preparation doc 102 security log shown in Figure 15 Double clicking an event in the log displays the detailed information File Action View Help Everk Viewer Local Sacurty S eventis MCP Exam 70270 Preparation doc 103 Managing and Troubleshooting Web Server Resources Unlike Windows 2000 Server and Windows NET Server Windows XP Professional is designed for the desktop and therefore Internet Information Services IIS is not installed by default IIS version 5 1 ships with Windows XP Professional You must manually install IIS by going to the Control Panel double clicking the Add Or Remove Programs icon and clicking the Add Remove Windows Components button Mark the checkbox for Internet Information Services IIS After you select Internet Information Services IIS you can click the Details button to add or remove selective IIS components before you proceed with the installation Click Next to have the Windows Components Wizard install the Web server resources for you If you upgrade your computer from Windows NT 4 Workstation or from Windows 2000 Professional to Windows XP Professional IIS 5 1 is installed automatically pr
54. isolate problems that may be preventing users from connecting to the Internet Web site Check that the Web server contains HTML files in the drive_letter inetoub wwwroot folder Attempt to connect to the Web server s home directory using a browser on a computer that has a live connection to the Internet Your Web site must have a public IP address that is registered with the InterNIC and that public IP address must be registered with the Internet s DNS servers For example if your registered domain name is QuePublishing com and you want to view a virtual directory on that Web site named aboutus you would type www QuePublishing com aboutus in the Address line of your Web browser The Web page that you requested should appear within your Web browser s window Intranet Web Site To isolate problems that may be preventing users from connecting to an intranet Web site Check that the Web server and the client computers have active network connections Verify that a Windows Internet Naming Service WINS and or DNS server is available and functioning on your network for computer name to IP address name resolution Go to a client computer launch a Web browser and type in a valid URL for the Web server computer Intranet URLs can take the format of http computer_name home_page_name htm or http computer_name virtual_directory_alias_ name Examples of this syntax are http computer1 myhomepage htm and http computer1 myvirtualdir
55. it 5 Type a name for the share in the Share Name box and optionally type in a Share Description 6 Click Next 7 Select one of the basic share permissions listed or click Customize Share And Folder Permissions to define your own share permissions The default selection is All Users Have Full Control Remember these are share permissions that apply only to users accessing this share remotely over the network not NTFS security permissions 8 Click Finish and then click Yes or No when prompted to create another shared folder AON Generally if you are working with shared folders residing on NTFS volumes it is a good idea to leave all share permissions at their default setting Everyone Full Control Use NTFS security permissions to specify access control levels for both users and groups By having only one set of permissions to manage security access levels are less confusing and you avoid possible conflicts with share permissions In addition NTFS security permissions apply to both remote network users and local users so users cannot circumvent security permissions by logging on to the local computer To remove a shared folder from the Shared Folders snap in simply right click the shared folder and select Stop Sharing Click Yes and the folder will no longer be shared on the network MCP Exam 70270 Preparation doc 72 Using Automatically Generated Hidden Shares Windows XP Professional automatically creates shared fol
56. keep security tight you want to keep the information for Windows Messenger stored with your domain account What will you do to perform this task A Create a certificate and store it with your account B Use IP Security C Establish an Internet firewall which stores domain account information as well as Internet access passwords such as Windows Messenger D Create a NET Passport and store it with your account Answer d is correct Windows Messenger uses a NET Passport to authenticate and gain access to the service It is possible to store this information with the user account for pass through authentication Answer a is incorrect because a certificate will not allow this type of double or multiple authentication using the Windows Messenger service Answer b is incorrect because IP Security will not allow the MCP Exam 70270 Preparation doc 319 A5 storage of the Windows Messenger account with the domain account Answer c is incorrect because the use of an Internet firewall will not store the domain account information nor the Internet access passwords This would be a severe security hole if this was the case You have just acquired an application that runs on a NetWare 3 11 server There are numerous Windows XP clients that need to gain access to this application the files that are generated from the application which are placed on the NetWare server as well as the other domain based Microsoft resources on the network The
57. mailing list is a good place to ask where the useful braindumps are You can t be sure that a braindump s author can provide correct answers Thus use the questions to guide your studies but don t rely on the answers in a braindump to lead you to the truth Double check everything you find in any braindump Microsoft exam mavens also recommend checking the Microsoft Knowledge Base available on its own CD as part of the TechNet collection or on the Microsoft Web site at http support microsoft com support for meaningful technical support issues that relate to your exam s topics Although we re not sure exactly what the quoted phrase means we have also noticed some overlap between technical support questions on particular products and troubleshooting questions on the exams for those products MCP Exam 70270 Preparation doc 6 Onward After you ve assessed your readiness undertaken the right background studies obtained the hands on experience that will help you understand the products and technologies at work and reviewed the many sources of information to help you prepare for a test you ll be ready to take a round of practice tests When your scores come back positive enough to get you through the exam you re ready to go after the real thing If you follow our assessment regime you ll not only know what you need to study but also when you re ready to make a test date at Prometric or VUE Good luck MCP Exam 70270 Preparatio
58. main production plant but others are located at sales offices throughout the United States You do not want to upgrade the systems because most of them were upgraded from Windows NT 4 Workstation in the last rollout However you want to save as much of the user based settings and files as possible to minimize both calls to the Help Desk and user complaints You decide to use the File and Settings Transfer Wizard to migrate the user settings and files What will you need to do to get the settings from the Windows 2000 Professional systems a Run the scanstate command from the Windows 2000 domain controller b Run the loadstate command from the client computer c Create a Wizard Disk to run on the Windows 2000 Professional computers d Run the FAST Wizard from the Windows XP client to save the user settings Answer Answer c is correct To save the settings and files from a Windows 2000 Professional system you need to have a Wizard Disk or the Fastwiz exe tool from the Windows XP Professional CD ROM This will start the FAST Wizard and allow the user settings to be saved to the hard disk removable media or network share Answers a and b are incorrect because they would be used in the command line method not with the FAST Wizard Answer d is incorrect because you can t run the FAST Wizard on a client to save files from another system MCP Exam 70270 Preparation doc 65 5 You are the chief technology officer for the ACME Web developmen
59. major component of Internet Information Services IIS which ships with Windows XP Professional Although not installed by default in Windows XP Professional IIS and the WWW publishing service provide Web page hosting for HTML based and Active Server Pages ASP based documents e File Transfer Protocol FTP service This is another major component of IIS FTP is an industry standard protocol for transferring files between computers over TCP IP based networks such as the Internet e Simple Mail Transfer Protocol SMTP The Microsoft SMTP service implements the industry standard SMTP to transport and deliver email messages The SMTP service for Windows XP is also a component of IIS Understanding TCP IP Computer Addresses TCP IP assigns a unique set of numbers to each computer that is connected to a TCP IP based network or internetwork This set of numbers consists of four separate numbers each delimited by a period or a dot For example an IP address of 192 168 1 20 illustrates this concept known as dotted decimal notation Each device on a TCP IP based network must be assigned a unique IP address so that it can send and receive data with the other devices on the network A network device can be a computer a printer a router a firewall and so on We write IP addresses in a dotted decimal format for ease and convenience However TCP IP addresses are actually 32 bit binary numbers By converting these binary numbers into de
60. of the local NTFS volumes contain enough free disk space to hold the shadow copy no shadow copy is created By creating an exact duplicate copy of the original volume being backed up the Backup program can back up all of the files from the shadow copy rather than from the original volume After the copy is made it does not change even if data on the original volume changes during the backup procedure After the backup procedure is completed the shadow copy is deleted VSCT enables applications and services to be backed up even when they are still running Open files appear closed on the shadow copy for backup purposes and the data within those open files is frozen as of the time that the shadow copy is created Open files on the original volume remain open and their data may continue to change Restoring Files and Folders You can restore files and folders by using the Backup utility through the Restore Wizard or by manually restoring them without using the wizard When you restore files and folders you must specify which ones to restore the restore location original location alternate location or a single folder and options such as to replace existing files with backup files If you backed up data from an NTFS volume you must restore data to an NTFS 5 disk volume to preserve security permissions Encrypting File System EFS settings encryption disk quota settings mounted drive configuration settings and remote storage i
61. often equally valid to optimize memory usage by stopping unnecessary services drivers and background applications or by moving services or applications to systems with excess capacity Managing the Paging File Just as every Windows 2000 computer requires a paging file to avoid dismally slow performance each Windows XP Professional system needs a paging file as well When physical RAM is not sufficient to support active processes the Virtual Memory Manager VMM moves less active data or code from physical RAM to virtual memory stored in the paging file When a process later attempts to address data or code currently in the paging file the VMM transfers that memory space back into physical RAM The paging file thus provides for efficient utilization of a system s physical RAM and allows a system to support more activity than its physical RAM alone would allow Transfer of pages 4KB blocks of memory to and from the paging file is normal on any system but excessive paging or thrashing indicates a memory shortage In addition the paging file itself can impede performance if it is not properly optimized You configure the paging file using the System applet in Control Panel Click the Advanced tab click the Performance Options button and then in the Virtual Memory section click Change The paging file called Pagefile sys is created on the systemroot volume by default Microsoft recommends that the paging file size should be 1 5 tim
62. perform the following steps 1 Before you disconnect the disks look in Disk Management and make sure the status of the volumes on the disks is healthy If the status is not healthy repair the volumes before you move the disks 2 Turn the computer off remove the physical disks and then install the physical disks on the other computer Restart the computer that contains the disks you moved 3 Open Disk Management Click Action and then click Rescan Disks 5 Right click any disk marked Foreign click Import Foreign Disks and then follow the instructions on your screen A Guidelines for Relocating Disks Every time you remove disks from or import disks to a computer you must click Action Rescan Disks from the Disk Management console menu and then verify that the disk information is correct Aside from following the preceding Steps 1 through 5 you can choose which disks from the group you want to add by MCP Exam 70270 Preparation doc 254 choosing the Select Disk option when you right click a Foreign disk you do not have to import all the new disks at the same time Disk Management describes the condition of the volumes on the disks before you import them Review this information carefully If any problems exist you will know what will happen to each volume on these disks after you have imported them After you import a dynamic disk from another computer you can see and use any existing volumes on that disk Be sure to move
63. permissions that are not being inherited skip this step Click Copy to copy the permissions that were being applied to the file or folder through inheritance and make the permission explicit click Remove to completely remove all the permissions that were being applied through inheritance or click Cancel to leave the inherited permissions in place Click OK to close the Advanced Security Settings dialog box and return to the Security tab of the object s properties sheet 5 If the user s or group s to which you want to assign permissions do not currently appear click the Add button 6 From the Select Users Or Groups dialog box shown in Figure 6 type the group or user to which you want to assign permissions in the Enter The Object Names To Select text box Click the Check Names button to verify that you have entered the correct names for the users or groups Optionally you may click the Advanced button to generate a list of users and groups from which to choose as shown in Figure 7 Click the Find Now button to generate the list of users and groups Select the users and or groups you want to apply permissions to Click OK for the advanced Select Users Or Groups dialog box MCP Exam 70270 Preparation doc 92 Figure 6 The Select Users Or Groups basic dialog box Select this object type Users Groups or Builtin security principals Object Types From this location 00 Enter the object names to select examples 7800XP1 Adm
64. prerequisites must be in place on the network The following is a list of the RIS requirements you must meet before you install it e DHCP server The client will obtain an IP address from a DHCP server during the boot process You cannot use RIS until a DHCP server is available A Windows XP DHCP server cannot give IP addresses to clients unless it is authorized to do so Authorization is done through the DHCP Manager snap in e Domain Name Service DNS After the network adapter has an IP address it needs to find a RIS server The client finds RIS by querying a DNS server to find where an Active Directory server or domain controller DC is located e Active Directory Active Directory informs the client where a RIS server can be found e Nonsystem partition RIS demands its own partition You cannot install RIS on a system or boot partition which is usually the C partition Note The reason for the separate partition is the Single Instance Storage S S groveler service which will create pointers to existing duplicate files thereby saving disk space The service won t use system files that are active It is recommended to reserve at least 2GB for a RIS partition MCP Exam 70270 Preparation doc 45 Installing and Configuring the RIS Service You can install the RIS service on a Windows 2000 DC or member server after you have met all the prerequisites After you have installed the service you must configure it Perform the
65. profile that you will use as a company standard and then manually copy it to the profile server Roaming user profiles behave differently in Windows XP and Windows 2000 than in Windows NT 4 Workstation When a user logs on to a computer for the first time the roaming profile is copied to the client computer From that point forward whenever a user logs on to a computer the locally cached copy of the profile is compared to the roaming user profile If the local profile and the roaming profile are the same the local copy is used Windows XP copies only files that have changed not the entire profile as was the case in Windows NT 4 Use the following steps to configure a roaming profile 1 Create a shared folder on a server for the profiles 2 On a Windows XP Professional computer open the Control Panel select Performance And Maintenance and then open the System icon to view the System Properties dialog box Click the Advanced tab From the User Profiles section click the Settings button 5 Select the user s profile you want to use as a roaming profile and select Copy To Then type in the UNC path to the shared folder that was created for example server1 profiles Dan or server1 profiles username 6 In the Active Directory Users and Computers MMC select the account properties for the user Then select the Profile tab and enter the UNC path to the profile server in the Profile Path field 7 The first time that the roam
66. range of IP addresses you will need to contact an Internet service provider ISP MCP Exam 70270 Preparation doc 298 Understanding Variable Length Subnet Masks When you contact that ISP you might be surprised that you can t obtain your own Class B range What you will find instead is that you might get a portion of a Class B range When a Classful IP address range is broken down into smaller pieces you need to use a variable length subnet mask VLSM The standard subnet masks that come with the Classful IP ranges are as follows e Class A 255 0 0 0 e Class B 255 255 0 0 e Class C 255 255 255 0 Table 1 Classful network addresses and their prefix range Prefix Range Address Class 0 127 A 128 191 B 192 223 C 224 239 D 240 255 E When you want to use only a portion of the address class range you need to alter the standard subnet mask A typical example of using VLSM is when you need to break up a Class C range into smaller ranges A typical Class C range contains 254 IP addresses for hosts Many smaller companies don t need this many addresses so they will use a Class C address range that uses a VLSM to break up the range This is done to create smaller pools of IP addresses If you had a company that needed only 50 IP addresses you could use a subnet mask of 255 255 255 192 with a Class C range of IP addresses This subnet mask would break up the original Class C range and create four IP address ra
67. size of greater than 512 bytes A1 Answer b is correct Hard disks connected via USB or Firewire IEEE 1394 buses are not supported for dynamic disks Answer a is incorrect because you are allowed to convert disks with existing drive volumes and data to dynamic disks you cannot convert back to a basic disk without deleting all existing volumes and therefore the data on those volumes however Answer c is incorrect because dynamic disks do support Fibre Channel drives Answer d is incorrect because only disks that have a sector size of less than 512 bytes are not supported by dynamic disks 2 Alexis wants to convert physical hard disk number 2 on her Windows XP Professional desktop computer from a basic disk to a dynamic disk using only the command line Is a command line tool available to accomplish this task If so what is the name of this utility and does it differ from the Disk Management console A The command line tool is called Diskperf exe Only administrative users may use it B No command line tool equivalent to the Disk Management MMC exists C The command line tool is called Diskpart exe You must restart the computer for the conversion process to take effect D The command line tool is called Convert exe You do not need to restart the computer for the conversion to take place unless you are converting the boot disk MCP Exam 70270 Preparation doc 285 A2 A3 Answer c is correct Diskpart exe is the command
68. spaces within the share name Click Next Enter an optional Location name and Comment Click Next Click Yes and then click Next when prompted to print a test page it s always a good idea to make sure that the printer has been set up and is working properly Click Finish to exit the Add Printer Wizard MCP Exam 70270 Preparation doc 112 To connect to a network printer you also use the Add Printer Wizard from the Printers folder Simply follow these steps 1 Logon as an administrator or a member of the Administrators group 2 Click Start Printers And Faxes to open the Printers And Faxes window 3 Click the Add A Printer link from the Printer Tasks pane The Add Printer Wizard appears Click Next to continue 4 Click the option button labeled A Network Printer Or A Printer Attached To Another Computer 5 Click Next 6 Follow one of these options Select Browse For A Printer and then click Next Select Connect To This Printer type in the UNC path for the printer and then click Next Select Connect To A Printer On the Internet Or On A Home Or Office Network type in the URL address for the printer and then click Next 7 If you choose to browse for a printer locate the printer from the Browse For Printer dialog box and then click Next 8 Click Yes or No when prompted to make the printer the system s default and click Next 9 Click Finish to exit the Add Printer Wizard Connecting to Network Printers via the Comm
69. support your backup plan You must save incremental backups until the next normal backup You need keep only the most recent differential backup along with the most recent normal backup Configuring File and Folder Backup When you create a backup job using the Backup Wizard or the Backup tab of the Windows Backup utility you can specify the following e Drives files or folders to back up Place a checkmark next to the drive file or folder that you want to back up The selected items are backed up according to the backup type Items whose checkboxes are cleared are not backed up A grayed out but marked checkbox indicates a container disk or folder in which only some but not all of its contents are selected e A backup destination You can back up to a file or to any other storage device configured on your system However you cannot back up directly to CD R or CD RW media A path and file name for the backup file or a tape to use Backup options such as backup type and log file type A description of the job to help you identify the job Whether the backup medium already contains existing backup jobs e Advanced backup options including compression and data verification The Windows XP Backup utility does not support backing up directly to CD R or CD RW media You can back up to a local or network drive MCP Exam 70270 Preparation doc 328 and then copy the backup file onto CD R or CD RW media Fortunately you can rest
70. system administration capabilities but do not want them to be able to access all system resources consider putting them in Backup Operators and Power Users rather than Administrators Users Users in this group can log on shut down a system use local and network printers create local groups and manage the groups they create They cannot create a local printer or share a folder Some down4evel applications do not run for members of the Users group because security settings are tighter for the Users group in Windows XP than in Windows NT 4 By default all local user accounts you create are added to the Users group In addition when a system joins a domain the Domain Users group is made a member of that system s local Users group Guests Users in this group have limited privileges but can log on to a system and shut it down Members cannot make permanent changes to their desktop or profile By default the Built in Local Guest account is a member When a system joins a domain the Domain Guests group is added to the Local Guests group Network Configuration Operators Users in this group have administrative privileges to manage the configuration of networking features Remote Desktop Users Users in this group have the added privilege of logging on through Terminal Services which in Windows XP is established through a Remote Desktop connection Built in System groups also exist which you do not see in the user interface while managi
71. tab on the properties sheet for a program s executable file or its shortcut icon or run the Program Compatibility Wizard Click Start All Programs Accessories Program Compatibility Wizard to launch this tool The wizard leads you through all the option settings for running an older application under Windows XP The wizard even prompts you to test the application so that you can verify that it runs correctly When you complete the wizard it saves the compatibility settings as part of the program s properties which you can access by right clicking the program s executable file selecting Properties and clicking the Compatibility tab MCP Exam 70270 Preparation doc 178 Windows Installer Service Microsoft created a new method for installing applications under Windows 2000 called Windows Installer Service Packages This software installation service is integrated into Windows XP Windows Installer Service actually installs packages on a computer Windows Installer Service has two essential functions e It is an operating system service that is responsible for installing removing and updating software by asking the Windows Installer Service Package for instructions on how the application should be installed removed modified or repaired e To create a standard for installing removing or modifying applications you use an application programming interface API to communicate with Windows Installer Service about how a package should be mo
72. test remember the tips from the preceding section They should help you improve on what you could do on an adaptive test If you encounter a question on an adaptive test that you can t answer you must guess an answer immediately Because of how the software works you may suffer for your guess on the next question if you guess right because you ll get a more difficult question next Question Handling Strategies For those questions that take only a single answer usually two or three of the answers will be obviously incorrect and two of the answers will be plausible of course only one can be correct Unless the answer leaps out at you if it does reread the question to look for a trick sometimes those are the ones you re most likely to get wrong begin the process of answering by eliminating those answers that are most obviously wrong Almost always at least one answer out of the possible choices for a question can be eliminated immediately because it matches one of these conditions The answer does not apply to the situation The answer describes a nonexistent issue an invalid option or an imaginary state After you eliminate all answers that are obviously wrong you can apply your retained knowledge to eliminate further answers Look for items that sound correct but refer to actions commands or features that are not present or not available in the situation that the question describes If you re still faced with a blind gu
73. than other print jobs from members of other groups A Configure the printer properties for Printer4 on each computer for each member of all the other network groups In the Printers And Faxes window right click Printer4 select Properties click the Advanced tab click the Available From button and specify the business hours that the printer will be unavailable for the Interns group Decrement the Priority counter so that each member of the other groups will have a lower printing priority for Printer4 than members from the Interns groups B For each user in the Interns group open the Printers And Faxes window right click Printer4 select Properties and click the Security tab Grant the permissions Allow Print Allow Manage Printers and Allow Manage Documents to the Interns group C Configure the printer properties for Printer4 on each computer for each member of the Interns group In the Printers And Faxes window right click Printer4 select Properties click the Advanced tab click the Available From button and specify the nonbusiness hours that the printer will be available Increment the Priority counter so that each MCP Exam 70270 Preparation doc 121 A7 A8 member of the Interns group will have a higher printing priority for Printer4 than members from other groups D For each user in the Interns group open the Printers And Faxes window right click Printer4 select Properties and click the Security tab Click the Advanc
74. the Global Domain Guests group automatically becomes a member of the Local Guests group HelpServicesGroup Members of this group can log on to the system and use helper applications to diagnose system problems This group is used in conjunction with the HelpAssistant and SUPPORT_xxxxxxxx user accounts Network Configuration Operators Power Users Remote Desktop Users Replicator Users MCP Exam 70270 Preparation doc Members in this group can have some administrative privileges to manage configuration of networking features Group members can add new local user accounts and change existing local user accounts Members can also create shared folders and shared printers on the network Power Users retain administrative powers with some restrictions Thus Power Users can run legacy applications in addition to certified applications Members in this group are granted the right to log on using the Remote Desktop or Terminal Services client software This group supports file replication within a Windows domain Group members can perform tasks only after an administrator has specifically granted them rights to do so They can access resources on only those objects for which an administrator has granted them permissions When user accounts get created each new user automatically becomes a member of the Local Users group If the local computer becomes a member of a Windows domain the Global Domain Users group auto
75. the root of a profile and is hidden by default This file is responsible for the user portion of the Registry and contains all the user settings MCP Exam 70270 Preparation doc 158 Managing User Profiles Behavior through Group Policy Windows XP offers several useful Group Policy settings for working with User Profiles When you load the Group Policy snap in for the MMC expand Computer Configuration Administrative Templates System and click User Profiles The settings for User Profiles include Delete Cached Copies of Roaming Profiles so that they won t be stored on the local computer The Log Users Off When Roaming Profile Fails setting prohibits users from logging on unless their roaming profile is available Another setting Prevent Roaming Profile Changes From Propagating To The Server will not allow any changes to roaming profiles centrally stored on a server This setting is an excellent option for computers that have multiple users sharing the same profile Fast User Switching Fast User Switching is a new feature in Windows XP This feature supports switching between multiple users on the same Windows XP computer without requiring each user to exit from their applications when they log off In a stand alone or workgroup environment Windows XP Professional implements Fast User Switching by default Windows XP Professional computers that are members of a Windows network domain cannot use Fast User Switching Only users whose accounts h
76. threshold over 20 pages sec This counter and all related counters including Page Reads sec Page Writes sec Page Faults sec Page Inputs sec and Page Outputs sec reflect the transfer of data and code from physical RAM to the virtual paging file and paging related events When any one of these counters is high it indicates a potential memory shortage because when a system does not have enough RAM to satisfy its needs inactive data and code are moved from physical RAM to the virtual paging file to make room for active data and code e Memory Available Bytes threshold under 4MB Available Bytes reflects the amount of physical RAM available after the working sets of applications and the cache have been served Windows MCP Exam 70270 Preparation doc 352 XP Professional trims working sets and page memory to the disk to maintain at least 4MB of available RAM If this counter is consistently lower than 4MB it generally indicates a memory shortage Memory is often the first performance bottleneck in the real world The counters related to processor and hard drive utilization might be well beyond their thresholds simply because inadequate memory is causing paging which impacts those two components So always check the memory counters to make sure that they are not the root cause of the performance bottleneck To correct a memory shortage your first reaction might be to add more RAM which is certainly one solution However it is
77. to store the captured settings Click Next 4 lf the wizard displays a message about certain applications that need to be installed on the new computer before you transfer settings take note of them and click Next again 5 Click Finish after the wizard notifies you that it has successfully copied all the files and settings that you specified On the new Windows XP computer 1 Click Start All Programs Accessories System Tools File And Settings Transfer Wizard 2 Atthe Welcome window click Next to continue Click New Computer and click Next 4 Click Don t Need The Wizard Disk Have Already Collected My Files And Settings From My Old Computer and click Next again 5 Click Other For Example A Removable Drive Or Network Drive and specify the exact location of the FAST Wizard s transfer files see Figure 18 Click Next The transfer process will begin and you must wait for it to complete 9 MCP Exam 70270 Preparation doc 190 Figure 18 Choosing a method and location for copying settings to the new computer using the File Settings and Transfer Wizard Files and Settings Transfer Wizard Where are the files and settings Where should the wizard look for the items you collected Direct cable a cable that connects your computers serial ports O Floppy drive or other removable media 4 Other for example a removable drive or network drive AA 7800dan FAST WIZ 6 Click Finish to complete
78. to the assistant During the creation of the invitation you first are prompted to give the name that will appear on the invitation and the duration the invitation will be valid Next you are given an opportunity to give the invitation a password This is a critical step in configuration for the overall security of the process It is highly recommended that you configure the password but keep the password complex Here are some tips to ensure the password is complex e The password should contain multiple characters at least six or seven e The password should contain more than one type of character such as a combination of alpha and numeric characters e The password should not contain the computer name or username e The password should not be a common word especially one that can be referenced from a dictionary Because the password is not sent with the invitation it must be communicated with the assistant before the invitation is sent This can be via an email or phone conversation After this information is input the invitation needs to be saved The name of the ticket can be anything and should be descriptive for the event The extension for the file should not be altered which is msrcincident The file is actually an XML file that gives the pertinent information for the invitation and connection to the remote computer MCP Exam 70270 Preparation doc 316 After you have sent the invitation or created the invitation file you can
79. user is a member of two groups one that is allowed a permission and another that is denied the same pesmission the user is denied that permission Do you want to continue Click Yes in the Security message box to have the new Deny permissions take effect When users who are members of a group that is assigned Deny MCP Exam 70270 Preparation doc 95 permissions for reading a folder attempt to gain access to that folder they are greeted by an Access Is Denied message box shown in Figure 10 Figure 10 The Access Is Denied message box amp 9 C Samples is not accessible Access is denied Optimizing Access to Files and Folders The best practice is to always assign NTFS security permissions to groups rather than to individual users You should place users into appropriate groups and set NTFS permissions on those groups In this manner permissions are easier to assign and maintain NTFS Permissions Moving and Copying Files and Folders Moving or copying files and folders from an NTFS drive volume to network drives or other media that are non NTFS volumes results in the oss of all NTFS security permission settings for the objects moved or copied The result of moving or copying NTFS files and folders to different NTFS folders varies depending upon whether the objects are being moved or copied and depending upon the destination drive volume Table 6 shows the different effects on NTFS permissions when copying files and fold
80. user s account gets the Network security principal applied to it until he disconnects from that network connection Table 2 outlines the various user related built in security principals for Windows XP Professional Figure 2 displays both user related and computer process MCP Exam 70270 Preparation doc 719 and service related built in security principals for a Windows XP domain member computer Figure 2 Windows XP built in security prinicipals can be displayed from the Select User Or Group dialog box Select User or Group Select thes object type Name RON ANONYMOUS LOGON Authenticated Users BATCH CREATOR GROUP CREATOR OWNER DIALUP Everyone INTERACTIVE LOCAL SERVICE EP NETWORK NETWORK SERVICE REMOTE INTERACTIVE LOGON SERVICE SYSTEM TERMINAL SERVER USER MCP Exam 70270 Preparation doc 80 Table 1 Local groups Local Group Administrators installed by default in Windows XP Professional Role Group members possess full administrative control for managing the local system local users and Local groups Backup Operators Guests Group members have the rights to back up and restore files and folders on the local system Group members can t make permanent alterations to their desktop settings The default Guest account is automatically a member of this group By default group members possess no specific rights or permissions on objects If the local computer joins a Windows domain
81. verifies the proper TCP IP configuration of the local host computer by attempting to ping the loopback address for the local host computer For example ping 127 0 0 1 ROUTE Edits the local computer s routing tables TRACERT Displays the route path that data packets follow as they travel from the local computer to a remote destination computer MCP Exam 70270 Preparation doc 303 Troubleshooting TCP IP Configuration and Connectivity Whenever you initially set up TCP IP you should always test and verify that the protocol is working properly Here are the steps you can take to check the computer s TCP IP configuration and to test its connectivity 1 Open a command prompt window ipconfig and ping are strictly command line utilities 2 Run ipconfig to display the computer s current IP configuration Use ipconfig all to display more detailed information as shown in Figure 1 Figure 1 An example of running the ipconfig command with the all switch commando BES C gt ipconfig all a Windows IP Configuration Host Name Primary Ons Suffix Node Type Hybrid IP Routing Enabled No WINS Proxy Enabled No t adapter Local Area Connection Connection specific ONS Suffix scription Xircom Car hernet II 10 100 ysical Address 00 10 A4 1 gt Enabled Yes Autoconfiguration Enabled Yes IP ess 10 10 10 55 Subnet Mask 255 255 255 Default Gateway 10 10 10 DHCP Server 10 10 10 DNS Servers 24 1 240 3 24 1 240 10 10
82. without restarting your computer Windows XP automatically identifies the new hardware and installs the drivers it needs If you are using an older computer that does not support Advanced Power Management APM or the current standard Advanced Configuration and Power Interface ACPI you must set up the device manually and restart your computer when installing new hardware devices For now you need ACPl compliant hardware to make your Windows XP hardware setup experience smoother We will discuss APM and ACPI in greater detail later in this chapter Universal Plug and Play The Enhanced PnP Standard Starting with Windows 95 Microsoft has built hardware device PnP capabilities directly into the operating system which makes installing and configuring peripherals on a personal computer a great deal easier The Universal Plug and Play UPnP standard extends this simplicity to include the entire networked environment enabling discovery and control of networked devices and services such as network attached printers Internet gateways and even consumer electronics equipment UPnP is more than just a simple extension of the PnP peripheral model It is designed to support zero configuration invisible networking as well as automatic device discovery for a vast array of different types of devices developed by a wide range of manufacturers MCP Exam 70270 Preparation doc 210 With UPnP a device can dynamically join a network obtain an IP addr
83. 0 You want to take advantage of the new Group Policy Objects that can control desktop settings security and software installation You want to use the DFS service to create a load balanced and fault tolerant environment for the software deployment and maintenance via Group Policy To prepare your environment for the Windows 2000 domain you want to install Windows XP on all the clients before the Windows 2000 domain is installed You want to create the most efficient installation for your 10 000 client computers You currently use a third party cloning and distribution package and need to continue to use this package for the distribution of Windows XP Professional You want the installation to be completely automated Which options should you use Check all correct answers a Create an answer file using Setup Manager b Create a uniqueness database file using Setup Manager c Use the CD based image using RIS d Create an image using Riprep e Create an image using Sysprep Answer Answers a and e are correct To optimize the installation of Windows XP Professional using a third party cloning and distribution package you need to MCP Exam 70270 Preparation doc 63 use Sysprep exe Sysprep allows for the creation of images that use a minisetup program to make the system unique on the network In addition to using the Sysprep tool you need to make an answer file to answer the minisetup questions automatically This will make the in
84. 10 Lease Obtained Saturday September 15 Lease Expires Friday September 21 3 Use the ping command to ping the computer s loopback address ping 127 0 0 1 This tests whether TCP IP is correctly installed and bound to the network adapter card Figure 2 shows the response from pinging the loopback IP address MCP Exam 70270 Preparation doc 304 Figure 2 An example of pinging a computer s loopback IP address commandromt C gt ping loopback Pinging xpprorc2 127 0 0 1 with 32 bytes of data Reply from 127 Reply from 127 0 TTL 1 1 t from 127 1 ytes t s TTL 1 TTL s TTL 128 y from 6 0 1 t Received Approximate round trip times in milli Minimum Oms Maximum Oms C gt ping 127 0 0 1 Pinging 127 0 0 1 with 32 bytes of data from 127 8 ytes 32 t TTL 128 f 127 t s TTL 128 y 127 t s TTL 128 y from yt t 6 TIL 128 t 4 Received 4 Approximate round trip times in milli Minimum Oms Maximum Oms Average 4 Ping the IP address of the local computer to verify the uniqueness of the IP address on the network 5 Ping the IP address of the default gateway for the local subnet to check that the default gateway is up and running This step also demonstrates whether the computer can successfully communicate over the local network segment 6 Ping the IP address of a computer that is located on a different network segment This step indicates whether the computer can send and receive
85. 129 to 192 for Class B and 193 to 224 for Class C B 0 to 126 for Class A 128 to 191 for Class B and 192 to 223 for Class C C Nonroutable ranges of 10 x y z and 192 168 x y D Nonroutable ranges of 127 x y z and 192 168 x y Answers b and c are correct The Classful ranges for IP addresses go up to the binary range of the number but don t include the next value For example the Class A range includes 0 to 126 but does not include 128 which is the beginning of the next range of addresses The nonroutable ranges include the 10 x y z range from Class A and 192 168 x y from the Class C range There is another range that is not routable which is 172 16 0 0 to 172 31 255 255 from the Class B range Answer a is incorrect because the IP address ranges are too large not leaving room between the Class ranges Answer d is incorrect because 127 x y z is not a functional address range because it is used for local computer configurations You are trying to find the last Remote Assistance file that you created but are unable to track down the location where you stored the file When you saved the file you did not use the default location to increase the security of the invitation Now you need to try to search for the file What file extension will you look for a msrcincident b assistant c help d info Answer a is correct When an invitation for Remote Assistance is saved to a file the default file extension is msrcincident Ano
86. 2 Install Windows XP Professional and any applications that users may need Connect to the REMINST share point on the RIS server Run riprep exe from RIS Server REMINST Admin 386 riprep exe 3 The Remote Installation Preparation Wizard is launched It asks you on which RIS server the image should be placed and the name of the folder to which the image should be copied 4 The last task is to provide a user friendly name for the image such as Marketing or Sales After you complete these steps Riprep exe copies the image to the designated RIS server However Riprep exe acts a lot like Sysprep exe In addition to MCP Exam 70270 Preparation doc 48 creating an image Riprep exe removes the unique attributes such as the SIDs and the computer name When the RIS client downloads the image the Mini Setup Wizard asks you to put back what was taken out The creation of the Riprep image contains an answer file which is located in the i386 Templates folder of the image on the RIS server This answer file Risetup sif can be modified to automate and customize the installation of the Risetup image Because the Riprep process takes everything from the disk and puts it into the image you could store virtually anything in the image for future reference You could place the critical drivers for printers NICs and video adapters from the XP Professional CD You could place custom settings in the image as well such as critical help files for a busine
87. 7 pass If you prepare seriously you should do well We are confident that you can do it The next section covers other sources you can use to prepare for the Microsoft certification exams Additional Resources A good source of information about Microsoft certification exams comes from Microsoft itself Because its products and technologies and the exams that go with them change frequently the best place to go for exam related information is online If you haven t already visited the Microsoft Certified Professional site do so right now The MCP home page resides at www microsoft com trainingandservices see Figure 4 Figure 4 The Microsoft Certified Professional home page _ JB Nicrosolt Tiaming amp Services Microvolt Internet Explores Training Services Mume Enerany Certification Enterprise tervices Tech Commnmurstios fi wertic J Knowledge is s power digital edge get n Here Training amp Services Training 3 Certification 5 Enterprise Services Upyrede to Windows 3 Tech Communities The night tools and the knowledge to apply them ere critical for 2800 succesfully success in almost any endeavor In today s world the tools of Moore soft Consuhing information technology dnve business growth and enable achieve cost effective Strategic management Whether you re an individual seeking deployment B Newsletters greater techrecal competency or an anterpnse looking to get Program Opportuni
88. 7397 for a list of supported adapters MCP Exam 70270 Preparation doc 197 Fax Features Windows XP provides support for sending and receiving faxes via an internal or external modem or through a remote fax device connected over a network The Windows XP Fax service is not installed by default when you first install Windows XP To install the Fax service open the Printers and Faxes folder from the Start menu and select Set Up Faxing from the Printer Tasks section or select File Set Up Faxing from the Printers and Faxes menu bar As an alternative method you can open the Add or Remove Programs applet from the Control Panel and select Add Remove Windows Components Mark the Fax Services checkbox click Next wait for the components to be installed and then click Finish to complete the Windows Components Wizard After you have installed the Fax service you need to configure the service using the Fax Console The first time that you click Start All Programs Accessories Communications Fax Fax Console after installing the Fax service you ll be greeted by the Fax Configuration Wizard which assists you in setting up your computer to send and receive faxes Enter your Sender Information specify which fax device to use and configure fax send and receive options By default the Fax service is configured to allow users to only send faxes not receive them Mark the Enable Receive checkbox to turn on the fax receiving feature Enter your Transmitting
89. AID 5 volume configuration Answer e is incorrect because volume sets were supported for basic disks under Windows NT these are known as spanned volumes under Windows XP Answer g is incorrect because Windows XP Professional does not support the fault tolerant mirrored volume configuration MCP Exam 70270 Preparation doc 286 4 Sue has a Windows XP Professional computer that has two physical hard drives installed both disks have been converted to dynamic disks The first disk disk 0 has a capacity of 20GB with 11GB of unallocated free space a drive C system and boot volume of 2GB and a drive D volume of 7GB The second disk disk 1 has a capacity of 30GB with 20GB of unallocated free space Sue needs to extend drive D a simple volume on her computer so that the volume will have an increased amount of total disk soace from 7GB to 14GB How can she accomplish this without deleting any existing data Check all correct answers A Repartition and reformat drive C B Extend drive D to an area of free space on disk 1 C Extend drive D to an area of free space on disk 0 D Convert disk 1 to basic and extend the volume A4 Answers b and c are correct A simple volume on a dynamic disk may be extended onto unallocated free space of additional dynamic disks up to a maximum of 32 dynamic disks this automatically turns the volume into a spanned volume A simple volume on a dynamic disk may also be extended onto an area of unal
90. Access policy MCP Exam 70270 Preparation doc 100 Figure 13 The Audit Object Access Properties dialog box Audit object access Properties Local Security Setting Audit object access Audit these attempts C Success 4 Click the Success checkbox the Failure checkbox or both checkboxes 5 Click OK 6 Close the Local Security Settings Console After you have turned on audit tracking for object access events you need to specify which files folders or other objects you want to audit You should be fairly selective about which ones you choose to audit If you have enabled auditing for successes as well as failures the system s Security Event log may become filled very quickly if you are auditing heavily used files and folders You can only audit object access for files and folders that are stored on NTFS volumes To enable audit logging for specific files folders or other objects such as printers follow these steps 1 Log onto the system as the administrator or an equivalent user 2 Right click the object from Windows Explorer My Computer or Printers And Faxes and select Properties Click the Security tab Click the Advanced button Click the Auditing tab in the Advanced Security Settings dialog box Click the Add button Type in the user or group that you want to track for accessing the object and then click OK The Auditing Entry dialog box shown in Figure 14 appears Pal Oe OF de MCP Exam 70270 Prep
91. CP as an enhancement to the Multilink feature found in Windows NT 4 Multilink enables you to bind together two or more modems or ISDN lines allowing you to achieve higher throughput more bandwidth than you would if you used the lines individually BAP and BACP work together to dynamically add or drop lines for multilinked devices on an on demand basis Both protocols serve as PPP control protocols These protocols provide a means for optimizing bandwidth while holding down connection costs by responding to network bandwidth needs on demand For organizations that incur line usage charges based on bandwidth use such as ISDN lines BAP and BACP can significantly cut costs Administrators can turn on the Multilink feature as well as BAP and BACP from the PPP tab of each remote access server s Properties dialog box You configure BAP settings using remote access policies By implementing a remote access policy using BAP you can specify that an extra line should be dropped if the connection for that line falls below a specified percentage If two different users need to have different BAP settings multiple remote access policies can be configured where each of them uses a different percentage The easiest way to MCP Exam 70270 Preparation doc 368 configure the different remote access policies is to associate the settings to a Windows group which will easily apply the policy settings to the correct type of user MCP Exam 70270 Preparation do
92. Caching button Select the Allow Caching Of Files In This Shared Folder option this option is selected by default Select one of the following three options from the Settings drop down list and then click OK e Manual Caching For Documents Requires users to select the files they want available for offline usage This is the default setting e Automatic Caching For Documents Caches all files that users have opened to their local disk for offline usage Any older files that are out of synchronization are automatically deleted and replaced by a newer version of the same file e Automatic Caching For Programs Provides the same capabilities as Automatic Caching For Documents but also caches applications that are run from the network Click OK to close the Sharing dialog box and to accept the options that you selected By default Windows XP does not allow you to cache files with the slm ldb mdw mdb mde pst and db extensions However you can override this setting through a Group Policy Create a Group Policy for Computer Configuration Administrative templates Network Offline Files Files not cached This policy is meant to exclude files with specific file extensions from being cached However if the policy is enabled and no file extensions are added all file types can be made available offline This setting overrides the default configuration it allows files with the previously listed extensions to be cached You must
93. Click OK to create the shared folder The folder now becomes available to others on your network Note To remove a network share right click the shared folder and choose the Sharing And Securiy option Click the Do Not Share This Folder option button and click OK The folder will no longer be shared with the network The Security tab of an NTFS folder s properties dialog box is not displayed when Simple File Sharing is enabled and the computer is not a member of a Windows domain To display the Security tab so that you can view and work with NTFS permissions for folders and files open a window in My Computer or Windows Explorer and select Tools Folder Options Click the View tab and clear the checkbox entitled Use Simple File Sharing Recommended MCP Exam 70270 Preparation doc 71 Creating Shared Folders from the Shared Folders MMC Snap in To share a folder with the network with Simple File Sharing disabled you may use the Shared Folders MMC snap in from a custom console or you can use the Shared Folders snap in as part of the Computer Management Console by following these steps 1 Right click the My Computer icon and select Manage or open an empty Microsoft Management Console window and add the Shared Folders snap in for the local computer Expand the Shared Folders node and click Shares Right click the Shares subnode and select New File Share Type the path and folder name in the Folder To Share box or click Browse to locate
94. Control Read and Modify on the file or folder Take Ownership Allows or denies taking ownership of a file or folder The owner of a file or folder can always change permissions on it even if other permissions have been assigned to safeguard the file or folder NTFS security permissions are cumulative Users obtain permissions by having them assigned directly to their user accounts in addition to obtaining permissions via group memberships Users retain all permissions as they are assigned If a user named Dan has the Allow Read permission for the Graphics folder and if Dan is a member of the Users group which has been assigned Allow Write permission for the same folder Dan has both the Allow Read and Allow Write permissions Permissions continue to accumulate However Deny entries always override Allow entries for the same permission type Read Modify Write and so On Default NTFS Security Permissions Under Windows XP by default all NTFS formatted drive volumes are assigned Allow Read and Execute as special permissions for the Everyone group for the root of each drive volume Folders and subfolders within each drive volume do not automatically inherit this default permission setting These defaults are different than the defaults for previous versions of Windows When you install Windows XP Professional on an NTFS volume the systemroot folder for example C Windows is automatically assigned special default secur
95. MCP EXAM 70 270 PREPARATION Copyright by CTF Services Limited 2005 All rights reserved worldwide No part of this book may be reproduced or transmitted in any form or by any means electronic or mechanical including photocopying recording or by any information storage and retrieval system without the written permission of the publisher except where permitted by law Published by CTF Services Limited 19 Regent St Timaru 7910 New Zealand Author Nick Thorne Distributed by www ebooksctf co nz MCP Exam 70270 Preparation doc 1 MCP EXAM 70 270 PREPARATION PREFACE Welcome to the exciting and rewarding world of Microsoft Certification This is a huge growth area worldwide and people who are Microsoft Certified certainly enjoy a competitive advantage hope you enjoy doing this course and will want to learn more after you finish This course is arranged as follows e Ten Theory Chapters that include exercises USE the Bookmarks and Thumbnails to help you to navigate this pdf document Please E Mail us if you have any questions or comments Our E Mail address is questions ebooksctf co nz Please include where possible the Course Name and the Page Number these can be found on the footer of each page Enjoy the journey We look forward to your continual success MCP Exam 70270 Preparation doc 2 CONTENTS INTRODUCTION CHAPTER ONE CHAPTER TWO CHAPTER THREE CHAPTER FOUR CHAPTER FIVE
96. OU that will apply the service pack after it has been tested for that type of developer Answer Answer d is correct For this deployment it will be ideal to create a Group Policy that will apply the service pack through the use of MSI packages After the service pack has been thoroughly tested for a developer type it can be quickly installed through the use of software deployment using Group Policy Answer a is incorrect because the ability to control the installation is too limiting through a batch file Also it would be extremely difficult to control the batch file application to computers where through GPOs it would be very easy Answer b is incorrect because there would be no control over who actually had the service pack or not There could also be a problem if the developer uses someone else s machine and incorrectly installs the service pack there Answer c is incorrect because this tool is used to install hotfixes without rebooting not service packs MCP Exam 70270 Preparation doc 66 6 As the administrator for CTF Publishing you are planning to install 1 000 Windows XP Professional computers in the next month You are currently running Windows 95 on these clients and will use a network unattended installation to install the new OS Security is an important facet for your industry because the users need to use the Internet so much to do research You are aware of at least four security hotfixes that you want installed during the in
97. P Professional to support a second processor if only a single processor was present when you first installed the operating system A Use the Uptomp exe utility from the Windows XP Professional Resource Kit B Reinstall Windows XP Professional on the system C Launch the Hardware Update Wizard by right clicking the existing processor in Device Manager and selecting Update Driver D Copy the Halmps dll file from the Windows XP Professional Setup CD ROM to the systemroot system32 folder and then restart the computer A6 Answer c is correct Windows XP Professional supports a maximum of two processors To upgrade the operating system to support a second installed processor you use the Hardware Update Wizard Answer a is incorrect because the Uptomp exe utility was used for Windows NT 4 but is not used for Windows XP Answer b is incorrect because although performing a reinstallation should update the system to support multiple processors it would take much more time than to simply run the Hardware Update Wizard Answer d is incorrect because copying DLL files from the Windows XP CD ROM is not supported for upgrading support for two processors MCP Exam 70270 Preparation doc 245 7 How can you update Windows XP to support ACPI after you have upgraded the computer s BIOS from supporting APM to supporting ACPI A Go to the Power Options applet in the Control Panel click the Advanced tab click the Enable ACPI option button and then
98. P using a dial up connection This section details what you need to know about modem support and troubleshooting in Windows XP Professional Installing Modems If Windows XP launches the Install New Modem dialog box for the Add Hardware Wizard as soon as your new modem is physically connected to your machine you are in luck You have nothing more to do than follow the prompts that the wizard provides if any to complete the setup of your new modem If the Add Hardware Wizard does not detect your modem or if you cannot find it listed you are faced with installing an unsupported modem Good luck on your mission Windows XP cannot automatically detect certain internal modems You must install the modem manually through the Add Hardware applet located in the Control Panel or by following these instructions 1 Open Phone And Modem Options in the Control Panel 2 Optional If you are prompted for location information enter dialing information for your location and click OK 3 Click the Modems tab and then click the Add button 4 Follow the instructions for the Add Hardware Wizard Using Multilink Support Multilinking or multiple device dialing allows you to combine two or more modems or integrated services digital network ISDN adapters into one logical link with increased bandwidth The Network And Dial up Connections feature performs PPP Multilink dialing over multiple ISDN X 25 or modem lines The feature combines multiple phy
99. P address automatically This is the preferred method to use with ICS as opposed to obtaining the address manually MCP Exam 70270 Preparation doc 378 covered shortly When you enable ICS the Windows XP Professional DHCP Allocator uses the default IP addressing range of 192 168 0 2 through 192 168 0 254 and the DNS Proxy service becomes enabled so that clients on the network can connect to the shared Internet resource As an alternative you can manually set up workstations to work with ICS however this is not the recommended method according to Microsoft To do this perform these steps 1 Click Start Control Panel Network Connections 2 Right click the LAN connection and select Properties 3 Click Internet Protocol and click Properties 4 Click Use The Following IP Address and type a unique IP address in the range from 192 168 0 2 through 192 168 0 254 Type 255 255 255 0 for the Subnet Mask 6 Type 192 168 0 1 for the Default Gateway the IP address for the Windows XP Professional computer that is hosting the shared Internet connection 7 Type the Preferred DNS Server according to your ISP s documentation if your ISP does not provide this information automatically 8 Type the Alternate DNS Server according to your ISP s documentation if your ISP does not provide this information automatically 9 Click OK in the Internet Protocol TCP IP Properties dialog box 10 Click OK in the LAN connection Properties d
100. Policies A Software Restriction Policy can help to control users running untrusted applications and code It is clear that most viruses are introduced into the computing environment when users run unauthorized applications and open email attachments With software restrictions these undesired applications and code can be eliminated The following is a listing of some of the control that these policies provide Untrusted code is prevented from sending email accessing files or performing other normal computing functions until verified as safe Protection is provided against infected email attachments This includes file attachments that are saved to a temporary folder as well as embedded objects and scripts ActiveX controls downloaded from the Web are monitored and neutralized if necessary Software restriction policies can be used on a standalone computer by configuring the Local Security Policy Two Types of Software Restriction Policies Software restriction policies can be applied at the two security levels Unrestricted Only let trusted code run If all trusted code can be identified the administrator can effectively lock down the system The following are examples of where to apply an only let trusted code run policy Application station Task station Kiosk Disallowed Prevent unwanted code from running In some cases an administrator cannot predict the entire list of software that users will need to run In th
101. Post Office Protocol Version 3 POP3 CO Remote Desktop O Secure Web Server HTTPS O Telnet Server O Web Server HTTP MCP Exam 70270 Preparation doc 375 When configuring one of these services you will need to provide the name or IP address of the computer on the network that is running the selected service If you don t find a service that you need to translate for Internet users or you need to customize a service you can do so by clicking the Add button within the Services tab After you click the Add button you will be prompted to input critical information for the service as shown in Figure 7 Figure 7 Custom service window for use with the ICF service Service Settings Description of service Name or IP address for example 192 168 0 12 of the computer hosting this service on your network External Port number for this service IcP OUDP Internal Port number for this service MCP Exam 70270 Preparation doc 376 ICF Logging When there is traffic that is dropped by the ICF service no message appears to the user of the system The reason for this is obvious If there is an abundance of dropped packets there could be an overwhelming number of messages hindering the user In many instances the information about dropped packets will be important whether for troubleshooting or for tracking down security issues For these cases where it is important to get information about the traffic that is being dropped
102. Requesting Service option shown in Figure 1 Figure1 The Remote Install tab 2KDC1 Properties F 2 x General Operating System Member Of Location Managed By Object Security Remote Install 4 You can manage this remote installation server and control the amp ab way it interacts with existing and potential client computers rm Client support V Respond to client computers requesting service Il Do not respond to unknown client computers m Check server If this remote installation server is exhibiting problems select the Verify Server option to perform an integrity check If problems are encountered they will be fixed This option is only available from the server console Verify Server Show Clients Advanced Settings Cancel Apply MCP Exam 70270 Preparation doc 47 Creating Additional Images The Risetup exe wizard created the first image of Windows XP Professional for you However that image provides only an attended installation of the OS You can create additional images in a few different ways e Use Setup Manager to create an answer file for your CD based image This allows for custom and unattended installations The answer file will simply be attached to the CD based image by using the Remote Install tab from the RIS server properties page Here you will add another image by attaching the answer file to the existing image e When locking down the security to imag
103. Screen Fonts and select ClearType from the drop down list box 4 Click OK to close the Effects dialog box and then click OK to close the Display Properties window and enable ClearType Dualview Multiple Display Support Dualview is related to the Multi Monitor feature that was first introduced in Windows 98 The Multi Monitor feature is also available under Windows XP but Dualview extends the concept both to mobile computers that have only one video card installed and to desktop computers that have one video card installed with two video output ports With Dualview you cannot specify which monitor is the primary display On mobile PCs the primary display is always the built in LCD screen On desktop PCs the primary display is always the monitor connected to the first video output port To configure Dualview support launch the Display applet in the Control Panel after you have connected and powered on the second external monitor From the Display Properties window click the Settings tab and then select the Extend My Windows Desktop Onto The Monitor option Not all display adapters are supported under Dualview At the time of the initial release for Windows XP Microsoft specified only three mobile display adapters that support this feature the S3 Savage MX the Trident 3D and Trident XP MCP Exam 70270 Preparation doc 196 video adapters Be sure to check the Microsoft Hardware Compatibility List and Microsoft Knowledge Base article Q30
104. Settings folder of the Group Policy MMC snap in not by using additional Administrative Templates MCP Exam 70270 Preparation doc 206 A7 Zachary a network administrator wants to use the Windows Installer Program executable to advertise a new application to all users on a stand alone Windows XP Professional workstation The name of the program s installer package is App1 msi He d like to modify the installation with a transform file he s created by the name of App1 mst He also wants to log any and all error messages to a file named Logfile txt on the root of the c drive How can he accomplish this A Use the following command line syntax MSIEXEC exe jm c setup app1 msi t c setup app1 mst L v c logfile txt B Run setup exe to install the application and specify transform c setup app1 msi log c logfile txt as command line arguments for the setup program C Create an MST Windows Installer Package Transform file for the legacy application using third party repackaging software Specify MSIEXEC t c setup app1 mst on the command line D Use the following command line syntax MSIEXEC exe fm c setup app1 msi t c setup app1 mst L v c logfile txt Answer a is correct The syntax for MSIEXEC exe is MSIEXEC options msi_filename msi t transform_filename mst L v driveletter logfile_name txt where parameters in square brackets are optional Answer b is incorrect because you need to run MSIEXEC to advertise appli
105. Settings user_logon_name for example C Documents and Settings Joe_User If however you upgrade a Windows NT 4 Workstation to Windows XP Professional the local profile is stored in the same location as it always was SystemRoot Profiles user_logon_name Logon Scripts Home Folders When a user logs on to a Windows NT domain or to a Windows Active Directory domain from Windows XP Professional a Logon Script may execute and a home folder may be assigned to the user Logon scripts are often used to map network drives or to execute some type of batch file To configure a logon script for a user perform the following steps on a Windows 2000 server or on a Windows NET Server Active Directory domain controller MCP Exam 70270 Preparation doc 155 1 Place the logon script in SystemRoot sysvol domain scripts this is the location for logon scripts for Windows servers acting as domain controllers 2 Run the Active Directory Users and Computers MMC snap in right click the name of the user and select Properties Go to the Profile tab and simply type the name of the logon script in the Logon Script box A home folder is a central location on a network server where users can store their files All users can have their own home folders to store data This way if their workstation fails they don t lose all of their data Home folders also provide one central location in which users can back up all of their data To create a home folder p
106. Sounds When applications use sounds to convey messages and information this feature displays text captions that represent those sounds Selecting the ShowSounds checkbox enables this feature No shortcut is available for ShowSounds Display Tab The Display tab enables you to specify high contrast colors and fonts and to set cursor options High Contrast When enabled this feature informs applications to change the color scheme to a High Contrast scheme to allow for easier reading For example you can enable a white on black scheme a black on white scheme or one of the many other high contrast schemes or you can choose from any of the installed appearance schemes on your Windows XP system Doing so enables users to adjust colors and font sizes for Windows XP and all applications To enable this feature select the Use High Contrast checkbox or press the left Alt left Shift Print Screen keys as a shortcut When you press these three keys at the same time a dialog box appears that asks if the feature should be turned on Cursor Options You can adjust the Blink Rate slider bar to achieve a faster or slower blink rate for your Windows XP cursor You can adjust the Width slider bar to set the cursor width to be narrower or wider Mouse Tab The Mouse tab enables you to use the keyboard as a mouse using the following feature MouseKeys When enabled this feature allows a user to use the numeric keypad to move the mouse pointer
107. States 1 Fax number 818 5551212 Use dialing rules New Location v Dialing rules To send to multiple recipients type each recipient s information above and then click Add to add the recipient to the list below Recipient name Fax number The Fax Console Managing Faxes Settings and Options The Send Fax Wizard gathers some information such as the sender s name and fax number This information is gathered from settings contained in the properties of the Fax Console To work with fax settings right click the Fax icon in the Printers and Faxes folder and select Properties You can access the Printers and Faxes window from the Start menu or by clicking the Printers and Faxes icon in the Control Panel The Fax Properties windows displays five tabs e General Enables you to assign a location comment and configure specific fax features e Sharing Fax sharing is not supported under Windows XP Professional e Devices Enables you to specify fax device settings and send and receive options for each device e Tracking Enables you to specify a fax device to monitor and to set send and receive notification options e Archives Enables you to specify whether to archive incoming and or outgoing faxes and where to store those archives To work with Fax Security permissions right click the Fax icon in the Printers and Faxes folder press and hold down the Ctrl key and then select Properties The Fax Properties window will ap
108. Subscriber Identification TSID number and your Called Subscriber Identification CSID number through the Fax Configuration Wizard The wizard also asks you for routing options whether to print a received fax on a certain print device and or whether to store an additional copy of each fax within a specific folder After you complete the wizard the Fax Console window opens You can access the Fax Console window by selecting Start All Programs Accessories Communications Fax Fax Console by right clicking the Fax icon in the Printers and Faxes folder and selecting Open from the pop up menu or simply by double clicking the Fax icon in the Printers and Faxes folder To fax a document follow these steps 1 Click FileSend A Fax from the Fax Console click File Print from an application program or click File Send To Fax Recipient 2 If you select File Print from an application select the fax printer and then click OK to submit the fax For any of the three options you choose the Send Fax Wizard launches The wizard enables you to enter the recipient s name and fax number cover page information and other configurations Figure 19 shows the Send Fax Wizard MCP Exam 70270 Preparation doc 198 Figure 19 The Send Fax Wizard Send Fax Wizard Recipient Information Enter the name and number of the person you want to send the fax to or click Address Book to select a fax recipient To Dan Balter Address Book Location United
109. T command may be run under a different security context by selecting Advanced AT Service Account from the Scheduled Tasks folder s menu You can then specify a particular user account whose security context will be used for all events that are scheduled using the AT command Perform the following steps to create an automated task using the Scheduled Tasks folder 1 Double click the Add Scheduled Task icon and then click Next at the Scheduled Task Wizard window 2 Select the application program that you want to schedule from the list or click Browse to locate the appropriate program and click Next 3 Choose how often the task should run and then click Next The options are as follows e Daily Weekly Monthly One Time Only When My Computer Starts When Log On MCP Exam 70270 Preparation doc 201 4 Depending on what you chose in Step 3 users may have to set up what time of the day what days of the week or what months of the year the task should run Choose the appropriate options and then click Next 5 The next step requires you to enter a username and password The username must have the right to run the selected application Click Next 6 The last dialog box of the wizard asks users whether or not to open the Advanced Properties dialog box after the task has been created The Properties dialog box enables the user to edit the schedule delete the task if it is not scheduled to run again stop the task start the task during idle peri
110. The Change Journal keeps track of changes similar to the archive attribute but in addition it goes beyond the archive attribute in that it can also keep track of changes to permissions and changes to a document s name These are features that the archive attribute simply doesn t offer MCP Exam 70270 Preparation doc 326 Table 1 Windows XP backup types Backup Looks Clears Backup Set Created Type for Marker Marker Normal No Yes Backup of all selected files and folders The most complete backup and the most straightforward to recover but also the lengthiest to create Copy No No Copies all selected files and folders Differential Yes No Backup of selected files that have changed since the last normal backup If you create a normal backup then one week later create a differential backup and then another week later create another differential backup you could restore all data using the normal backup and the second differential backup which contains all files that have changed since the normal backup You could in this example discard the first differential backup Incremental Yes Yes Backup of all data that has changed since the most recent normal or incremental backup If you create a normal backup then one week later create an incremental backup and then another week later create a second incremental backup you would need all three backups to recover data Daily Yes No Backup of all fil
111. The encryption level used will be the standard level for either the MPPE or IPSec e Maximum Strength Encryption This will require that both the remote access client and server negotiate the communication with strong encryption MCP Exam 70270 Preparation doc 370 Figure 2 Security configurations for a dial up or VPN connection Advanced Security Settings Data encryption Require encryption disconnect if server declines No encryption allowed server will disconnect if it requires encr Optional encryption connect even if no encryption Require encryption disconnect if server declines Maximum strength encryption disconnect if server declines Allow these protocols C Unencrypted password PAP C Shiva Password Authentication Protocol SPAP C Challenge Handshake Authentication Protocol CHAP Microsoft CHAP MS CHAP C Allow older MS CHAP version for Windows 95 servers Microsoft CHAP Version 2 MS CHAP v2 C For MS CHAP based protocols automatically use my Windows logon name and password and domain if any Two different levels of encryption can be required for a remote access connection Table 1 gives you the information about how the different levels are seen in the interface and what each means MCP Exam 70270 Preparation doc 371 Connecting to Remote Access Servers You create new connections to remote access servers from the Network Connections window You can make new connections as well as modi
112. The keypad can also perform single click double click and drag mouse actions In addition you can assign settings that control the pointer speed To enable this feature select the MouseKeys checkbox or press left Alt left Shift Num Lock A dialog box will appear asking whether the MouseKeys feature should be enabled If you click the OK button an icon will appear in the system tray to graphically indicate that the feature has been enabled MCP Exam 70270 Preparation doc 193 General Tab The General tab enables you to specify settings for all accessibility features e Automatic Reset You can turn off StickyKeys FilterKeys ToggleKeys SoundSentry High Contrast and MouseKeys after a specified idle period has passed For example you could assign a five minute idle period These six features would then all be turned off if the computer were idle for five or more minutes To assign an idle period click the Turn Off Accessibility Features After Idle For checkbox and select a timeout period from the drop down list box e Notification You can have the system alert you whenever an accessibility feature is turned on or off by having a warning message pop up and or by having the system make a sound e SerialkKey Devices Enable this option for users who cannot use a standard keyboard and must install an alternative input device into a serial port e Administrative Options You can choose Apply All Settings To Logon Desktop to allow th
113. This computer has been assigned an IP address of 20 1 20 1 from your ISP You do not have the correct client installed on your Windows 98 computer but have installed the Remote Desktop Web Connection on the work computer How will you connect to the work computer from the Windows 98 computer MCP Exam 70270 Preparation doc 320 A You cannot connect to a Windows XP Professional computer from a Windows 98 computer using Remote Desktop B Connect using Internet Explorer and a URL of http HOME tsweb C Connect using Internet Explorer and a URL of http XPPROWORK tsweb D Connect using Internet Explorer and a URL of http 20 1 20 1 tsweb A6 Answer c is correct As long as the Windows 98 client has IE4 or higher it can connect to the Windows XP computer using the virtual directory that was configured on that system for Remote Desktop The virtual directory is named tsweb by default and can be referenced with either the computer name or the IP address Answer a is incorrect because it is possible to connect to a Windows XP Professional computer from a Windows 98 computer using Remote Desktop Answer b is incorrect because HOME is the name of the Windows 98 computer not the Windows XP computer Answer d is incorrect because this is the IP address of the Windows 98 computer not the Windows XP computer 7 You are having trouble getting an application to work properly on your Windows XP Professional computer You know of another person i
114. Windows XP from the command prompt The computer must still be bootable under Windows XP for this approach to work MCP Exam 70270 Preparation doc 270 Assigning Changing or Removing Drive Letters To assign change or remove a drive letter perform the following steps 1 Open Disk Management 2 Right click a partition logical drive or volume and then click Change Drive Letter And Paths 3 Do one of the following e To assign a drive letter Click Add select the drive letter you want to use and then click OK e To change a drive letter Click Change select the drive letter you want to use and then click OK e To remove a drive letter Click Remove either click Yes to confirm the removal or click No to cancel the removal and then click OK An old gotcha still applies Be careful when assigning drive letters because many MS DOS and Windows applications refer to a specific drive letter especially during installation For example the PATH environment variable shows specific drive letters in conjunction with program names You can use up to 24 drive letters from C through Z Drive letters A and B are reserved for floppy disk drives However if you do not have a floppy disk drive B you can use the letter B for a network drive You cannot change the drive letter of the system volume or boot volume An error message may appear when you attempt to assign a letter to a volume CD ROM drive or other removable media
115. Windows XP environment Settings Enables the user to set the screen resolution and the color quality for the display adapter If you encounter problems with the video display you can click the Troubleshoot button to invoke the Video Display Troubleshooter If Windows XP doesn t detect a Plug and Play monitor it assigns default color depths and resolutions By clicking the Advanced button you can adjust several properties for the video display and the display adapter such as whether to apply new settings without restarting adjusting the display mode changing the refresh rate altering hardware acceleration and working with color management Mouse Applet The Mouse applet adjusts for left handed or right handed use It also adjusts the double click speed and the rate at which the cursor moves across the screen Sounds and Audio Devices Applet The Sounds and Audio Devices applet controls sounds for startup logoff and other Windows events It also controls what WAV files are used for critical error alerts and general alerts You can modify the default devices for voice playback and voice recording as well as work with the properties of various sound and audio hardware that may be installed on a particular PC MCP Exam 70270 Preparation doc 169 Scanners and Cameras Applet The Scanners and Cameras applet enables you to manage scanned and photographic images It also can help you to install a digital camera scanner or other image dev
116. Ws Answer d is incorrect because the Windows XP Backup program does not support backing up directly to DVD Rs nor can you natively write to DVD RAM media 3 Bob has a Windows XP Professional computer that has applications processing data 24 hours a day 7 days a week He upgraded the computer to Windows XP from Windows 98 and he has left the file systems intact He knows he needs to have frequent regular backups but he s concerned about not being able to back up several important data files that are always open and critical application files that are always locked What can Bob do to back up his important data and application files a Turn off 50 percent of the important applications and close their data files during nonpeak intervals and perform a backup of those files turn off the other 50 percent at different nonpeak intervals and perform a second backup of those files b Rely on Windows XP s Volume Shadow Copy Technology to enable the Windows XP Backup program to back up those open data files and locked application files c Let the Windows XP Backup program skip the open and locked files for now those files may be closed and unlocked during the next scheduled backup d Use the Inuse exe utility from the Windows 2000 Professional Resource Kit to unlock any locked files and then perform a backup A3 Answer a is correct Volume Shadow Copy Technology VSCT is not available for data or application files stored on FAT or FAT32
117. XP systems including the Registry Moreover System State data can only be backed up on a local computer You cannot back up the System State remotely over the network to another Windows XP computer Backup Types Several different types of backup jobs enable you to create a backup procedure that maximizes efficiency minimizes media used and minimizes performance impact Each file has an archive attribute also called a backup marker When a file is changed the archive attribute or marker is set indicating that the file has been modified since the last backup This marker is the focus of the different backup types because some types look for the marker others do not Some types clear the marker others do not Table 1 clarifies the different backup types Note The Windows XP Backup program skips backing up and restoring certain files by default These files include temporary files such as Pagefile sys Hiberfil sys Win386 swp 386spart par Backup log and Restore log Files that are open or locked during the backup procedure are also skipped unless they reside on a local NTFS volumes and enough disk space is available on a local NTFS drive volume for a volume shadow copy to be created Volume shadow copies are covered later in this chapter NTFS File System Offers The Change Journal Attribute The Change Journal is a new and faster method for keeping track of changes under the NTFS 5 file system used in Windows XP and Windows 2000
118. You would check the box if you wanted others to access the Internet through your computer Answer d is incorrect because it wouldn t affect whether the user could access the Internet You have several clients that have installed Windows XP Professional on their corporate workstations One of your clients calls requesting that you connect to his machine using Remote Desktop You have a direct Internet connection and Internet Connection Firewall ICF enabled You attempt to connect to your client s network via VPN You MCP Exam 70270 Preparation doc 382 A4 A5 have problems connecting to the client s machine What is the first thing you should do A Disable Internet Connection Firewall on the VPN connection B Ensure that Internet Connection Firewall on the VPN connection is enabled C Check the Dial Another Connection First box on the General tab of the VPN Properties dialog box D Disable your direct Internet connection and dial in to your client s network Answer a is correct You should not enable ICF on VPN connections because it will interfere with the operation of file sharing and other VPN functions Answer b is incorrect because by default the option is already enabled Answer c is incorrect because you would have the same problems with ICF Although it seems that answer d would work nothing in the scenario suggests that it is possible to dial in to the network You have 250 Windows XP Professional computers in va
119. a basic volume to dynamic by upgrading the basic disk to a dynamic disk you can install Windows XP on that volume but you cannot extend the volume The limitation on extending volumes occurs because the boot volume which contains the Windows XP files cannot be part of a spanned volume If you extend a simple volume that contains a partition table that is a volume that was upgraded from basic to dynamic Windows XP Setup recognizes the spanned volume but cannot install to it because the boot volume cannot be part of a spanned volume You can extend volumes that you created only after you convert the disk to a dynamic disk You can extend volumes and make changes to disk configuration in most cases without rebooting your computer If you want to take advantage of these features in Windows XP you must change or upgrade a disk from basic to dynamic status as covered earlier in this chapter Use dynamic disks if your computer runs only Windows XP and you want to create more than four volumes per disk or want to extend stripe or span volumes onto one or more dynamic disks MCP Exam 70270 Preparation doc 261 When You Are Upgrading from Windows NT 4 with Volume Sets on a Basic Disk If you need to upgrade a computer running Windows NT 4 that has hard drives configured as volume sets or stripe sets you must first back up all the data stored on each volume set or stripe set because Windows XP Professional does not support volume sets or stri
120. able offline 6 From the Sharing tab select the Caching button MCP Exam 70270 Preparation doc 162 7 Select the Allow Caching Of Files In This Shared Folder option this option is selected by default 8 Select one of the three options from the Settings drop down list as outlined previously and then click OK The Offline Files feature cannot be turned on if Fast User Switching is enabled as shown previously in Figure 2 You must go to User Accounts in the Windows XP Control Panel and choose the option Change The Way Users Log On Or Off Making Files and Folders Available Offline By default a Windows XP Professional computer is configured for offline file and folder usage Use the following steps to make a file or folder available offline 1 Connect to a share point on a domain or workgroup file server Right click a file that you want to use offline and select Make Available Offline see Figure 4 Figure 4 The right click menu for a file displays the Make Available Offline option when Offline File Caching is enabled Fie Edt View Favortes Tools Help P Search Folders fi JPE A Name Sze Type Date Modified File and Folder Tasks 4 Fie Folder 9 21 2001 8 50 AM Open Rename this folder Explore P Move this folder Search K Publish this folder to the Web Send To C Emal this Folder s fies Cut XK Delete this folder Copy Other Places Delete Rename d My Coenputer J My Documents 2
121. access the log of invitations through the XP interface Just go to Start Help And Support and select the View Invitation Status option This will display the different invitations that you have sent or created When the assistant receives the invitation they will just click to accept the invitation and connect to your computer After they connect they will be able to view your desktop and chat with you in realtime Both the assistant and the computer being controlled must be running Windows XP Professional If the computer being controlled has been configured to allow remote control then the assistant will be able to use their mouse and keyboard to control the remote desktop The remote control requires permission so it is not an automatic feature Another feature that is possible after the connection is made is audio help If both parties have full duplex sound cards or sound through the USB port speakers and a microphone they will be able to communicate verbally to help resolve any issues To stop Remote Assistance you can click the Stop option on the chat window Another option is to press the Esc key which will also put an end to the current session If you want to just disconnect the current session but keep the Remote Assistant window open you can select the Disconnect option in the chat window Some final comments about Remote Assistant start with security Not all firewalls will allow this form of communication If it is necessary t
122. all the test center Multiple Choice Question Format Some exam questions require you to select a single answer whereas others ask you to select multiple correct answers The following multiple choice question requires you to select a single correct answer Following the question is a brief summary of each potential answer and why it is either right or wrong Question 1 You have three domains connected to an empty root domain under one contiguous domain name tutu com This organization is formed into a forest arrangement with a secondary domain called frog com How many Schema Masters exist for this arrangement a 1 2p APON Answer The correct answer is a because only one Schema Master is necessary for a forest arrangement The other answers b c and d are misleading because they try to make you believe that Schema Masters might be in each domain or perhaps that you should have one for each contiguous namespace domain This sample question format corresponds closely to the Microsoft certification exam format the only difference on the exam is that questions are not followed by answer keys To select an answer you would position the cursor over the MCP Exam 70270 Preparation doc 13 radio button next to the answer Then click the mouse button to select the answer Let s examine a question where one or more answers are possible This type of question provides checkboxes rather than radio buttons for marking all appro
123. allow administrators to have very granular control over exactly what types of access users can have over files and folders Advanced permissions are somewhat hidden from view They allow administrators to fine tune ACE security settings The Security tab in a file or folder s Properties dialog box notifies you when advanced permissions are present Click the Advanced button to view add modify or remove advanced permissions At the bottom of the Security tab Windows XP displays a notification just to the right of the Advanced button that says For Special Permissions Or For Advanced Settings Click Advanced MCP Exam 70270 Preparation doc 84 After you click Advanced you see the Advanced Security Settings dialog box which shows each access control setting that has been applied per user and per group To view individual advanced permission entries click one of the users or groups listed and then click the Edit button The Permission Entry dialog box shown in Figure 3 appears It gives administrators very fine control over the ability of individual users and groups to manipulate data and program files that are stored on NTFS drive volume Table 5 shows the list of advanced NTFS permissions available under Windows XP Figure 3 The Permission Entry dialog box for the Samples NTFS folder Permission Entry for Samples Object Name Administrators DELLXP Administrators Apply onto Aaea e T a a a E ae E Permissions Allow
124. am The System Configuration Utility is divided into six tabs as shown in Figure 10 e General Enables you to work with system startup settings the Boot ini file and the System Restore feature and enables you to expand Windows XP setup files from compressed cabinet files e SYSTEM INI Enables you to directly edit the System ini file instead of using Notepad or the SYSEDIT utility e WIN IN Enables you to directly edit the Win ini file instead of using Notepad or the SYSEDIT utility e BOOT IN Enables you to manipulate the system s Boot ini file but does not allow you to actually edit the line item entries You can change the default operating system modify the Timeout setting verify all boot paths and select from several predefined boot options such as SAFEBOOT NOGUIBOOT BOOTLOG BASEVIDEO standard VGA and SOS display system device drivers as they load into memory You also have the ability to set advanced options such as MAXMEM NUMPROC PCILOCK and DEBUG see Figure 11 MCP Exam 70270 Preparation doc 174 General SYSTEM INI WIN INE BOOT INI LServices Startup boot loader timeout 30 Sanari a raiz aaae s DN emma mails Ove Spat VOTES Racroaclt Wockones 2100 Adverced Server ifastdetect Check All Boot Paths Boot Options OminimaL OnetworK ODSREPAIR Benet MINIMAL ALTERNATESHELL Cl mocumBooT _ BOOTLOG Cl BASEVIDEO Ces e Services Displays a listing of all instal
125. am 70270 Preparation doc 170 Windows XP follows in the footsteps of Windows 2000 by making it much easier to arrange and customize the Start menu items than under previous versions of Windows You can very easily sort menu items by dragging and dropping them You can drag a menu item from one submenu to another Also you can open pop up menus by right clicking them Windows XP automatically adjusts menu items as well Windows XP does not attempt to clean up the Start menu by displaying only those items that are used most frequently as is the case with Windows 2000 However if you select Classic Start Menu then Use Personalized Menus is enabled by default and items on the Start menu that are not used often are hidden You can turn off this feature quite easily Right click a blank area on the Start menu and select the Properties option Doing so displays the Start Menu tab of the Taskbar and Start Menu Properties dialog box Click the Customize button for the Classic Start Menu option to display the Customize Classic Start Menu dialog box Deselect the option for Use Personalized Menus You can find even more customization options when you click the Customize button for either the Start Menu or the Classic Start Menu on the Start Menu tab of the Taskbar and Start Menu Properties dialog box as shown in Figure 9 On the Advanced tab of the Customize Start Menu dialog box available options include having submenus open when you pause the mouse pointer
126. ame disk group Each disk in a disk group stores replicas of the same configuration data This configuration data is stored in a 1MB region at the end of each dynamic disk Dynamic disks can contain any of the types of volumes discussed later in this chapter You can extend a volume on a dynamic disk Dynamic disks can contain an unlimited number of volumes so you are not restricted to four volumes per disk as you are with basic disks Regardless of the type of file system employed only computers running Windows XP Windows 2000 or Windows NET Server can directly access dynamic volumes on hard drives that are physically connected to the computer However computers that are not running Windows XP Windows 2000 or Windows NET Server can access the dynamic volumes remotely when they are connected to shared folders over the network Dynamic disks are not available under Windows XP Home edition Comparing Basic Disks to Dynamic Disks When you install Windows XP the system automatically configures the existing hard disks as basic disks Windows XP does not support dynamic disks on mobile PCs laptops or notebooks and if you re using an older desktop machine that is not Advanced Configuration and Power Interface ACPI compliant the Upgrade To Dynamic Disk option discussed later in this chapter is not available Dynamic disks have some additional limitations You can install Windows XP on a dynamic volume that you converted from a basic d
127. an be accessed by opening the Group Policy snap in within a Microsoft Management Console and then selecting the Local Computer option You can configure security related settings using the Local Security Policy which contains the Security Settings snap in Simply choose Start Administrative Tools Local Security Policy Each of the nodes in the Local Security Policy Console is a security area or scope within which you will find dozens of security related settings The Local Security Policy is nothing more than a subset of the Local Group Policy So when you open the Local Group Policy you are also accessing the Local Security Policy Managing Local Group Policies The Local Group Policy and the Local Security Policy tools are most helpful on stand alone systems and laptops that roam away from the network environment The Local Group Policy controls the configuration of the local computer and user These local settings will override any other settings that might be made to the local system The policy based settings will apply to a computer at startup and to a user at logon Also these policy settings are applied at a refresh interval which does not require a reboot or logging off In a workgroup environment you will need to access each computer and make the desired settings on each computer individually Methods exist to make this more efficient by using security templates but the process is still a manual one that requires decentralized adm
128. and 1 Figure 5 The Add Counters dialog box from the Performance Console enables you to monitor various gauges of a system s poromance J Fle Aton Wew Favortes Window Hep E Console Roce in 10 Qu EEEL Osa Performance Logs and Aerts Ahl Caetera Pix X Processor Time is the parcertsge of elapsed time that the processor spends to execute 8 non ide thread is calculated by measunng the uration of the ide thread is active in the sample rterval and s ttracting that time from interval duration Each processor has an ide thread that consumes cycles when no other threads are ready to nun This courteris y After you select a computer object counter and if necessary instance click Add to add the counter to your System Monitor view By right clicking the view the right hand pane of the Performance Console and choosing Properties you can alter all properties of the System Monitor view including the display color of counters the scale and sample rate and the format of the monitor s display which can be in a graph default a histogram bar chart or a report numeric display format Performance Logs and Alerts The Performance Logs and Alerts snap in also part of the Performance Console enables you to collect and save performance data as well as MCP Exam 70270 Preparation doc 348 proactively configure a system to send notifications based on various performance thresholds Configuring Alerts
129. and Line As mentioned earlier in this chapter you can use the net use command to connect to network drive shares You can also use this command to connect to remote printers from a command prompt window The syntax is as follows net use Iptx print_server_name printer_share_name Printer ports Ipt1 lpt2 and Ipt3 are represented by Iptx The net use command is the only way to connect client computers that are running MS DOS to network printers Managing Printers and Print Jobs From the Printers And Faxes folder you manage print jobs by double clicking the printer icon that you want to work with After you have opened the printer s print queue window you can pause printing or cancel all documents from the Printer menu You can also take the printer offline from the Printer menu If you select an individual print job that is listed you can Pause Resume Start or Cancel that job by selecting one of these options from the Documents menu The print queue window itself displays the document name the status the document owner the number of pages for each print job the size of the job the time and date that the job was submitted and the port used MCP Exam 70270 Preparation doc 113 Members of the Administrators group and members of the Power Users group have permissions to manage print jobs that are listed in the print queue At the time that users print one or more documents they get the built in security principal Creator Owner app
130. anges have occurred the locally cached copied is used before the network version of the offline file Accessing Offline Files and Folders To access offline files use My Network Places however that is not where the files are actually kept Offline files are kept in SystemRoot CSC CSC is hidden by default This directory contains a database of the offline files You cannot view or edit individual files from this location However if the CSC directory gets quite large and if you use offline files frequently it is advisable to move this directory from the system partition to a different partition or drive However you can t move this directory using Windows Explorer To move the CSC directory from one partition to another use the Windows XP Resource Kit utility named Cachemov exe You may also use the Cachemov exe tool from the Windows 2000 Resource Kit as an alternative MCP Exam 70270 Preparation doc 166 Managing Offline Files and Folders To manage offline files open a Windows Explorer window and select Tools Folder Options and then select the Offline Files tab The key options for managing offline folders are turn off the Offline Files feature delete offline files and view all the offline files in one window You can also use a sliding bar to control the amount of disk space made available for files that have been automatically cached to the local drive The default disk space made available for automatically cached files is 10
131. anizations to leverage their investment in expensive removable storage equipment by having multiple removable storage applications share these devices Windows XP Removable storage implements a set of APIs that enable third party software solutions to catalog all removable media such as DVDs tapes and optical discs Both offline shelved as well as online housed in a library media can be cataloged Removable storage organizes media using media pools These media pools control access to the removable media categorize the media according to each type of use and permit the media to be shared by applications Removable storage tracks the application programs that share the removable media Removable storage is logically structured into five basic components media units media libraries media pools work queue items and operator requests You manage Removable storage from the MMC snap in named strangely enough Removable storage Managing Tape Devices Windows XP provides comprehensive control of tape devices You can back up or restore from tape devices enable or disable specific tapes in your library insert and eject media and mount and dismount media Tape devices are not the only media that the Windows Backup program supports You can back up to network shares to local hard drives or to removable media such as Zip disks or Jaz disks Backing up to tape is still very popular however despite some of its drawbacks The Windows XP Ba
132. applications for small businesses The developers computers run Windows XP Professional and Internet Information Services IIS The company has 150 developers The developers need to have stable environments to work in to ensure that they are productive During the installation process of Windows XP Professional the OS is installed service packs are applied applications are installed and any Microsoft hotfixes or updates are installed However sometimes additional hotfixes and updates need to be applied to support security and functionality of the development environment The developer must automatically be made aware of any update and then must be in control of the update being downloaded and installed Which option should you configure a Windows Update b Automatic Updates c Dynamic Update MCP Exam 70270 Preparation doc 67 d Configure a server and share with the contents of the updates and use the dushare command on the client Answer Answer b is corrrect When a user needs to be automatically updated about new hotfixes and updates the Automatic Updates option needs to be configured This tool can be set up to trigger when there is an update to then allow the user to download and also install the update This option also has settings that can always download the updates but then prompt for installation and of course completely disable the automatic updates If you disable the automatic updates you will need to manuall
133. ar configuration setting the last setting applied controls Therefore the policies that are closest to the computer the policies linked to its OU for example take precedence if a conflict arises The same application of policies applies to a user at logon local policy site policy domain policy and OU policy User Rights Assignment User rights also called privileges enable a user or group to perform system functions such as changing the system time backing up or restoring files and formatting a disk volume Some rights are assigned to Built in groups For example the Administrators group can format a disk volume You cannot deny that right to the members of the Administrators group nor can you assign that right to a user or group you create Other rights are assignable For example the right to back up files and folders is given by default to Administrators and Backup Operators but you can remove the right for those groups or assign the right to other users or groups You can modify the rights that are visible in the Local Security Policy Console You do not see the hard wired rights in this interface User rights because they are system oriented override object permissions when the two are in conflict with each other For example a user may be denied permission to read a folder on a disk volume However if the user has been given the privilege to back up files and folders a backup of the folder succeeds even though the us
134. aration doc 101 Figure 14 The Auditing Entry dialog box Auditing Entry for Finances Object Name Power Users DELLXP Power Users Apply onto This folder subfolders and files wj Successful Failed raverse Fo List Folder Read Data Read Attributes Read Extended Attributes Create Files Write Data Create Folders Append Data Write Attributes Write Extended Attributes Delete Subfolders and Files Delete SiN ONNSOOO Read Permissions Change Permissions Take Ownership g Apply these auditing entries to objects Clear All and or containers within this container only L O oO oO d O a 0O oO oO al O O 8 Select each access event that you want to track by marking each event s associated Successful checkbox Failed checkbox or both checkboxes 9 By default audit settings apply to the current folder subfolders and files You can change this behavior by clicking the Apply Onto drop down list 10 Click OK for the Auditing Entry dialog box 11 Click OK for the Advanced Security Settings dialog box 12 Click OK for the object s Properties dialog box After you have properly set up auditing all events that meet your auditing criteria are logged into the system s Event Viewer Security Log You access the Event Viewer Console from Start Administrative Tools Event Viewer or by right clicking the My Computer desktop icon and selecting Manage You ll find the Event Viewer beneath the System Tools folder
135. aration doc 367 Some of the major differences between L2TP and PPTP include the following L2TP exploits IPSec for encryption services PPTP uses the encryption functions of PPP L2TP offers support for tunnel authentication PPTP does not support tunnel authentication If you implement IPSec tunneling in conjunction with L2TP or PPTP L2TP tunnel authentication isn t needed because this will be handled by the IPSec tunnel RADIUS Remote Authentication Dial In User Service RADIUS offers accounting services and centralized authentication functions for distributed dial up connections Windows XP Professional can take on the role of a RADIUS server or a RADIUS client or it can assume the roles of both A RADIUS client is often used as a remote access server for an Internet service provider ISP The RADIUS client forwards authentication requests to a RADIUS server You configure RADIUS client settings from the Security tab of the remote access server s Properties dialog box RADIUS servers validate requests from RADIUS clients For authentication Windows 2000 provides Internet Authentication Services IAS as an optional Windows component that you can add during installation or through the Add Remove Programs icon in the Control Panel RADIUS servers maintain RADIUS accounting data from RADIUS clients in associated log files BAP Bandwidth Allocation Protocol BAP works in conjunction with the Bandwidth Allocation Control Protocol BA
136. ard Windows XP also supports the Joliet standard which is an extension to the ISO 9660 standard Joliet supports Unicode characters and supports a folder hierarchy extending deeper than eight levels of subfolders Windows XP also offers integrated support for writing data directly onto CD R and CD RW media without requiring any third party CD burning software such as Roxio s CD Creator by Adaptec A DVD drive needs either a hardware or software decoder to play movies on your Windows XP computer even if you want to use the built in Windows Media Player as the preferred playback device Of course the computer also requires a Windows XP compatible sound card and video display card with their respective drivers to play multimedia DVD titles Your decoder must be Windows XP compliant to play movies after you install Windows XP if you upgrade from a previous Windows version You do not need a decoder for reading data DVDs The Universal Disk Format UDF UDF is based on the ISO 13346 standard and Windows XP uses this standard for reading removable media such as DVDs CD ROMs CD Rs CD RWs write once read many WORM discs and magneto optical MO discs Windows XP supports UDF versions 1 02 1 50 2 0 and 2 01 through the Udfs sys driver You can format DVD RAM discs with the FAT32 file system under Windows XP however you cannot natively format DVD RAM discs using NTFS nor can you write directly to UDF volumes including DVD RAM discs witho
137. are tab and then click the Device Manager button Expand the Processors node and note the type of support you currently have Right click the icon for the currently installed processor and select Update Driver to launch the Update Hardware Wizard Alternatively you can right click the icon for the currently installed processor select Properties and then click the Driver tab as shown in Figure 6 Next click the Update Driver button from this dialog box and you will also launch the Update Hardware Wizard Follow the on screen instructions to load the proper Hardware Abstraction Layer HAL for the CPU that you have added Figure 6 The Processor Properties dialog box enables you to add support for a second processor by clicking the Update Driver button Pentium r ill Processor Properties x Driver File Details Ly Inter Pertiurr rJll Processor L Intai Pertium rjil Processor Dirrer files Driver Provider Microsoft SI FAWINDOWS System32 DRIVERS p2 sys Driver Date 7 1 2001 Driver Version 5 1 2535 0 Digtal Signer Microsoft Windows XP Publisher Duiver Detads To view detalis about the diver fies S Microsoft Corporation Update Durver To update the driver for this device 5 1 2600 0 petent 010817 1148 Rol Beck Dever lithe device fais alter updating the driver sol Miorot Corporation All rights reserved c beck tothe previounty installed chives Microsoft Windows XP Publishes Uninstal To uninatal the diver Advanced m
138. ark the question for later review you re taking a fixed length or short form test If the total number of questions is 25 to 30 it s a short form test if more than 30 it s a fixed length test Adaptive test questions can be visited and answered only once and they include no such checkbox The Case Study Exam Strategy Most test takers find that the case study type of test used for the design exams 70 219 70 220 and 70 221 is the most difficult to master When it comes to studying for a case study test your best bet is to approach each case study as a standalone test The biggest challenge you ll encounter is that you ll feel that you won t have enough time to get through all of the cases that are presented Each case provides a lot of material that you ll need to read and study before you can effectively answer the questions that follow The trick to taking a case study exam is to first scan the case study to get the highlights Make sure you read the overview section of the case so that you understand the context of the problem at hand Then quickly move on and scan the questions MCP Exam 70270 Preparation doc 23 As you are scanning the questions make mental notes to yourself so that you ll remember which sections of the case study you should focus on Some case studies may provide a fair amount of extra information that you don t really need to answer the questions The goal with this scanning approach is to avoid having to stud
139. assign an Alias name for the Web Folder specify the permissions for the Web MCP Exam 70270 Preparation doc 108 Folder and click OK to create the Web Folder on the default Web site The WebDAV Web Distributed Authoring and Versioning protocol acts as a redirector that enables users to open and save documents via Hypertext Transport Protocol HTTP port 80 As long as the Web server host computer is running IIS 5 or above and as long as an application program supports saving and retrieving documents via HTTP you can take advantage of WebDAV To use WebDAV simply type in the URL path plus the document name in the Open or Save As dialog box for an application Users can encrypt files stored in Web Folders without fear of compromising the data whenever the files are transmitted across the network wire Encrypted files are always encrypted and decrypted on the local computer before being sent over the network Encrypted files are transferred in cybertext over the network even if encrypted files get intercepted as they are sent over a network connection the encrypted files cannot be interpreted MCP Exam 70270 Preparation doc 109 Troubleshooting Internet Information Services If users are experiencing problems connecting to the default Web site to the default FTP site or to a new virtual directory that you have created you can follow the steps listed in the next few sections to attempt to rectify the problem s Internet Web Site To
140. at the difficulties are minimized is to make the device drivers that are not included on the Windows XP Professional CD ROM available through Dynamic Update Dynamic Update cannot overwrite any device drivers that are located on the OS CD ROM by default It only allows for new device drivers If a new device driver is available from Microsoft it can be obtained after the installation by using the Windows Update feature Two types of files are downloaded by Dynamic Update e Replacement files Files that are typically DLLs that replace the errant files located on the CD ROM These replacement files are flagged to replace files that need critical fixes or updates e Device drivers These files are new device drivers that were not available on the CD ROM Any updates to existing device drivers are not available through Dynamic Update For clients to take advantage of Dynamic Update the following criteria must be met e Aconnection must exist to the location of the files and drivers This can be either the Internet or a network share containing the updates which were downloaded by a network administrator earlier e The client needs to be running Internet Explorer 4 1 or later versions of the following two files Winenet dll and Shlwapi dll During a manual installation the user will be prompted to connect to the Internet and download the updates from the Microsoft Web site In an unattended installation Dynamic Updates are enabled by defa
141. at you must analyze to enable you to answer questions related to the case studies Such exams include One or more case studies tabbed topic areas each of which is followed by 4 to 10 questions The question types for design exams and for Core Four Windows 2000 exams are multiple choice build list and reorder create a tree drag and connect and select and place Depending on the test topic some exams are totally case based whereas others are not Other Microsoft exams employ advanced testing capabilities that might not be immediately apparent Although the questions that appear are primarily multiple choice the logic that drives them is more complex than older Microsoft tests which use a fixed sequence of questions called a fixed length test Some questions employ a sophisticated user interface which Microsoft calls a simulation to test your knowledge of the software and systems under consideration in a more or less live environment that behaves just like the original The Testing Innovations link at www microsoft com trainingandservices default asp PagelD mcp includes a downloadable practice simulation For some exams Microsoft has turned to a well known technique called adaptive testing to establish a test taker s level of knowledge and product MCP Exam 70270 Preparation doc 21 competence Adaptive exams look the same as fixed length exams but they discover the level of difficulty at which an individual test taker can corre
142. ate the account even with the same name it will not have the same permissions privileges or group memberships you will have to regenerate them For that reason and to facilitate auditing it is recommended that you disable not delete any user that leaves an organization MCP Exam 70270 Preparation doc 129 Using the User Accounts Tool Another tool for administering local user accounts is the User Accounts tool in Control Panel shown in Figure 3 This tool enables you to create and remove user accounts as well as specify specific configurations for those users It is wizard driven and is useful for novice administrators and home users Figure 3 User Accounts tool for administering local users User Accounts Users Advanced y Use the list below to grant or deny users access to your E computer and to change passwords and other settings Users for this computer User Name Domain Group E SiAdministrator XPPRO1 Administrators Wi danb XPPROL Users Administ Fiderek DANDY Power Users W derek xXPPRO1 Administrators Password for Administrator _ 4 To change the password for Administrator click Reset Password Reset Password The User Account tool changes functions as the computer joins a domain from a workgroup These changes are to control the access to the computer from other domain users The following is a list of configurations that can be completed after the computer has become a membe
143. atically be logged off when you unlock the work computer Remote Desktop Web Connection Another feature of Remote Desktop is the ability to allow users to connect through a Web browser This is a feature that was first introduced with Terminal Services and is ported over to Remote Desktop To get the Remote Desktop Web service installed you need to follow these steps 1 Open Add Or Remove Programs in Control Panel 2 Select Add Remove Windows Components 3 Select Internet Information Services IIS as well as the Details button for this option 4 After selecting World Wide Web Service in the IIS Details screen click the Details button for this option MCP Exam 70270 Preparation doc 313 5 Select the Remote Desktop Web Connection option and click OK for all of the Windows that you have opened and then click Next when you get to the Windows Components Wizard screen This will install the Remote Desktop capabilities which are really a portion of IIS If you go into the IIS management tool you will see a virtual directory named tsweb that supports the Remote Desktop functionality The connecting computer only needs to have Microsoft Internet Explorer 4 or higher To make the connection just open the browser and type in the following URL http lt computername gt tsweb This will prompt the user for the computer that you want to connect to and then the proper credentials for authentication Figure 6 shows the IE interface
144. ation doc 133 Managing Domain User Accounts Domain user accounts are managed with the Active Directory Users and Computers snap in To access it choose Start Settings Control Panel Administrative Tools Active Directory Users And Computers When you open the tool you connect to an available domain controller If you want to specify which domain controller or domain you wish to modify right click the Active Directory Users And Computers node and choose Connect To Domain or Connect To Domain Controller Unlike the local security database which is a flat list of users and groups Active Directory has containers and OUs which collect database objects such as users computers printers and other OUs Therefore to manage domain user accounts in Windows 2000 you need to access the correct container or OU that houses your user object Creating Domain User Accounts You create domain user accounts by right clicking the container or OU that will contain the user account and then selecting New User A wizard prompts you for basic account properties including the following e First name and last name Full name by default the combination of the first and last names User logon name and User Principal Name UPN suffix User logon name pre Windows 2000 Password Creating Template User Accounts When you expect to create multiple user objects with similar properties you can create a template account that when copied initiates the new acc
145. ature such as the paging file data files stored in My Documents Favorites temporary folders BMP JPG and EPS image files and any data files not listed in FileList xml including file names ending in doc xls mdb and pst Restore Points System Restore automatically creates restore points based on several types of events You can also manually create your own restore points The initial restore point is created when you start your Windows XP system for the very first time either after performing an upgrade installation or a brand new installation After that Windows XP automatically creates its own restore points every 24 hours or every 24 hours that the computer remains powered on If the machine is powered off for more than 24 hours a restore point is created the next time that the computer is turned on Restore points are automatically created whenever you update the system perform a recovery from the Windows XP Backup utility install a new application restore the system from a restore point or install an unsigned device driver To change the amount of disk storage allocated to System Restore right click the My Computer icon not a shortcut click Properties and click the System Restore tab System Restore is enabled by default To turn off this feature click the Turn Off System Restore On All Drives checkbox To increase or decrease the amount of disk space used for restore points select a drive letter from the Availabl
146. ave been granted administrator status may enable or disable this feature When Fast User Switching is turned on users may click Start Log Off and they are presented with two options Switch User or Log Off If you click Switch User any applications that are currently running remain running and you are returned to the Windows XP Welcome Screen At that point another user may log on to the system to work Multiple users can log on to the computer one at a time The application programs that were running when each user is switched out continue to execute while another user works on the computer To enable or disable Fast User Switching click Start Control Panel User Accounts and select the option Change The Way Users Log On Or Off You must enable Use The Welcome Screen if you want to turn on Fast User Switching MCP Exam 70270 Preparation doc 159 Using Offline Files Windows XP offers an improved Offline Files feature as compared to Windows 2000 Also known as Client side Caching CSC Offline Files under Windows XP addresses several file access problems that plagued Windows NT such as if the file server is down and users need to access files on the file server or when users are not connected to the network and they cannot get access to the files they may need By using Offline Files users can select files on a network file server and mark them for offline usage This means that users now have a cached copy of the file on their local comp
147. btain these files dushare pathname Specifies the shared folder where the installation will point during the dynamic update portion of installation These switches are new to Windows XP and are emphasized for installations Memorize them so you can distinguish between the right and wrong answers if you get these on your exam MCP Exam 70270 Preparation doc 41 You use these switches in combination to launch an unattended installation of Windows XP Professional using Setup Manager To launch an unattended install follow these steps 1 Use a network boot disk to connect the target computer to the network 2 Next use the net use command to map to the distribution share point using an available drive letter 3 Switch the command prompt to the mapped drive letter such as and use the following as an example to launch an unattended install for a computer called computer IAWINNT EXE s 1 i386 u unattend txt udf computer1 unattend udb Investigate all the options that are available with the Setup Manager by running through the file creation process several times while choosing different options each time to see how the results vary Remember that you can use this Setup Manager utility to also create answer files for System Preparation Tool installs and RIS installs which are both discussed in this chapter MCP Exam 70270 Preparation doc 42 Creating and Deploying a Windows 2000 XP Image Using the System Preparation Tool T
148. c 369 Encryption Encryption is the technology of locking down data or network traffic with digital keys These keys are only available to those who are transferring the information Multiple levels of encryption exist and with each increase in a level of encryption you will have a hit to performance It simply takes longer to create and decode higher encryption By default dial up connections have the encryption level set to optional and VPN connections have the encryption level set to required In these instances a dial up session does not have to use encryption whereas VPN sessions do Of course the main reason for this is the lack of security that VPNs endure because they are traveling across the Internet You can alter this default behavior but in the case of the VPN it is always best to keep the security at this level or higher The following are the four different encryption levels that you can set on any remote network connection as shown in Figure 2 e No Encryption Allowed This does not allow the dial up or VPN client to connect with any form of encryption Not allowing any encryption will be rare but in the case of a very slow connection this can be useful e Optional Encryption This will use encryption if the remote access server is suggesting that it be used or requiring that encryption be used e Require Encryption This will require that the remote access client use encryption with the remote access server
149. c Updates notification settings follow these steps 1 Log on the computer as the administrator or as a member of the Administrators group 2 Right click the My Computer icon from the Start menu and select Properties 3 Click the Automatic Updates tab 4 Select from one of three available Notification Settings buttons as shown in Figure 1 e Download The Updates Automatically And Notify Me When They Are Ready To Be Installed default e Notify Me Before Downloading Any Updates And Notify Me Again Before Installing Them On My Computer e Turn Off Automatic Updating Want To Update My Computer Manually MCP Exam 70270 Preparation doc 213 Figure 1 The Automatic Updates tab of the System Properties dialog box General Computer Name Hardware Advanced System Restore li i Remote How do you want to be notified when updates are available for your computer Notification Settings Download the updates automatically and notify me when they are ready to be installed O Notify me before downloading any updates and notify me again before installing them on my computer O Tum off automatic updating want to update my computer manually Previous Updates 5 Click OK to accept the new settings After the successful installation of certain updated components Windows XP may prompt you to restart the computer As a best practice you should always restart the machine immediately as instructed Failure to follow these ins
150. can connect to printers that are attached to Windows XP Windows 2000 or Windows NET Server print servers by using a Web browser and a URL instead of connecting via the GUI or via the command line using a UNC path IPP works over a corporate intranet or through an Internet connection IPP gives users the ability to print over an Internet connection IIS version 5 or later must be running on the print server computer You can enter one of two available URLs into your Web browser http print_server_name printers This address connects you to the Web page for the Printers And Faxes folder on the Windows XP print server computer however fax devices are not displayed in the browser window http print_server_name printer_share_name This address connects you to the Web page for the print queue folder for the printer that you specify as shown in Figure 20 Figure 20 The Web browser interface for a network printer that uses IPP 2 HPColorLaserJet5 on 7800xp 1 Microsoft Internet Explorer Fie Edt Vew Favedtes Tools Heb ix a Search Favortes A Weds 4 E hitp 7800 1 painters pp _0004 asp ZeprrtersHPCOLORLIS HPColorLaserJetS on 7800xp1 Printer Queue Ready Waiting Time 0 Pending Documents 0 Status Owner Pages Size Submitted Document List Properties All Printers There is no document in the printer queue PRINTER ACTIONS Pa se Resume noel All ments DOCUMENT ACTIONS MCP Exam 70270 Preparation doc 117
151. cannot find the new USB device What is the most likely cause of this problem A The mouse is not compatible with Plug and Play or Universal Plug and Play B The USB hub that the mouse is plugged into is connected as the sixth hub in a row of hubs C The 12 foot USB cable used for the mouse is longer than the supported USB cable length D The USB mouse requires a self powered hub instead of a bus powered hub A3 Answer b is correct No more than five external hubs may be used in one physical chain of hubs Answer a is incorrect because all USB devices are PnP compatible Answer c is incorrect because the maximum supported cable length between a USB device and a USB hub or port is 5 meters 12 feet is less than 5 meters Answer d is incorrect because high power consumption devices like hard drives cameras and scanners often require self powered hubs generally devices like keyboards and mice do not 4 Which of the following five methods can you employ to fix a severe video driver problem where the display is no longer visible Check all correct answers A Restart the computer in Safe Mode and then update or change the driver B Don t restart the computer and use the Driver Rollback feature C Restart the computer in VGA Mode D Restart the computer under the Last Known Good Configuration option E Restart the computer and select a different hardware profile A4 Answers a c and d are correct You can restart the
152. cations using the command line option ju to advertise to the current user or jm to advertise to all users of the computer Answer c is incorrect because you must specify both the Windows Installer Package msi file as well as the Transform file and no logging is specified Answer d is incorrect because the fm option means to perform a repair of an existing application by rewriting all computer specific registry entries Which computer configuration transfer techniques are supported by the File And Settings Transfer FAST Wizard Check all correct answers a Serial port connections one RS 232 cable connected between two computers b Parallel port connections one LPT cable connected between two computers c USB connections one USB cable connected between two computers d Zip or Jaz drive cartridges e IEEE 1394 FireWire connections one FireWire cable connected between two computers f Infrared connections g Wireless 802 11 connections MCP Exam 70270 Preparation doc 207 A8 Answers a b d f and g are all correct The FAST Wizard supports a direct cable connection using either serial ports or parallel ports and appropriate cables Removable media are supported which includes Zip and Jaz drives Infrared connections are supported indirectly because you can copy the FAST Wizard s files via an infrared connection Wireless networking support is also included because any network connection will work Answer c is incorre
153. ces that the operating system loads or fails to load The log file is called Ntbtlog txt and is located in the systemroot folder by default this is the Windows folder Safe Mode Safe Mode with Networking and Safe Mode with Command Prompt also create a boot log file This option creates the log file without booting into Safe Mode The boot log is useful when you are determining the exact cause of system startup problems Enable VGA Mode MCP Exam 70270 Preparation doc 334 This option employs the extremely stable and well debugged standard VGA driver for Windows XP This mode is useful when you have installed a new video card if you have configured incorrect settings for the video display or if you have installed a corrupted or poorly written video device driver Video is a common troubleshooting issue in the Windows environment This stable video driver is used when booting into each of the Safe Modes Last Known Good Configuration Windows XP starts using the Registry configuration ControlSet that was saved at the last successful logon to Windows XP Last Known Good Configuration helps you recover from incorrect configuration of hardware device drivers and services However it does not solve problems caused by corrupted or missing drivers or files Any changes made to the ControlSet key of the Registry since the last successful startup and logon are lost when you select the option to start up with the Last Known Good Configuratio
154. cimal most of us can work with these addresses much more easily than if we had to work with them in their native binary format The real binary address of 192 168 1 20 previously mentioned translates into 11000000 10101000 00000001 00010100 MCP Exam 70270 Preparation doc 297 If you re not sure how to convert decimal numbers into binary or vice versa just use the Windows Calculator by selecting Start Run typing calc and clicking OK Select View Scientific and you can easily perform these conversions Certain IP addresses are reserved for specific functions e The address 255 255 255 255 11111111 11111111 11111111 11111111 in binary is reserved for network broadcasts e The IP address 127 0 0 1 1111111 00000000 00000000 00000001 in binary is reserved as a loopback address for testing proper configuration of the IP address es for the local host computer e The address schemes 192 168 x y 172 16 0 0 to 172 31 255 255 and 10 0 x y have been reserved as nonroutable by the bodies that govern the Internet Therefore IP addresses such as 192 168 1 20 and 10 0 0 7 are restricted to being used only for the internal addressing of LANs By definition you cannot route these addressing schemes onto the Internet Routers devices that route network data packets do not forward any data packets that originate with a nonroutable addressing scheme Understanding Classful IP Addressing A look at Classful IP addressing takes us back to the b
155. ck OK to close the Advanced TCP IP Settings Properties dialog box 7 Click OK to close the Internet Protocol TCP IP Properties dialog box 8 Click OK to close the Local Area Connection Properties dialog box Troubleshooting TCP IP Windows XP Professional comes with several software tools and utilities to help you isolate and resolve TCP IP related issues You must run all of these utilities from the command line Connectivity tools include the following e Finger Displays information about a user for a particular computer The target computer must be running the Finger service e FTP Transfers files to and from FTP servers over a TCP IP connection e LPR Sends one or more files to be printed via a line printer daemon LPD printer e RCP Copies files between a Windows XP Professional computer and a computer system running the remote shell daemon RSHD Windows 2000 and XP clients cannot run the RSHD daemon but Unix systems can e REXEC Executes commands on remote computer systems that are running the REXEC service Windows 2000 and XP clients do e RSH Executes commands on remote computer systems that are running the RSH service Windows 2000 and XP clients do not run the RSH service A utility included with the Windows 2000 Server Resource Kit enables the RSH service to run on a Windows 2000 system The utility is called RSHSVC EXE e Telnet establishes a terminal emulation session for working on remote systems includ
156. ckup utility does not support backing up directly to CD R or CD RW media You can copy files directly to a CD R or a CD RW disc or you can copy a backup file that was created by the Backup utility to a CD R or CD RW disc During a restore the Windows XP Backup program can read directly from CD R or CD RW media to perform the restore procedure If the tape device is PnP compliant you can rely on Windows XP to detect the device and install the appropriate drivers as well as allocate system resources for the device If you are using a tape device that is not PnP compliant use the Add Hardware applet in the Control Panel to install the drivers and assign resources for the device Use Device Manager to enable disable or edit settings for any tape device MCP Exam 70270 Preparation doc 231 Upgrading a System from One to Two Processors CPUs Windows XP Professional supports a maximum of two processors Windows XP Home supports only one processor When more than one processor is present in the computer when the operating system is installed Windows XP Professional uses symmetric multiprocessing SMP However if Windows XP is installed with just one CPU present and you want to add a second processor later you must use the Update Hardware Wizard to enable support for multiple processors To install support for multiple CPUs perform the following steps 1 2 3 4 Right click My Computer and then select Properties Click the Hardw
157. click Performance You will use System Monitor within Performance to monitor disk activity The Diskperf exe command 4ine tool was used to control the types of physical and logical disk counters that you could enable for monitoring system performance under earlier versions of Windows Under Windows XP disk performance counters are permanently enabled and the LogicalDisk object counters have been removed Instead of using the LogicalDisk object counters for measuring disk performance Windows XP maps physical drives to logical drives by applying the same instance name For example if a computer contains a dynamic volume that is comprised of two physical hard disks the logical drives might appear as Disk 0 C and Disk 1 C which denotes that drive C spans physical disks 0 and 1 For a PC that has three logical volumes on one physical disk the instance would appear as 0 C D E Detecting and Repairing Disk Errors In previous Windows operating systems ScanDisk detected and fixed disk errors In Windows XP you can use the Error Checking tool to check for file system errors and bad sectors on your hard disk To run the Error Checking tool perform the following steps Open My Computer and right click the local disk you want to check Select Properties Click the Tools tab Under Error Checking click Check Now Under Check Disk Options select the Scan For And Attempt Recovery Of Bad Sectors checkbox and click Start Se SS MCP Exa
158. cmd exe LA BEE iments and Settin soult a 9fFt CR Wir System Group Policy Result tool v2 r ring ht lt C gt M C 2601 ed On 1171472081 at 11 85 48 AM esults for DANDY alex on XPPROL COMPUTER SETTINGS at 14 48 26 AM pcal Applied Default Local the following security groups ISER 2601 at 16 33 21 AN y local applied because they were Filtered out cy ot Applied lt Empty gt art of the following security groups MCP Exam 70270 Preparation doc 140 Group Policy Update It is well known that Group Policies automatically refresh by default The default refresh time is 90 minutes So when you configure any new setting in the Local or Active Directory Group Policies the settings will automatically refresh for both the computer and user For some instances this is not sufficient though You might be testing out new policies and want to see the results immediately or want to force a new policy to a department of users immediately If you need to force a policy immediately you only need to run the command line tool Group Policy Update This tool will investigate the Local and Active Directory based Group Policies and apply them immediately to both the computer and user You do not need to run any switches with the tool but if you want better control you can use the primary switches listed here e target Computer User Allows explicit refreshing of either the computer or user portions of the
159. command ine options By default Windows Backup runs the Backup Or Restore Wizard which steps you through the choices and configurations related to backing up and restoring data To change this default behavior clear the Always Start In Wizard Mode checkbox You can bypass the wizard by clicking the Advanced Mode link on the Welcome To The Backup Or Restore Wizard window Required Permissions for Backing Up Files To successfully back up or restore data on a Windows XP system users must have appropriate permissions Users who are members of either the Local Administrators group or the Local Backup Operators group may back up any and all files on a local Windows XP computer Users who are members of either the Administrators group or the Backup Operators group for a Windows domain may back up any and all files on any Windows XP Professional computer that is a member of that domain If a user is not a member of one of these groups he or she must be an owner of all the files and folders that he wants to back up If a user is neither an owner of the files and folders nor a member of MCP Exam 70270 Preparation doc 325 Backup Operators or Administrators he or she must be granted at least one of the following permissions on those files and folders Read Read and Execute Modify or Full Control Only members of Administrators are permitted to back up System State data which contains very important internal configuration information for Windows
160. computer in Safe Mode to fix the driver problem you can restart the computer and select VGA Mode and then fix the problem or you can simply restart the computer under the Last Known Good Configuration option and the video settings will revert back to how they were previously Answer b is incorrect because you can t use the Driver Rollback feature if you can t see the display Answer e is incorrect MCP Exam 70270 Preparation doc 244 because the computer may have only one hardware profile present and any other hardware profiles may not necessarily apply to the video display settings 5 How many monitors will Windows XP support if you install one PCI video adapter one AGP video adapter and one ISA video adapter and the computer already has an integrated AGP video adapter on the motherboard A The computer will support three monitors B The computer will support four monitors C The computer will support two monitors D The computer will support one monitor A5 Answer a is correct Windows XP supports the multiple monitor feature using only PCI or AGP video display adapters it s okay if one adapter is built into the motherboard Answer b is incorrect because the multiple monitor feature is not supported for ISA video adapters Answer c is incorrect because the multiple monitor feature is supported on both PCI and AGP adapters built in adapters are also acceptable 6 What is the most efficient way that you can update Windows X
161. ct because a direct USB connection between two computers is not supported Answer e is incorrect because a direct FireWire connection between two computers is also not supported MCP Exam 70270 Preparation doc 208 Chapter 6 Installing Configuring and Troubleshooting Hardware Devices and Drivers Terms you ll need to understand e Universal Serial Bus USB Universal Plug and Play UPnP Advanced Power Management APM Advanced Configuration and Power Interface ACPI Add Hardware Wizard Device Manager Driver signing FireWire or IEEE Institute of Electrical and Electronics Engineers 1394 Driver Rollback Smart cards and smart card readers Multilink support Digital Versatile Disc DVD Infrared Data Association IrDA devices Network adapter or network interface card NIC Multiple monitor support Video adapter Power mode options Hardware profiles Multiprocessor support Techniques you ll need to master e Installing configuring and troubleshooting hardware devices and drivers Updating drivers and system files Rolling back drivers to a previous version Managing and troubleshooting driver signing Managing and troubleshooting various types of input output I O devices Configuring and troubleshooting Multilink support for a dial up connection Configuring and troubleshooting multiple monitor support hardware profiles and multiprocessor support MCP Exam 70270 Preparation doc 209 Implementing Managing and Troubleshoot
162. ct up to 10 individual monitors to create a desktop large enough to hold numerous programs or windows You can easily work on more than one task at a time by moving items from one monitor to another or by stretching them across numerous monitors Edit images or text on one monitor while viewing Web activity on another Or you can open multiple pages of a single long document and drag them across several monitors to easily view the layout of text and graphics You could also stretch a spreadsheet across two monitors so you can view numerous columns without scrolling MCP Exam 70270 Preparation doc 227 One monitor serves as the primary display This is the monitor on which you see the Logon dialog box when you start your computer In addition most programs display their windows on the primary monitor when you initially open them You can set different resolutions and different color depths for each monitor You can also connect multiple monitors to individual graphics adapters or to a single adapter that supports multiple outputs Arranging Multiple Monitors To arrange multiple monitors perform the following steps 1 Open the Display applet in the Control Panel 2 Click the monitor icons and drag them to positions that represent how you want to move items from one monitor to another and then click OK or Apply to view the changes see Figure 5 You can also click the Identify button to briefly flash the monitor number on each monitor s sc
163. cted You can select it after you have configured the RIS server in Active Directory Users and Computers The next dialog box asks where the system should look for the Windows XP Professional installation files Type the drive letter for the CD ROM drive and the path to the installation files for example D 1386 Click Next The next dialog box suggests a folder name for the initial image Each image that is created has its own folder Use the default name provided or type in a different name and then click Next The next dialog box asks you to provide a descriptive name for this image Use the default or type in a different name Click the Next button to get to the finish line You re finished The final dialog box summarizes the parameters that you selected Click the Finish button Risetup exe now copies the contents of the 1386 folder to the folder structure that you just created and completes the installation process MCP Exam 70270 Preparation doc 46 When the installation is finished you need to configure the RIS server to respond to RIS clients You have to log on as a domain administrator to complete this final step Launch the Active Directory Users and Computers console by selecting Start Programs Administrative Tools Active Directory Users and Computers Next right click the RIS Server Computer object and select Properties Click the Remote Install tab from the Properties page On this tab select the Respond To Client Computers
164. cted in one continuous chain Using Network Adapters You can install network adapters using the Add Hardware applet in the Control Panel You can make changes to the binding order of protocols and the network provider order by selecting the Advanced Settings option under the Advanced menu of the Network Connections window accessed from the Network Connections icon in the Control Panel Each network adapter has its own separate icon in the Network Connections folder Right click a network adapter icon to set its properties install protocols change addresses or perform any other configuration changes for the connection Using Infrared Data Association IrDA Devices Windows XP supports IrDA protocols that enable data transfer over infrared connections This provides an infrastructure that allows other devices and programs to communicate with Windows XP through the IrDA interface Windows XP installs with the Wireless Link tool which transfers files to or from another computer that runs Windows XP Windows 2000 or Windows 98 Windows XP s PnP architecture automatically detects and installs the infrared component for computers with built in IrDA hardware For computers without built in IrDA hardware a user can attach a serial port IrDA transceiver to a serial MCP Exam 70270 Preparation doc 225 COM port and use the Add Hardware Wizard to install the device under Windows XP After an infrared device is installed the Wireless Link ic
165. cting Advanced on the Security option setting will gray out the option not make it available Answer c is incorrect because the Allow Unsecured Password option is only available with dial up clients Answer d is incorrect because you cannot disable the Smart Card and allow Bob to log on Your manager informs you that you need to set up dial up networking for all the clients in your network She is concerned about ensuring that the clients will use the appropriate authentication protocols as the remote users dial in to the network You want to calm her fears Which authentication protocols does Windows XP Professional install by default when dial up networking is installed on the computer Check all correct answers a PAP b SPAP c MS CHAP d MS CHAPv2 e CHAP All the answers are correct An authentication protocol is a set of standards for exchanging logon name and password information MCP Exam 70270 Preparation doc 381 A3 between the two network devices Microsoft Windows XP supports the most common authentication protocols and includes their own version of CHAP For a dial up connection all of these protocols are selected and are supported for the remote access client You are the network administrator of an international tar factory You have 200 Windows 2000 servers and 4 500 Windows XP Professional workstations Two hundred fifty of the Windows XP Professional workstations are for the remote sales force This remote sal
166. ctionality The following is a list of switches that relate to unattended installs u answer lt file gt Used for an unattended installation from a DOS based client which will use the winnt exe command The file contains answers to the installation prompts s sourcepath Points to the location of the Windows XP installation files udf id Used in conjunction with a UDF file which overrides the values of the answer file You typically use this file to provide unique configuration parameters during the installation process The ID designates which settings contained in the UDF file should be used If you are upgrading or installing from a Windows 98 ME or Windows NT 2000 client you need to use the winnt32 exe command to perform the installation For this case you will have some different switches available The following are the more important switches that differ from those in the preceding list unattend Used with winnt32 exe to create an unattended upgrade or install to Windows XP from a Windows 98 ME or Windows NT 2000 client makelocalsource Copies the contents of the CD based installation to the local hard drive for future reference when the CD is not available dudisable Turns off the Dynamic Updates function on the client that is being installed duprepare pathname Prepares a folder for the distribution of Windows Update files and device drivers This folder will then be used by subsequent installations to o
167. ctly answer questions Test takers with differing levels of knowledge or ability therefore see different sets of questions individuals with high levels of knowledge or ability are presented with a smaller set of more difficult questions whereas individuals with lower levels of knowledge are presented with a larger set of easier questions Two individuals may answer the same percentage of questions correctly but the test taker with a higher knowledge or ability level will score higher because his or her questions are worth more Also the lower level test taker will probably answer more questions than his or her more knowledgeable colleague This explains why adaptive tests use ranges of values to define the number of questions and the amount of time it takes to complete the test Adaptive tests work by evaluating the test taker s most recent answer A correct answer leads to a more difficult question and the test software s estimate of the test taker s knowledge and ability level is raised An incorrect answer leads to a less difficult question and the test software s estimate of the test taker s knowledge and ability level is lowered This process continues until the test targets the test taker s true ability level The exam ends when the test taker s level of accuracy meets a statistically acceptable value in other words when his or her performance demonstrates an acceptable level of knowledge and ability or when the maximum number of item
168. d a spanned volume onto a maximum of 32 dynamic disks Spanned volumes cannot be mirrored or striped Spanned volumes are not fault tolerant Extending a Simple or Spanned Volume To extend a simple or spanned volume perform the following steps 1 Open Disk Management 2 Right click the simple or spanned volume you want to extend click Extend Volume and then follow the instructions on your screen Here are some guidelines about extending a simple or a spanned volume e You can extend a volume only if it contains no file system or if it is formatted using NTFS You cannot extend volumes formatted using FAT or FAT32 e You can extend a simple volume within its original disk or onto additional disks provided that the volume was converted to a dynamic volume under Windows XP not Windows 2000 If you extend a simple volume across multiple disks it becomes a spanned volume e After a volume is extended onto multiple disks spanned you cannot mirror or stripe it e After a spanned volume is extended no portion of it can be deleted without the entire spanned volume being deleted e You can extend a simple or extended volume only if the volume was created as a dynamic volume You cannot extend a simple or extended volume that was upgraded from basic to dynamic under Windows 2000 e You can extend simple and spanned volumes on dynamic disks onto a maximum of 32 dynamic disks e Spanned volumes only write data to subsequent disks as eac
169. d cannot be modified Answer d is incorrect because the server IP addresses would not be in the DHCP scope T You are the administrator for a national bank and your current protocol requires that you use Smart Cards for both local and remote user logons You want the remote users to be able to use the Internet while connected to the corporate LAN You do the following Enable a Smart Card logon process for the domain Enable the Extensible Authentication Protocol EAP and configure the Smart Card or other certificate TLS EAP type on the remote access router computer Enable Smart Card authentication on the VPN connection on the remote access client computer What else must you do to ensure the successful connection of your VPN clients Check all correct answers MCP Exam 70270 Preparation doc 384 A7 A8 A Install a computer certificate on the remote access router B Configure remote access on the remote access router C Ensure that the checkbox Use Default Gateway On Remote Network on the General tab of the TCP IP Properties sheet is checked D Ensure that Internet Connection Firewall on the VPN connection is enabled Answers a and b are correct You must install a computer certificate on the remote access router because you are using Smart Cards You must also configure remote access on the remote access router that remote clients can connect to Answer c is incorrect because it would cause the remote clients to not be
170. d click Next Type in a name and an organization and click Next Select display settings such as Color Screen Area and Refresh Frequency Unless all computers have identical video cards with identical monitors you should set these fields to Use Windows Default Click Next to continue MCP Exam 70270 Preparation doc 39 13 14 15 16 17 18 19 20 The Time Zone page appears next Simply choose the correct time zone the computer is located in and click Next Input the Product ID that matches the CD ROM contents that you will be using for the installation Type in the computer names or import a comma delimited file that contains all computer names that should be used for the installation of new computers Optionally you can select the Automatically Generate Computer Names Based On Organization Name checkbox Checking this results in a combination of the organization name that you typed in the dialog box and a unique alphanumeric combination for example coriol 1AD2RT Use either method and click the Next button Enter a password that the local administrator of the computer will use You also have an option to encrypt the administrator password which will be stored in the answer file This is a good option to ensure security of the installed system Note The password can be up to 127 characters long Enter a password and click Next This page provides two options for Network Settings Typical and Custom If you
171. d click the Roll Back Driver button D Click Start All Programs Windows Update and download a driver from the Windows Update Web site A1 Answer c is correct The Driver Rollback feature is the quickest and easiest way to return a device driver to its previous version Answer a is incorrect because the Last Known Good Configuration option can t help you once you have successfully logged on to the computer after a configuration change Answer b is incorrect because Safe Mode is no better for installing drivers than booting normally and this action would not return the driver to its previous version Answer d is incorrect because the Windows Update Web site would also not return the driver to its previous state MCP Exam 70270 Preparation doc 242 2 Brandy is a network administrator who wants to control the type of device drivers that can be installed in the Windows XP Professional workstations in her office Which Group Policy Object GPO can she use along with which setting so that unsigned device drivers cannot be installed A Brandy can go to User Configuration Windows Settings Security Settings Local Policies Security Options and set the Devices Unsigned Driver Installation Behavior policy to Silently Succeed B Brandy can go to Computer Configuration Administrative Templates System and set the Devices Unsigned Driver Installation Behavior policy to Silently Succeed C Brandy can go to User Configuration Administrative Template
172. data discs without using a third party application A8 Answers b c and d are correct You cannot write to DVD R or DVD RW media without a third party utility You cannot play back DVD movies without third party decoder hardware or software You can read DVD data discs natively under Windows XP without requiring a third party utility Answer a is incorrect because Windows XP does support writing to both CD Rs and CD RWs natively MCP Exam 70270 Preparation doc 246 Chapter 7 Implementing Managing and Troubleshooting Disk Drives and Volumes Terms you ll need to understand e Basic vs dynamic disks e Partitions volumes and logical drives e Simple spanned and striped volumes e Diskperf exe utility e Diskpart exe utility e File allocation table FAT or FAT16 file system volumes e 32 bit file allocation table FAT32 file system volumes e NTFS volumes e Convert exe utility e Mounted drives and mount points e Disk quotas e NTFS compression e NTFS data encryption Techniques you ll need to master e Using the Disk Management console Monitoring and troubleshooting disks using the Performance console Using the Disk Cleanup Wizard and Disk Defragmenter Selecting a file system for Windows XP Professional Using Convert exe to convert a FAT volume to NTFS e Using Diskpart exe to manage disk drives and volumes from the command line e Creating mounted volumes e Managing NTFS compressed files and folders e Mana
173. de no security for local access Share permissions apply only to access over the network these permissions have absolutely nothing to do with the underlying file system which is why NTFS permissions are preferred If you have a mixture of share permissions and NTFS permissions on the same folder troubleshooting access control issues becomes more difficult use either share permissions or NTFS permissions not both MCP Exam 70270 Preparation doc 78 Monitoring Managing and Troubleshooting Access to Files and Folders The NTFS file system for Windows XP Professional offers several accessibility features that help administrators maintain and safeguard applications and data Although you can somewhat control access to shared network folders by managing share permissions Windows XP NTFS provides a very robust access control solution In addition to offering administrators more granularity of security access control over files and folders than network share permissions NTFS permissions reside at the file system level which allows administrators to manage only one set of access control settings for both network users and local users For troubleshooting resource access you can enable auditing for folders and files residing on NTFS volumes NTFS Security Users and Groups You can apply NTFS security permissions to resources like files folders and printers for specific users or groups of users Windows XP Professional installs four local use
174. ders by default each and every time the computer is started These default shares are often referred to as hidden or administrative shares because a dollar sign is appended to their share names which prevents the shared folder from being displayed on the network Browse list users cannot easily discover that these shares exist When users browse through the My Network Places window for example they cannot see that such hidden shares even exist Microsoft Windows Networking does not allow hidden shares to be displayed The default hidden network shares include the following e C D E and so on One share gets created for the root of each available hard drive volume on the system e ADMIN This shares the systemroot folder with the network for example C Windows e IPC This share is used for interprocess communications IPCs IPCs support communications between objects on different computers over a network by manipulating the low level details of network transport protocols IPCs enable the use of distributed application programs that combine multiple processes working together to accomplish a single task e print This share holds the printer drivers for the printers installed on the local machine When a remote computer connects to a printer over the network the appropriate printer driver is downloaded to the remote PC Although you can temporarily disable hidden shares you cannot delete them without modifying the Re
175. device possibly because a program in the system is using it If this happens close the program that is accessing the volume or drive and then click the Change Drive Letter And Paths option again Windows XP allows you to statically assign drive letters on volumes partitions and CD ROM drives This means that you permanently assign a drive letter to a specific partition volume or CD ROM drive When you add a new hard disk to an existing computer system it does not affect statically assigned drive letters You can also mount a local drive through an empty folder on an NTFS volume by using a drive path instead of a drive letter This feature is known as using mounted drives MCP Exam 70270 Preparation doc 271 Mounted Drives Mounted drives also Known as mount points or mounted volumes are useful for increasing a drive s size without disturbing it For example you could create a mount point to drive E as C CompanyData thus seeming to increase the size available on the C partition which would specifically allow you to store more data in C CompanyData than you could otherwise Drive paths are available only on empty folders on NTFS volumes The NTFS volumes can be basic or dynamic Creating a Mounted Drive To create a mounted drive perform the following steps 1 Open Disk Management 2 Right click the partition or volume you want to mount and then click Change Drive Letter And Paths 3 Doone of the following e To mount a v
176. dified after an application is installed After an application has been installed Windows Installer Service checks the state of the application while it is being launched This service provides self healing capabilities to applications if they were installed as a Windows Installer Service Package The service is always checking to see if the application needs to be repaired The service also helps to resolve DLL conflicts Windows XP has devised a way to allow an application to alter the location from which DLLs are loaded instead of having all DLLs located in the system32 directory This helps to protect DLLs from being overwritten and from other conflicts Key parts of an application have a protected tag on them A Windows Installer Service Package lists critical files that you would need to replace if they were deleted or missing For example executables are listed as critical files If for example App1 exe were deleted Windows Installer Service would locate App1 exe from a network server or ask the user to insert the CD ROM that contains Appi exe After locating App1 exe it would be installed and the application would launch Windows Installer Service does a much better job of removing applications compared to previous versions of Windows During the installation of an application Windows Installer Service sits in the background looking at everything that is installed where everything is installed and what has been changed duri
177. ds 128MB A 1 5GB hard drive with a minimum of 650MB of free space Super VGA 800x600 or higher resolution video adapter and monitor Keyboard Mouse CD ROM or DVD drive Another important aspect to consider before installing Windows XP Professional is the BIOS version and features of your system It is best to install the latest BIOS from your hardware vendor before tackling the XP Professional installation Features such as Plug and Play and Advanced Configuration and Power Interface ACPI are important for the full functionality of XP ACPI allows the OS to control power management and drives the core Plug and Play functions in Windows XP If you install Windows XP on a system that does not support ACPI then upgrade the system to support ACPI you will most likely see a Blue Screen of Death This is because the Hardware Abstraction Layer HAL for ACPI is not the same as that of Advanced Power Management APM which is used if ACPI is not supported After you ve verified that the computer meets these minimum hardware requirements you should check to see whether devices such as the video adapter and the network adapter are compatible To do this check the Hardware Compatibility List HCL which every Windows XP CD ROM contains However this file is out of date rather quickly with all of the new additions to the HCL that occur after the burning of your CD To view the most current HCL visit www microsoft com hcl Setup Disks Microsof
178. dvantage of power management and UPnP features in Windows XP If you are not sure if your computer is ACPl compliant check your manufacturer s documentation To change power settings that take advantage of ACPI use the Power Options applet in the Control Panel If you upgrade a computer s BIOS so that the computer will support the ACPI standard you must reinstall Windows XP if you want the system to take advantage of ACPI features Power Options Overview By using Power Options in the Control Panel you can reduce the power consumption of several computer hardware components or you can have it impact your entire system You do this by choosing a power scheme which is a collection of settings that manages your computer s power usage You can create your own power schemes or use the ones provided with Windows XP MCP Exam 70270 Preparation doc 238 You can also adjust the individual settings in a power scheme For example depending on your hardware you can do the following e Turn off your monitor and hard disks automatically to save power e Put your computer in Standby mode which puts your entire system in a low power state if you plan to be away from your computer for a while While in Standby mode your entire computer switches to a low power state where devices such as the monitor and hard disks turn off and your computer uses less power When you want to use the computer again it comes out of Standby quickly and your desktop is r
179. dware you will need to reactivate MCP Exam 70270 Preparation doc 61 Troubleshooting Failed Installations Windows XP Professional should install on most new computers without too much difficulty However there are some common reasons why it may not install properly The following is a list of typical installation problems e Media errors These are problems you encounter with the distribution CD ROM Make sure the problem exists with the media itself not access to the media If you place the Windows XP Professional CD ROM in a shared drive for installation too many people could be using the drive at one time This may generate some errors However if only one person is connected to the shared drive and errors persist get a replacement for the distribution CD ROM In addition always restart failed installations caused by media errors e Incompatible CD ROM drive Many specifications exist for CD ROM drives You can install Windows XP from most drives but there are always exceptions If the CD ROM drive is not compliant replace it or place the distribution files on the network Also as mentioned earlier in this chapter the Windows XP CD ROM is bootable and can be installed from El Torito compatible drives If the CD ROM can t boot ensure that the drive is compliant and that the boot order in the BIOS has been set to the CD ROM drive Ensure that the level of BIOS that you are running supports bootable CD ROMs Also the controlle
180. dying the materials until you get there MCP Exam 70270 Preparation doc 10 The Exam Situation It is a good idea to arrive early for your exam This gives you a chance to relax compose yourself and to take in the surroundings Be sure that you visit the toilet before the exam otherwise it could get uncomfortable during the exam When you arrive at the testing center where you scheduled your exam you ll need to sign in with an exam coordinator He or she will ask you to show two forms of identification one of which must be a photo ID After you ve signed in and your time slot arrives you ll be asked to deposit any books bags or other items you brought with you Then you ll be escorted into a closed room All exams are completely closed book In fact you will not be permitted to take anything with you into the testing area but you will be furnished with a blank sheet of paper and a pen or in some cases an erasable plastic sheet and an erasable pen You can write information on the blank sheet as soon as you are seated in front of the computer if you wish You can refer to this piece of paper anytime during the test but you ll have to surrender the sheet when you leave the room You will have some time to compose yourself and to take a sample orientation exam before you begin the real thing We suggest you take the orientation test before taking your first exam It is a good way to get acclimatized and to help to relax and focus
181. e night before A5 Answer a is correct By default System Restore automatically creates a restore point every 24 hours or every 24 hours that the computer is powered on She can use the System Restore Wizard to restore her system from the restore point that was created approximately 24 hours earlier Answer b is incorrect because she can restore her system to its previous state from approximately 24 hours earlier Answer c is incorrect because the Last Known Good Configuration holds the CurrentControlSet information after you successfully log on to the system it cannot revert to a previous configuration after successfully logging on to the system Answer d is incorrect because when you perform an ASR restore it reformats the system drive and returns all settings to their installation defaults 6 Which of the following system tools is best suited to help you create a historical baseline of overall system performance for a Windows XP Professional computer a Performance Logs and Alerts b System Monitor c Task Manager d Network Monitor Driver and the Netcap exe utility AG Answer a is correct The Performance Logs and Alerts snap n captures performance activity for all of the objects and their associated counters that you add to a performance counter log By tracking such activity over time for key components such as memory processor network interfaces physical and logical disks you can create a baseline against which to com
182. e that gives an accurate overview of system performance MCP Exam 70270 Preparation doc 351 The most useful objects to understand and monitor are the following e Cache Physical memory used to store recently accessed disk data e Memory RAM used to store code and data e Paging file The file used to extend physical RAM and create virtual memory e Physical disk The disk drive or redundant array of independent disks RAID device A physical disk may contain multiple logical disks e Logical disk The disk volume including simple logical spanned striped mirrored or RAID 5 volumes A logical disk may span multiple physical disks e Process Executable programming code that represents a running application e Processor The Central Processing Unit CPU e Server The server service which offers data and print services even on a Windows XP Professional system e System Counters that apply to all system hardware and software e Thread Executable programming code that the processor is processing Baselines should include these critical objects as well as the other counters discussed in this chapter Managing Memory Performance The counters in the Memory object represent the memory available via the system s physical RAM and via the system s virtual memory paging file The most important counters in the memory object are the Pages sec counters and the Available Bytes counter e Memory Pages sec
183. e the original compression attribute is retained That is all you need to remember about NTFS compression because in all other scenarios the compression attribute is inherited from the new or target location MCP Exam 70270 Preparation doc 276 NTFS Compression Guidelines NTFS allocates disk space based on the uncompressed size of a file If you try to copy a compressed file to an NTFS volume with enough space for the compressed file but not the uncompressed file you get an error message telling you there is inadequate disk space to copy the file to the target Plan ahead If you attempt to copy or move an NTFS compressed file to a floppy be prepared for the Insufficient Disk Space error If the uncompressed size of the file is larger than the capacity of the floppy you cannot copy or move the file Use a third party compression tool such as WinZip for this operation Make it a practice to use NTFS compression only on static data and not on data that frequently changes because applying or removing the compression attribute does incur system overhead NTFS encryption and compression are mutually exclusive You can encrypt or compress a file or folder but not both Windows XP does not support NTFS compression for volumes with cluster sizes larger than 4KB because of the performance degradation it would cause MCP Exam 70270 Preparation doc 277 Data Encryption The NTFS file system for Windows XP Professional also supports data
184. e Block This option is the most restrictive of the three settings To prevent the installation of any unsigned device drivers this is the option you should select MCP Exam 70270 Preparation doc 218 Figure 3 The Driver Signing Options dialog box Driver Signing Options During hardware installation Windows might detect software that has not passed Windows Logo testing to verify its compatibility with Windows Tell me why this testing is important What action do you want Windows to take Ignore Install the software anyway and don t ask for my approval O Block Never install unsigned driver software Administrator option Make this action the system default Controlling the Use of Signed and Unsigned Drivers Using Group Policy Instead of modifying the driver signing options from the GUI you can manipulate Windows XP driver signing options using a Group Policy Object GPO setting under the Local Computer Policy This GPO setting is located in Computer Configuration Windows Settings Security Settings Local Policies Security Options The policy is named Devices Unsigned Driver Installation Behavior The three choices for this unsigned driver behavior policy as shown in Figure 4 are the following e Silently Succeed Selecting this setting ignores whether a driver is signed or not allowing the user to proceed with the driver installation e Warn But Allow Installation Selecting this setting issues a dial
185. e Drives list and click the Settings button Drag the slider bar as shown in Figure 4 to the right to increase the amount of disk space used for restore points or drag it to the left to decrease the amount of disk space used Figure 4 The Settings dialog box for configuring disk space usage MCP Exam 70270 Preparation doc 343 for restore points Drive E Settings FAT32_VOL E Monitoring FAT32_VOL E is the system drive You cannot turn off System Restore on this drive without turning it off on all drives To do this click OK or Cancel to return to the System Restore tab Disk space usage Move the slider to the right to increase or to the left to decrease the amount of disk space for System Restore Decreasing the disk space may reduce the number of available restore points Disk space to use Min 12 882 MB The System Restore Wizard Use the System Restore Wizard to manually create restore points and to restore the system to an earlier configuration by selecting a previously created restore point You find the System Restore Wizard by clicking Start All Programs Accessories System Tools System Restore To manually create a restore point launch the System Restore Wizard and click the Create A Restore Point button Click Next Type in a restore point description and click Create To restore the system to a previous state launch the System Restore Wizard and click the Restore My Computer To An Earlier Time b
186. e Files Write Allows or denies creating files within a folder and allows or Data denies making changes to a file and overwriting the existing data Create Allows or denies creating folders within a folder and allows Folders Append jor denies making changes to the end of a file but not Data changing deleting or overwriting existing data Write Attributes Allows or denies changing the attributes such as read only or hidden ef a file or folder MCP Exam 70270 Preparation doc 86 Table 5 Advanced NTFS security permissions for both files and folders Permission Write Extended Attributes Description Allows or denies changing the extended attributes of a file or folder Extended attributes are defined by programs and may vary by program Some extended attributes are defined by application programs and can vary by application Delete Subfolders Allows or denies deleting subfolders and files even if the and Files Delete permission has not been granted on the subfolder or file Delete Allows or denies deleting the file or folder If you don t have the Delete permission on a file or folder you can still delete it if you have been granted Delete Subfolders And Files permission on the parent folder Read Allows or denies reading the permissions that exist on a file Permissions or folder Change Allows or denies changing permissions such as Full Permissions
187. e PCI bus in a compact portable size You can find several types of PC Cards that are usually used in mobile computers network adapter cards hard drive cards modem cards wireless network cards and so on Smart Cards Support for Smart Card technology is fully integrated into Windows XP Smart Cards play an important role in Windows XP s Public Key Infrastructure PKI security architecture for logon authentication and other security related services Smart Cards are credit card sized devices that have integrated circuits built into them These electronic cards securely store both public and private encryption keys and also perform cryptographic functions such as digital signature and key exchange operations Microsoft supports only PnP compliant Smart Card reader devices Smart Card readers connect to standard PC interfaces such as serial RS 232 ports PS 2 ports USB ports and PC Card slots To install a Smart Card reader use the Add Hardware applet in the Control Panel Smart Card configurations typically use the Extensible Authentication Protocol Transport Level Security EAP TLS authentication protocol When you use a Smart Card to log on to a Windows XP Professional computer at least one Cryptographic Service Provider CSP service must be installed and running on the system CSPs enable other application programs to have access to the cryptographic services of a Smart Card such as digital signature key generation and key exchange
188. e a counter log select the Counter Logs node of the Performance Logs and Alerts snap in and then right click the Details right hand pane and choose New Log Settings Give the log a name that will help you identify it in the future and then click OK On the General tab of the new log s Properties dialog box add one or more counters to be recorded and then specify the sample rate the interval at which counter data will be collected Obviously a shorter sample rate provides more data but also fills up the log more quickly You can also configure and manage counter logs and trace logs directly from the command line by using the new Logman exe tool Type Logman exe at a command prompt to view all of this command s syntax parameters and options Logs are stored by default in the Perflogs folder off the root of the same drive volume where the systemroot folder is located The MCP Exam 70270 Preparation doc 350 default format is binary blg extension You can stop and start logs as desired and view them in System Monitor To view a log using the System Monitor Click System Monitor right click the right hand view pane of the Performance Console and choose Properties Then on the Source tab click Log Files and click Add to browse for the log file name To analyze a log with Excel Access or other database and reporting tools save the log as a comma or tab delimited file csv or tsv extension respectively Managing Per
189. e a good recent backup before editing the Registry You can use the Regedit exe tool to modify the following Registry entry HKEY_LOCAL_MACHINE CurrentControlSet Control Session Manager Change the BootExecute value data from autoconv DosDevices x FS NTFS to autocheck autochk where x denotes the volume drive letter to be converted After the conversion NTFS file permissions are set to Full Control for the Everyone group However if the systemroot folder resides on a newly converted NTFS volume the permissions for the Winnt folder and Program Files folder and associated files should be properly secured using NTFS permissions MCP Exam 70270 Preparation doc 269 Myth Converting an NTFS Partition to a FAT Partition You cannot convert an NTFS partition to a FAT partition A simple conversion using the Convert exe command line utility is not possible Your only course of action if you want to keep the data is to back up all the data on the drive Then use the Disk Management tool to reformat the disk to the flavor of FAT you prefer and restore your backed up data to your newly formatted disk Reapplying Default NTFS Permissions You may need or want to reapply the default NTFS permissions to the system boot partition if you changed them or never applied them to begin with because you converted the boot partition to NTFS after installation To reapply the default NTFS permissions use the Secedit exe utility which comes with
190. e already running Therefore answer d is incorrect 4 As a system administrator you need to modify the Windows XP Professional boot settings so that the computer will generate a boot log file each time that it restarts You can t remember the exact boot option switch and you d prefer not to edit the Boot ini file directly How can you accomplish this task A Run the SYSEDIT utility B Run the MSCONFIG utility C Boot into Safe Mode and use the BOOTVRFY utility D Use RegEdit to modify the Registry data for the value WindowsBoot under HKEY LOCAL_MACHINE SOFTWARE Microsoft Windows NT CurrentVersion Winlogon A4 Answer b is correct The MSCONFIG utility allows you to set a variety of system startup options including adding command line switches to the Boot ini file The SYSEDIT tool does not allow you to modify any part of the Boot ini file so answer a is incorrect The BOOTVRFY exe command does not support editing the Boot ini file so answer c is incorrect Values for the Boot ini file are not stored in the Windows XP Registry so answer d is also incorrect MCP Exam 70270 Preparation doc 205 A5 A6 You want to use two different legacy applications under Windows XP Professional One application requires a Windows NT 3 51 environment The other program requires a Windows NT 4 Service Pack 6a environment Which application program can Windows XP provide legacy support for A The Windows NT 4 Service Pack 6a application
191. e computer is then undocked so the user can travel with the notebook PC These two situations require different power management settings possibly different network settings and various other hardware configuration changes MCP Exam 70270 Preparation doc 234 You can enable and disable devices in particular profiles through their Properties dialog box in Device Manager as shown in Figure 7 You manage services using the Services snap in for the MMC as shown in Figure 8 You create and manage hardware profiles using the System applet in the Control Panel or by right clicking My Computer and choosing Properties Once inside the System applet go to the Hardware tab and click the Hardware Profiles button to open the Hardware Profiles dialog box shown in Figure 9 At installation Windows XP creates a single hardware profile called Profile 1 Current which you can rename You are prompted to select a hardware profile at system startup only when two or more hardware profiles are stored on your machine You can create and store as many hardware profiles on your machine as you like You select the desired hardware profile at Windows XP startup to specify which device and service configuration settings you need for the current session Figure 7 The Properties dialog box for a device allows you to enable or disable it for the current hardware profile using the Device Usage dropdown list box IOMEGA ZIP 100 Properties General Policies Volumes
192. e current user to use the Accessibility Options when logging on to the system In addition you can mark the checkbox Apply All Settings To Defaults For New Users to have the current settings applied to all new user accounts created by this Windows XP computer Accessibility Wizard You can configure most of the accessibility options quite easily through the Accessibility Wizard The wizard asks a series of questions to determine whether you need to configure keyboard sound display and mouse accessibility features For example the wizard displays a sentence in varying font sizes The user then selects a sentence with the font size that is easy to read After the user has answered all the questions the interface immediately changes to reflect larger fonts and any other options that were configured Additional Accessibility Features Windows XP provides three additional accessibility tools that are not available in the Accessibility Options applet These tools which you can locate by navigating to Start All Programs Accessories Accessibility are the following e Narrator This tool is for people who have low vision or who are completely vision impaired When enabled the Narrator uses a synthesized voice to read what is displayed such as menu options text dialog boxes and alerts e Magnifier This tool splits the screen into two portions magnified and nonmagnified The magnified portion of the screen magnifies the size of anything
193. eating an account is limited in Windows XP Therefore after creating an account you often need to go to the account s Properties dialog box which you can access by right clicking the account and choosing Properties After the creation of a user you can specify the groups the user belongs to and the profile settings for the user as shown in Figure 1 Figure 1 The Properties dialog box of a typical user derek Properties General Member OF Profile Member of i Administrators MCP Exam 70270 Preparation doc 127 Managing Local Group Membership To manage the membership of a Local group right click the group and choose Properties To remove a member select the account and click Remove To adda member click Add and select or enter the name of the account as shown in Figure 2 Figure 2 Interface for adding a user or group to a Local group Select Users Select this object type Users or Built in security principals Object Types From this location Enter the object names to select examples In a workgroup Local groups can contain only accounts defined in the same machine s local security database When a system belongs to a domain its Local groups can also include domain accounts including user accounts Universal groups and Global groups from the enterprise s Active Directory as well as Domain Local groups from within the system s domain Note Universal groups and Domain Local groups are avai
194. ecovery Console just to change the video driver Answer c is incorrect because an Automated System Recovery restore formats the system drive and reinstalls Windows XP which would be time consuming and completely unnecessary in this case 2 Jan s Windows XP Professional computer does not have a tape drive installed on it Fortunately the important data that she needs to back up requires only about 575MB of storage space Jan remembers that Windows XP supports writing directly to CD R and CD RW media so she runs the Windows XP Backup program to create a backup of her data onto a CD R disc How can Jan get her data backed up onto a CD R a Specify a CD R as the target media for the Windows Backup program b Specify a CD RW as the target media for the Windows Backup program c Use the Windows XP Backup program to back up the data to a different hard drive or to a network drive and then copy the backup file onto CD R or CD RW media d Specify a DVD R as the target media for the Windows Backup program A2 Answer c is correct The Windows XP Backup program MCP Exam 70270 Preparation doc 359 does not support backing up directly to CD R or CD RW media but you can copy a previously created backup file to a CD R or CD RW disc Answer a is incorrect because the Windows XP Backup program does not support backing up directly to CD Rs Answer b is incorrect because the Windows XP Backup program does not support backing up directly to CD R
195. ect The optimal paging file configuration is to split it evenly over multiple physical disks without placing it on the system or boot volumes The recommended paging file size is 1 5 times the installed memory For a system with 256MB RAM installed that would be 384MB split over two drives 192MB each Answer a is incorrect because it is not a best practice to place the paging file on the system or boot volumes Answer c is incorrect because it is not optimal to make the initial size lower than the maximum size because this will cause the paging file to be expanded which takes system resources Answer d is incorrect because it is not a best practice to place the paging file on the system or boot volumes even if you place other paging files on different volumes 8 Which of the following Windows XP system components MCP Exam 70270 Preparation doc 363 can you configure or monitor from the Task Manager window for a dual processor computer Check all correct answers a Network utilization and current condition b Processor usage and page file usage c Processor affinity for specific processes d Processor priority for specific processes e Available system memory f List of processes running from all users A8 Answers a b c d e and f are all correct Network utilization percentage is displayed on the Networking tab processor and page file usage is displayed on the Performance tab and processor affinity settings and proces
196. ectory MCP Exam 70270 Preparation doc 110 Managing Local and Network Print Devices You manage print devices in Windows XP Professional from the Printers And Faxes folder which is accessible from the Control Panel or by clicking Start Printers And Faxes When working with printing in Windows XP you need to fully understand the following printing terminology as defined by Microsoft Printer A software interface between the operating system and a print device It defines ports through which print jobs get routed Printer names direct print jobs to one or more print devices Print device A piece of equipment hardware that physically produces printed documents A print device may be attached to a local computer or connected via a network interface Printer port A software interface through which print jobs get directed to either a locally attached print device or a network connected print device Windows XP supports local line printer terminal LPT COM serial and Universal Serial Bus USB ports It also supports network connected printer port devices such as the Intel NetPort and the Hewlett Packard HP JetDirect Print server A computer that serves as the host for printers that are associated with print devices Printer driver Software specific to each print device designed to run in Windows XP that translates printing commands into printer language codes for each print device PCL5 and PostScript are examples of t
197. ed button click the Owner tab and change the owner to the Interns group Answer c is correct If you set up each computer for each user who belongs to the Interns group you can specify during which time period the printer is available and you can specify a higher priority than the default which is 1 Answer a is incorrect because you do not need to configure computers for the users in groups other than the Interns group and you cannot specify a priority setting lower than 1 the default Answer b is incorrect because printer permissions do not modify printer availability or printer priority settings Answer d is incorrect because the printer ownership setting does not modify printer availability or printer priority settings Which of the following statements are true about using the Internet Printing Protocol IPP Check all correct answers A The print server computer must be running IIS 4 or later B The print server computer may be running Windows 2000 Professional C You can view all available printers and faxes by typing the following URL into a Web browser http print_server_name printers D You can connect to specific printer by typing the following URL into a Web browser http print_server_name printer_share_name Answers b and d are correct IPP is supported on Windows 2000 all editions and later Microsoft operating systems You can connect directly to printer by typing the URL http print_server_name prin
198. ed by right clicking If you right click the main portion of the Details pane you can select Add Counters which opens the Add Counters dialog box shown in Figure 5 Counters are the basic elements that track specific aspects of system performance The thousands of available counters are organized hierarchically as follows e Computer You can monitor performance of the local system default or of a remote system e Performance Object Any system component such as processor memory disk network protocol or service e Counter You use these objects as performance metrics related to the specific performance object on the specific computer selected Literally thousands of counters may be available for monitoring so take advantage of the Explain button in the Add Counters dialog box clicking Explain produces a description of the selected counter e Instance When an object occurs more than once on a computer you see instances For example a multiprocessor machine has instances for each processor when you select the processor object When you select the logical disk object you see instances for each drive volume on a system Often instances are numbered with the first instance being 0 the second instance 1 and so on Usually an additional instance provides the total for all the instances For example a dual MCP Exam 70270 Preparation doc 347 processor system has a Total which reflects the combination of processors 0
199. ed on as an administrator or a member of the Administrators group to complete the installation of certain Windows Update components or procedures If your computer is connected to a network network Group Policy settings may prevent you from updating any system files or drivers The Driver Rollback Feature Driver Rollback is a new feature of Windows XP If you encounter problems with a hardware device after you have installed an updated driver for it you can now easily revert back to the previously installed software driver for that device by using the Driver Rollback option To restore a device driver back to its previously installed version open Device Manager right click the device you are having trouble with and select Properties Click the Driver tab and then click the Roll Back Driver button as shown in Figure 2 Figure 2 The Driver tab on a hardware device s Properties dialog box provides the Roll Back Driver button option Network of Xircom CreditCard Ethemet 10 100 Modem 56 __ PIR General Advanced Driver Resources Network of Xircom CreditCard Ethemet 10 100 Modem 56 Driver Provider Microsoft Driver Date 7 1 2001 Driver Version 2 70 2 0 Digital Signer Microsoft Windows XP Publisher Driver Details To view details about the driver files Update Driver To update the driver for this device gt f the device fails after updating the driver roll pies bee back to the previously installed dr
200. ed the security templates and the ability to lock down the security of a system with a centralized group of settings The tool has evolved over time and has now come to be known as the Security Configuration and Analysis tool The tool is a snap in that is used on a computer by computer basis The tool allows for security analysis and configuration as well as development of security templates The secedit command can also be used to analyze and configure security settings to a computer After the tool is opened in an MMC as shown in Figure 6 you need to open one of the security templates into a database The idea is that you will bring the security template settings into the database for further analysis of the existing computer settings With the security template settings in a database you can easily run an analysis against the computer settings to see if the existing settings are in compliance with what the database has recorded Figure 6 is a result of one analysis Note that some settings are equal to or better than the database but some settings are not as secure as what the database indicates which are shown with a red x by them M File Action View Favortes Window Help amp oB A L Console Root E o 2 mny Configuration and Analysis A Enforce password history 24 passwords reme passwords remem 39 aonn Pokies EA Maximum password 498 42 days 42 days ne re EE Meienum password age 2 days O days yy Paes Lockout Poly BY Meemum pass
201. ed volumes MCP Exam 70270 Preparation doc 251 Upgrading Basic Disks to Dynamic Disks You use Windows XP s Disk Management console an MMC snap in to upgrade a basic disk to a dynamic disk To access Disk Management click Start All Programs Administrative Tools Computer Management Or simply right click the My Computer icon from the Start menu and select Manage You ll find Disk Management by expanding the Storage folder You must be a member of the local Administrators group to make any changes to the computer s disk management configuration For the upgrade to succeed any disks to be upgraded must contain at least 1MB of unallocated space Disk Management automatically reserves this space when creating partitions or volumes on a disk but disks with partitions or volumes created by other operating systems may not have this space available This space can exist even if it is not visible in Disk Management Before you upgrade disks close any programs that are running on those disks Windows XP requires this minimal amount of disk space to store the dynamic database which is maintained by the operating system that created it This is why it is not a good idea to dual boot between Windows XP and Windows 2000 or NET Server if you are using dynamic disks To change or convert a basic disk to a dynamic disk from the Disk Management console perform the following steps 1 Open the Disk Management tool 2 Right click the basic disk
202. efault User Profile checkbox to allow all new user accounts on the computer to take advantage of all the Regional and Language Options dialog box settings that you have configured MCP Exam 70270 Preparation doc 188 File Settings and Transfer Wizard The new File Settings and Transfer FAST Wizard is a special GUI version of the User State Migration Tool that has been available in the Windows 2000 Resource Kit The FAST Wizard makes it easier to move user configuration settings folders and files from one computer to another This wizard enables users to migrate Internet Explorer Outlook Express and Outlook settings store dial up connections phone and modem options accessibility settings classic desktop screen saver settings fonts folder options taskbar settings mouse and keyboard settings sound settings regional options Office settings Network Drives and Printers folders My Documents folder My Pictures folder Favorites folder Cookies folder common Office file types and transfer user specified files The FAST Wizard supports three types of transfer techniques e Via direct cable connection using an RS 232 serial port or using a parallel LPT port e Via floppy disk or other removable media such as Zip disks e Via other media or connections such as network drives or removable hard drives The old computer that you want to transfer settings from must be running one of the following Microsoft operating systems e Windows 95
203. eginning of TCP IP itself Classful addressing was adopted as RFC 791 and was the first major addressing scheme Three address classes were used for typical network communication These three ranges include A B and C class ranges The difference between each class was the number of bits that made up the class prefix For example an IP address of 10 1 1 1 would be in the Class A range because the first octet 10 starts with a prefix that is within the Class A range Table 1 shows the different classes and the corresponding prefix ranges You can quickly determine the class ranges by starting off with an octet of all zeros and turning on bits from the leftmost part of the octet range For a Class A range the starting number would be an octet of all zeros up to an octet with the first bit turned on 10000000 This would be a range of 0 to 127 The actual value of the octet with the first bit turned on is 128 which is the start of the next range Then the end of the next range would be up to the second bit turned on 11000000 So the Class B would be a range of 128 to 191 If you follow this pattern for the remaining ranges you will never be at a loss as to which range an IP address falls into When you see a reference to a Classful IP address scheme it is referring to an address scheme that does not break up these classes It is no surprise that these address ranges are already purchased due to the influx of the Internet If you want to get a
204. egional Options dialog box To configure Windows XP for multiple locations click the Location drop down arrow at the bottom of the Regional Options tab and choose a different country than the one listed under Standards and Formats Configuring Text Services and Input Languages You can add remove and configure support for input languages and associated keyboard layouts from the Languages tab on the Regional and Language Options dialog box From this tab you can add supplemental language support for East Asian languages and or add support for complex script and right to left languages Click the Details button to change the default input language to add MCP Exam 70270 Preparation doc 186 or remove Installed Services for input languages or to set preferences for the Language Bar and Key Settings as shown in Figure 15 Figure 15 The Text Services and Input Languages dialog box for the Regional and Language Options Control Panel applet Text Services and Input Languages Settings Default input language Select one of the installed input languages to use when you start your computer English United States US Installed services Select the services that you want for each input language shown in the list Use the Add and Remove buttons to modify this list E English United States a Keyboard US Finnish Keyboard Add Finnish French Canada Keyboard Preferences Language Bar Kep Settings As
205. elect the computer s response if this service fails First failure Restart the Service Second failure Run a Program Subsequent failures Restart the Computer Reset fail count after 0 days minutes J J Restart service after 1 Run program Program Browse Command line parameters C Append fail count to end of command line fail 1 MCP Exam 70270 Preparation doc 338 If you select Run A Program do not specify programs or scripts that require user input If you select Restart The Computer you can specify how long to wait before restarting the computer by clicking the Restart Computer Options button You can also create a message to send to remote users before the computer restarts The Recovery Console The Recovery Console is a startup option that provides you with a command line interface that enables you to repair system problems using a limited set of command line commands Using the Recovery Console you can start and stop services read and write data on a local drive including drives formatted as NTFS format drives repair a corrupted master boot record and perform many other administrative tasks This feature gives you maximum control over the repair process only advanced users and administrators should use it The Recovery Console is particularly useful if you need to repair your system by copying a file from a floppy or CD ROM to your hard drive It can also help you when yo
206. ell networks and Microsoft continues to add capabilities to connect to other companies network OSs as they become more common in the business marketplace Novell NetWare Connectivity When connecting to a Novell network the version of NetWare and connectivity requirements will determine the Windows XP configuration Of course we are all familiar with the protocol that is used to communicate with most of the Novell networks in existence IPX SPX Microsoft has renamed its version of this protocol to incorporate NetBIOS which it calls NWLink If you are running Novell NetWare 3 x or 4 x you will need to install NWLink on some if not all of your Microsoft clients for communication If you are running Novell NetWare 5 x then you can run TCP IP natively allowing for a limited number of protocols to be installed on the Microsoft clients Beyond the protocol you also need to consider the client redirector Since the NT days the Microsoft client redirector for a Novell network has been Client Service for NetWare CSNW This client allows Microsoft clients access to file and print sharing with NetWare servers When this client is installed the client also installs the NWLink protocol to function properly Another service designed to help the communication gap with NetWare is Gateway Service for NetWare GSNW This service is only available on Microsoft servers and functions as a proxy between the Microsoft network and the NetWare network I
207. em it fully supports the FAT FAT32 and NTFS file systems FAT and FAT32 Windows XP has full FAT also known as FAT16 and FAT32 file system support with the following conditions or specifications e Preexisting FAT32 partitions up to 2TB are supported in Windows XP e By design Windows XP allows you to create new FAT32 volumes of only 32GB or less e FAT volumes are limited to a maximum size of 4GB and can support a maximum file size of 2GB e FAT32 volumes can support a maximum file size of 4GB e You can install Windows XP onto a FAT FAT32 or NTFS partition Keep in mind that you have no local security for Windows XP unless you place the operating system on an NTFS partition e f you initially install Windows XP onto a FAT or FAT32 partition and then later use the Convert exe utility to convert the partition to NTFS default security settings are not applied to the systemroot folder or its subfolders The systemroot environment variable maps to the Windows XP system folder which by default is installed as the Windows folder located on the root of the designated boot drive Under Windows 2000 and previous versions of Windows NT the systemroot folder was named the Winnt folder by default The Windows XP NTFS File System Windows XP Professional inherits the Windows 2000 NTFS version 5 file system NTFS is Windows XP s native file system This version of NTFS includes capabilities such as support for very granular file a
208. emoved while running XP will behave strangely For example although the Start menu icons will be present the executables will have been removed MCP Exam 70270 Preparation doc 35 e Applications that were added while running XP will behave strangely This occurs because the restored image does not have the correct Registry values for these applications To successfully remove Windows XP Professional you simply need to go to the Add Remove Programs applet in the Control Panel Then select the Add Remove button associated with the Windows XP option that is under the list of installed software This enables you to uninstall Windows XP and return to the version of Windows 98 ME that you were running previously MCP Exam 70270 Preparation doc 36 Installation Options for Windows XP Professional Microsoft understands that many different installation needs exist and thus supplies many methods Windows XP keeps that tradition by offering multiple options for fresh installations Installation Methods Windows XP Professional has many different installation methods which are listed here Some of these methods are manual in nature requiring human intervention during the installation process Other methods require only minimal initial human intervention and are considered to be automated installation methods e Manual CD method e Network attended installations e Network unattended installations using an answer file Sysprep installation S
209. ened Automatic Caching Of Programs And Documents This setting is recommended for folders that contain read only data or for application programs that have been configured to be run from the network This option is not designed for sharing data files and file sharing in this mode is not guaranteed Older copies of files are automatically deleted to make room for newer and more recently accessed files Manual Caching Of Documents This is the default caching setting This setting requires network users to manually specify any files that they want available when working offline This setting is recommended for folders that contain user documents To ensure proper file sharing the server version of the file is always opened Click OK in the Caching Settings dialog box after making any configuration changes for offline access to the shared folder MCP Exam 70270 Preparation doc 76 Note The default cache size is configured as 10 percent of the client computer s available disk space You can change this setting by selecting Tools Folder Options from the menu bar of any My Computer or Windows Explorer window The Offline Files tab of the Folder Options dialog box displays the system s offline files settings as shown in Figure 1 Figure 1 The Offline Files tab of the Folder Options dialog box General View File Types Offline Files FAN Use Offline Files to work with files and programs stored on the 4 network even when you a
210. er O A redirection to a URL Local Path EA WINDOWS web tsweb C Script source access Log visits Read Index this resource CI Write C Directory browsing Application Settings Starting point lt Default Web Site gt Execute Permissions Scripts only Administering the Default FTP Site An administrator can modify the settings for the default FTP site by right clicking the site name and selecting Properties You can change the settings for a virtual directory by right clicking the directory name and selecting Properties You can create a new virtual directory for the default FTP site by right clicking lt Default FTP Site gt and selecting New Virtual Directory When the Virtual Directory Creation Wizard launches you assign a name to the new virtual directory You must also designate the path for the physical folder where the FTP files will be stored for the new virtual directory After you have entered this information you can complete the wizard thereby setting up a new virtual directory that users can access via the FTP address ftp computer_name virtual directory name Web Folders and the WebDAV Protocol You can share folders with other computers by making them available as Web Folders instead of or in addition to sharing them as network shared folders To share a folder on a Windows XP Professional system as a Web Folder right click the folder select Properties and click the Web Sharing tab Click the Add button to
211. er although the name itself can be longer e Cannot contain the following characters lt gt e Are not case sensitive although the user account s name property displays the case as entered User account passwords e Are recommended e Are case sensitive e Can be up to 127 characters although down level operating systems like Windows NT 4 and Windows 9x support only 14 character passwords e Should be a minimum of seven to eight characters e Should be difficult to guess and preferably should mix uppercase and lowercase letters numerals and non alphanumeric characters e Can be set by the administrator who can then determine whether users must can or cannot change their password or the user if the administrator has not specified otherwise Select the option User Must Change Password At Next Logon to ensure that the user is the only one who knows the account s password Select User Cannot Change Password when more than one person such as Guest uses the account Note The User Cannot Change Password option is not available when User Must Change Password At Next Logon is selected MCP Exam 70270 Preparation doc 126 The Password Never Expires option is helpful when a program or a service uses an account To avoid having to reconfigure the service with a new password you can simply set the service account to retain its password indefinitely Configuring Account Properties The information you can specify when cr
212. er where the folder resides and folder_name represents the actual name of the folder Answers a b c and d are all correct All of these methods are valid ways to create shared network folders What is the default setting for offline files under Windows XP Professional when acting as a server for other client computers A Manual caching of documents B Automatic caching of documents C Caching is disabled D Automatic caching of programs and documents Answer a is correct because manual caching of documents is the default setting for Windows XP Professional Answer b is incorrect because automatic caching of documents is not the default setting however it is an option Answer c is incorrect because the caching of offline files is enabled by default Answer d is incorrect because automatic caching of programs and documents is not the default setting however it is an option MCP Exam 70270 Preparation doc 119 A4 A5 Which of the following Local groups are installed automatically by Windows XP Professional Check all correct answers A Network Configuration Operators B Replicator C Authenticated Users D HelpServicesGroup E Remote Desktop Users fF Creator Group Answers a b d and e are all correct Answer c is incorrect because Authenticated Users is considered to be a built in security principal not a Local group Answer f is incorrect because Creator Group is also considered to be a built in securit
213. er b is correct The Offline Files feature also known as Client side Caching is disabled whenever Fast User Switching is turned on DNS settings are used to insure proper TCP IP name resolution so answer a is incorrect Answer c is incorrect because the Network Settings Wizard does not configure Offline File support A Windows XP Professional computer does not need to be a member of a domain for Offline Files to function therefore answer d is also incorrect MCP Exam 70270 Preparation doc 204 3 Alison always works on several Excel files and Word documents at the same time She s tired of having so many buttons cluttering her taskbar What can Alison do to improve the organization of all the buttons representing all of her open application programs on the taskbar A Enable Dualview display B Enable the Taskbar Switching option C Turn on the Group Similar Taskbar Buttons option in Control Panel Display Properties D Add the Quick Launch toolbar to the taskbar A3 Answer c is correct By enabling the Group Similar Taskbar Buttons feature all running application buttons will be grouped together on the taskbar Answer a is incorrect because Dualview is related to the Multiple Monitor option that supports two displays from one video output port Answer b is incorrect because no Taskbar Switching option exists The Quick Launch toolbar adds icons to the taskbar for starting application programs not for grouping program buttons that ar
214. er cannot actually read the folder Security Options In the Security Options node are a number of useful security settings This node highlights one of the advantages of policies because while many of these settings are accessible elsewhere in the user interface for example you can specify driver signing in the System applet a policy enables you to configure all of those settings from all the tools and applets into a centralized location Some particularly useful options to be familiar with are the following e Clear the Virtual Memory Pagefile when the system shuts down By default the pagefile is not cleared and could allow unauthorized access to sensitive information that remains in the pagefile e Do not display last username in logon screen This option forces users to enter both their username and password at logon By default the policy is disabled and the name of the previously logged on user is displayed e Number of previous logons to cache This policy will limit the number of cached profiles that are on a system Not only will this clean up the hard drive space on a system but also if there are no cached profiles users will be forced to access a domain controller when logging on to the domain instead of using cached credentials MCP Exam 70270 Preparation doc 137 Account Policies Account policies control the password requirements and how the system responds to invalid logon attempts The policies you can speci
215. er version Compatibility mode Run this program in compatibility mode for Windows NT 4 0 Service Pack 5 v windows 95 Windows 98 Windows Me B Windows NT 4 0 Service Pack 5 Windows 2000 E Run in 640 x 480 screen resolution Disable visual themes Learn more about program compatibility MCP Exam 70270 Preparation doc 177 e System modes These include all the end user modes listed plus a few other options that independent software vendors ISVs system administrators and other IT professionals can use to control the behavior of their applications These include the Limited User Account security mode and the Profiles mode The Limited User Account mode is used when an application must operate under a limited security context for a particular user The Profiles mode can be used to assist an application in determining how to interact with Windows XP user profiles They can all be accessed and set using either the QFixApp or CompatAdmin tool which are available from Microsoft e Custom modes These modes can be created by a system administrator for a particular application or set of applications using the CompatAdmin tool Once created custom modes can apply only to the specific application that the user is installing and can use any specific fix in that package Configuring Application Compatibility Settings You can work with application compatibility settings from the GUI in one of two ways use the Compatibility
216. erform the following steps on a Windows 2000 server or on a Windows NET server 1 Create a shared folder on the network server to enable home folders 2 Run the Active Directory Users and Computers MMC snap in right click the name of the user and select Properties Go to the Profile tab and click the Connect radio button 3 Click the drop down arrow and choose an available drive letter 4 Type in the Uniform Naming Convention UNC path to the user s home folder for example server1 homedir dan Microsoft suggests that users store their data in My Documents instead of home folders You can then enable a Group Policy under Active Directory to redirect My Documents from the local computer to a network file server The Group Policy also activates offline caching of My Documents to the user s local computer Group Policy as well as Offline Files and Folders are covered later in this chapter MCP Exam 70270 Preparation doc 156 Roaming User Profiles If you have users who move from computer to computer you can configure their profiles to move with them A roaming profile is stored on a network server so that the profile is accessible regardless of which computer a user logs on to anywhere within the domain You can put the profile on the server in two ways You can copy a profile that is stored locally on a client computer to the profile server the next time the user logs on to the computer Or you can create on a client computer a
217. ermissions Basic permissions are actually comprised of predefined advanced NTFS permissions and are applied per user and per group Individual file permissions differ slightly from the permissions that apply to folders Table 3 highlights the basic permissions available for files whereas Table 4 outlines the basic permissions available for folders Table 3 Basic NTFS security permissions applicable to files Permission Description Full Control Allows denies full access to the file Includes the ability to read write delete modify change permissions and take ownership of the file Modify a the ability to read write delete modify and read permissions for the file Read amp Allows denies specified users and groups the ability to execute Execute the file and read its contents read its attributes and extended attributes and read its permissions Read Allows denies the same permissions as Read amp Execute except for Execute File Write Allows denies the ability to write data to the file create files and append data and write attributes and extended attributes MCP Exam 70270 Preparation doc 83 Table 4 Basic NTFS security permissions applicable to folders Permission Full Control Description Allows denies full access to objects within the folder Includes the ability to read write delete modify change permissions and take ownership of the folder Allo
218. ermissions always win As you can see conflicting permissions may make it difficult to decipher which permissions users are granted when they are accessing files over the network Therefore the best practice is to place all shared network data and applications on NTFS drive volumes and set the appropriate security permissions for users and groups at the NTFS level Do not change the default shared folder permissions leave them at Full Control for the Everyone group The most restrictive permissions apply so all NTFS permissions flow through the network MCP Exam 70270 Preparation doc 89 share NTFS security settings can then apply equally to both local users and network users and administrators have to manage only one set of permissions Users and Groups Local Accounts vs Domain Accounts In Windows networking environments user accounts and group accounts always participate in one of two security contexts workgroup security also known as peer to peer networking and domain security Workgroup security is the default security context for individual and networked Windows 2000 Professional and Windows XP Professional computers that are not members of a Windows domain Workgroups are logical groupings of computers that do not share a centrally managed user and group database Local users and groups are managed from each computer s Local Users And Groups folder within the Computer Management Console You must maintain users and groups sepa
219. ers versus moving files and folders The standard Windows XP Xcopy exe command line utility offers O and X options that retain an object s NTFS permissions in addition to inheriting the destination folder s permissions The X switch also retains any auditing settings which are discussed later in this chapter To retain only an object s source permissions without inheriting any permissions from the destination folder use the Scopy exe tool or the Robocopy exe tool from the Windows 2000 Professional Resource Kit or the Windows 2000 Server Resource Kit MCP Exam 70270 Preparation doc 96 Viewing Effective Permissions Prior to Windows XP there was no simple way to determine quickly which effective permissions a user actually had by evaluating implicit permissions against explicit permissions and by comparing a user s own assigned permissions to his or her inherited permissions from his or her group memberships Now under Windows XP an easy method exists for determining effective NTFS permissions right from the Advanced Security Settings dialog box To display effective permissions for a user or a group perform the following steps 1 Right click an NTFS folder and select Sharing And Security 2 Click the Security tab and then click the Advanced button Table 6 NTFS permissions that are retained or inherited when you move and copy files and folders Type of Transfer Effective Permissions after Move or Copy Moving wi
220. es it is best to control the ACL to the answer file not the image folder This will still allow users or administrators access to the installation files but not the answer file that controls the listing of the additional images e Install another CD based image to the RIS server This will be important if you will be supporting multiple OSs such as Windows 2000 and XP Professional e Create additional images that contain the OS as well as any necessary applications and configuration RIS installs a utility called Riprep exe that you can use to create images of the OS and any installed applications The functionality of Riprep exe is similar to that of a third party disk imaging application The major benefit of using a Riprep image is that you can include software in the image instead of having to wait for SMS or GPO software deployment to install the applications However Riprep exe has some limitations It can only make an image of the C partition of a computer If a computer contains C and D partitions only the C partition will be part of the image Also when you apply the image to a computer via RIS any existing partitions are deleted The entire hard drive is repartitioned as a single partition and then is formatted with NTFS If you can work within those limits you can easily configure and deploy Riprep exe images Perform the following steps to create a Riprep exe image Connect the computer that you are imaging to the network
221. es That Are Not Digitally Signed Mark the checkbox to include subfolders Click the Logging tab to make any changes for the log file and then click OK Note the log file name Sigverif txt 6 Click Start to run the utility oo eet Configuring Driver Signing Options from the GUI Windows XP offers a good degree of control over whether users can install signed or unsigned drivers or both for a chosen device Signed drivers are software device drivers that have been tested by Microsoft for compatibility with Windows XP or other versions of Windows Microsoft embeds a digital signature into each device driver that successfully passes its compatibility test Therefore unsigned drivers are drivers that either have not been tested or that are actually not compatible with specific versions of Windows To change the system s driver signing options right click My Computer select Properties click the Hardware tab and click the Driver Signing button Select one of the following actions for Windows XP to take when you attempt to install an unsigned device driver as shown in Figure 3 e gnore Selecting this setting ignores whether a driver is signed or not allowing the user to proceed with the driver installation e Warn Selecting this setting issues a dialog box warning if an unsigned driver is encountered during a device installation It gives the user the option of continuing with the installation or terminating the device s setup
222. es and folders that have changed during the day Backup Strategies Backup strategies generally combine different backup types Some backup types require more time to create the backup A normal backup takes the most time to create because it backs up all selected files however it creates a baseline or complete backup The second backup could be incremental or differential the result would be the MCP Exam 70270 Preparation doc 327 same The third and subsequent backups are where the difference starts to be significant If the second and third backups are differential the third backup includes all files changed since the normal backup If the second and third backups are incremental the third backup includes only files changed since the second incremental backup So why wouldn t you just do a normal backup and then do incremental backups until the end of time Because incremental backups take longer than a differential backup to recover Imagine recovering a machine that had a normal backup one year ago and an incremental backup every week since To recover that system after a catastrophe you would have to restore the normal backup and then restore 51 incremental backups If you had used differential backups you would have to restore only the normal backup and the most recent differential backup Therefore you should balance the cost of backup time against the cost of recovery time Also factor in the media required to
223. es force will access the corporate LAN via Virtual Private Networking and connect to a Windows 2000 Advanced Server running RRAS You instruct the remote users on how to configure their workstations to use the corporate network via VPN A few days later one of the remote users calls you explaining that he cannot access the Internet when he is connected to the corporate LAN How should you resolve the issue A Clear the checkbox Use Default Gateway On Remote Network on the General tab of the TCP IP dialog box B Ensure that the checkbox Use Default Gateway On Remote Network on the General tab of the TCP IP dialog box is checked C Ensure that the checkbox Allow Other Network Users To Connect Through This Computer s Internet Connection on the Internet Connection Sharing section on the Advanced Dial Up properties sheet is checked D Clear the checkbox Require Data Encryption Disconnect If None on the Security tab of the VPN Properties dialog box Answer a is correct The checkbox applies when you are connected to a local network and a dial up network simultaneously When checked data that cannot be sent on the local network is forwarded to the dial up network Answer b is incorrect because the browser is using the remote server as its gateway which is incorrect and will not be able to connect to the Internet Answer c is incorrect because the issue is about connecting to remote computers not computers connecting to the user s computer
224. es the amount of physical RAM installed in the computer You can configure the paging file to be placed on other volumes or to be split across multiple volumes in which case there will be a Pagefile sys file on each selected volume The total size of the paging file is considered to be the sum total of all the paging files that the system uses You can also MCP Exam 70270 Preparation doc 353 configure the paging file s Initial Size the space created initially by the VMM and reserved for paging activity and its Maximum Size a setting that can permit the VMM to expand the paging file to a size greater than the Initial Size You can optimize paging by performing the following e Remove the paging file from the system and boot partitions The system partition is technically the partition that is used to start the system it contains the NTLDR file and the boot sector To make things confusing the boot partition contains the operating system and is indicated by the variable systemroot Luckily most computers are configured with Windows XP on the C drive the first partition making the boot partition the system partition and systemroot all equal to C To remove the paging file from a partition set its Initial Size and Maximum Size to zero 0 and click the Set button e Configure the paging file to reside on multiple physical disks and configure the Initial Size and Maximum Size identically on all drives The paging subsystem then
225. ese cases the administrator can only react and identify undesirable code as it is encountered Companies with loosely managed clients would fall into this model The following scenarios are examples of this case Lightly managed personal computers 7 Moderately managed personal computers MCP Exam 70270 Preparation doc 145 Software Identification Rules An administrator identifies software through one of the following rules Hash rule A Software Restriction Policy s MMC snap in allows an administrator to browse to a file and identify that program by calculating its hash A hash is a digital fingerprint that uniquely identifies a program or file A file can be renamed or moved to another folder or computer and it will still have the same hash Path rule A path rule can identify software by a full path name such as C Program Files Microsoft Office Office excel exe or by the path name leading to the containing folder such as C Windows System32 This would refer to all programs in that directory and its subdirectories Path rules can also use environment variables such as userprofile Local Settings Temp Certificate rule A certificate rule identifies software by the publisher certificate used to digitally sign the software For example an administrator can configure a certificate rule that allows only software signed by Microsoft or its IT organization to be installed Zone rule A zone rule identifies software that come
226. esktop minimizes all windows even modal dialog boxes Internet Explorer and Windows Media shortcuts onto the Quick Launch Pad You can add or remove shortcuts simply by dragging and dropping them on or off the Quick Launch toolbar e New Toolbar Enables you to add your own items to a custom toolbar for placement on the taskbar Wireless Link The Wireless Link applet enables you to control infrared image transfer and wireless hardware settings for your computer s infrared port if available MCP Exam 70270 Preparation doc 173 Troubleshooting and System Settings Windows XP sports several new and enhanced troubleshooting and system configuration utilities By combining the best of Windows 9x and Windows NT 2000 Microsoft now integrates into one product tools that had only been available under Windows 9x and other utilities that had only been available under Windows NT 2000 The MSCONFIG EXE Utiilty The MSCONFIG EXE tool has been available under Windows 98 and Windows ME but never under Windows NT 2000 MSCONFIG can be a very useful tool because it combines several important configuration settings into one central utility By default no preconfigured icon exists for this tool You can launch it from a command window or from the Start Run box simply by typing MSCONFIG and clicking OK The file itself is located in SystemRoot windows pchealth helpctr binaries A user does not need administrative privileges to run this progr
227. ess communicate its capabilities and discover the presence and capabilities of other devices completely automatically Devices can subsequently communicate with each other directly further enabling transparent peer to peer networking with no user intervention The scope of UPnP is large enough to encompass many exciting implementations such as home automation printing and imaging audio and video entertainment kitchen appliances and automobile networks UPnP takes advantage of open standard protocols such as TCP IP HTTP and XML enabling it to seamlessly fit into existing networks Because UPnP is based on a distributed open network architecture it is not dependent on any specific operating system or programming language UPnP does not require the use of specific APIs application programming interfaces calls to operating system functions that applications must use Operating system developers are free to create their own APIs that will meet their customers needs Devices on a UPnP network can be connected using any type of connection including radio frequency RF wireless phone lines power lines IrDA Infrared Ethernet LAN and IEEE 1394 FireWire In other words any medium that can be used to connect network enabled devices together can enable UPnP An important issue to consider is whether the network connection being utilized supports the bandwidth required for the intended use Installing Configuring and Mana
228. ess among two or more potentially correct answers reread the question Try to picture how each of the possible remaining MCP Exam 70270 Preparation doc 26 answers would alter the situation Be especially sensitive to terminology sometimes the choice of words remove instead of disable can make the difference between a right answer and a wrong one Only when you ve exhausted your ability to eliminate answers but remain unclear about which of the remaining possibilities is correct should you guess at an answer An unanswered question offers you no points but guessing gives you at least some chance of getting a question right just don t be too hasty when making a blind guess Note If you re taking a fixed length or a short form test you can wait until the last round of reviewing marked questions just as you re about to run out of time or out of unanswered questions before you start making guesses You will have the same option within each case study testlet but once you leave a testlet you may not be allowed to return to it If you re taking an adaptive test you ll have to guess to move on to the next question if you can t figure out an answer some other way Either way guessing should be your technique of last resort Numerous questions assume that the default behavior of a particular utility is in effect If you Know the defaults and understand what they mean this knowledge will help you cut through many Gordian knots Ma
229. ess automatically To manually set up a Windows XP Professional computer with a static IP address for the TCP IP network protocol select Start Control Panel Network Connections and then select the Local Area Connection that you want to configure After the window appears click the Properties button If TCP IP is not currently installed follow these steps 1 Click Install from the Local Area Connection s Properties dialog box 2 Click Protocol and then click Add 3 Click Internet Protocol TCP IP and then click OK 4 Restart the computer To configure the necessary settings so that TCP IP can communicate with other computers and devices over the network follow these steps 1 Click Internet Protocol TCP IP and then click Properties 2 Click Use The Following IP Address 3 Type the IP Address Subnet Mask and Default Gateway 4 Type the proper IP address for a Preferred DNS Server and an Alternate DNS Server if any 5 Click the Advanced button to add additional IP addresses and default gateways You can also add edit or remove DNS server address information and you can change other DNS settings You can specify IP addresses for any WINS servers on the network enable NetBIOS name resolution using an LMHOSTS file and enable or disable NetBIOS over TCP IP You can also set up IPSec and TCP IP filtering as optional settings MCP Exam 70270 Preparation doc 301 from the Advanced TCP IP Settings Properties sheet 6 Cli
230. ess to network resources Computer name xppro Full computer name xppro Member of O Domain Workgroup WORKGROUP MCP Exam 70270 Preparation doc 50 Joining a Domain For most environments that will be using Windows XP Professional it will be better to have the computer join a domain Unlike the workgroup option the domain option keeps the list of users centrally on the domain controllers This allows for easier tracking and access to resources because a single username exists for each user in the entire domain The domains that you can join include Windows NT and Windows 2000 soon to include Windows NET To join a domain you still need to have the credentials that you did in previous Microsoft OSs e Local administrator privileges to the Windows XP Professional computer e Username and password of a domain type administrator with permission to Create Computer Accounts in the OU or domain e Account operators e Domain Admins e Enterprise Admins If you want to add the computer to the domain after the installation you would use the interface that is shown in Figure 2 If you want to join the domain during the installation of the OS you need to supply the credentials for the domain administrative account that meets the criteria in the preceding list Both attended and unattended installations can have the computer join the domain during the installation MCP Exam 70270 Preparation doc 51 Using the USMT
231. essenger service inside of Windows XP The popularity of Microsoft Instant Messenger is nothing new to computer users The tool that Microsoft placed into the Windows XP default configuration replaces MSN Messenger Of course MSN Messenger is the tool that you will continue to use on your pre Windows XP clients If you are a NetMeeting user you will also be able to switch over to Windows Messenger for your collaboration and communication needs If you have not used MSN Messenger before you will most likely become very familiar with the application as soon as you get your XP client running Windows Messenger allows you to communicate with other users on the Internet as well as share files The following is a list of functions that you can perform with Windows Messenger e Chat with employees clients or friends who are also online e Use the contact list and notification capabilities to determine whether other employees clients or friends are online This reduces the time spent attempting to contact someone who is not available e Communicate with employees clients or friends using audio and video conferencing e Make voice calls using the built in capabilities of the messenger application e Communicate to cell phones and pagers by sending text messages e Transfer files and documents quickly and easily e Share a whiteboard or program online to collaborate with employees clients or friends To get Windows Messenger up and runnin
232. essional Security Log You view the security log with the Event Viewer snap in of the MMC By default auditing is turned off Before you enable auditing you should formulate an audit policy to determine which workstations will employ auditing and which events will be audited on those systems When planning the events to audit you also need to decide whether you will audit successes and or failures for each event Auditing for the local Windows XP system is enabled through the Local Security Settings snap in of the MMC shown in Figure 12 You must initially turn on auditing from the Local Security Settings Console for each type of event that you want to monitor MCP Exam 70270 Preparation doc 99 Figure 12 The Local Security Settings Console E Local Security Settings E Security Settings CD Account Policies 2 Audi account logon events No auditing Local Policies amp 3 Audit account management No auditing Ca Audit Policy Bz Audit directory service access No auditing C User Rights Assignment CQ Security Options C Public Key Policies Software Restriction Policies amp IP Security Policies on Local Computer Bg Audit logon events Success Failure Sz Audit object access Failure fz Audit policy change No auditing 83 Audit privilege use No auditing i Audit process tracking No auditing 3 Audit system events No auditing You can audit several types of events such as the following e File and fo
233. estored exactly as you left it Standby is useful for conserving battery power in portable computers Standby mode does not save your desktop state to disk so if a power failure occurs while the computer is in Standby mode you can lose unsaved information If an interruption in power occurs information in memory is lost If this concerns you using Hibernate mode or completely powering off might be better choices to consider Put your computer in Hibernate mode When you restart your computer your desktop is restored exactly as you left it It takes longer to bring your computer out of Hibernate mode than out of Standby Put your computer in Hibernate mode when you will be away from the computer for an extended period of time The Hibernate feature saves everything in memory to disk turns off your monitor and hard disk and then turns off your computer Managing Battery Power on a Portable Computer Using the Power Options applet in the Control Panel you can reduce consumption of battery power on your portable computer and still keep the computer available for immediate use You can view multiple batteries separately or as a whole and set alarms to warn you of low battery conditions Managing Power When Installing a Plug and Play Device Plug and Play works with Power Options in the Control Panel to be sure that your system runs efficiently while you are installing or removing hardware devices Power Options controls the power supply t
234. et Information Services BB DEW local computer OMEN J vti r wti_og an Mpt E _vti_sorign O vtibt C FTP Stes EI Defautt FIP Ste gt Defaut SMTP Virtual Sarver Additional HTML based documentation on IIS administration is available by pointing to http localhost in your Web browser as shown in Figure 17 Figure 17 The Getting Started Web page for IIS HTML based help documentation E http Mocahostfocabstart aip ew Windows F EA D Microsoft internet information Services 5 1 Documentation Microsoft internet xptorer f nx Your Web service is ave ronning You do net currently have defaul Any wters attempting to connect t curremily receiving an followang fins as possible detault detaut him def ault_asp index himod ewtsts Te add documents to your default E inetpeb wewreot Welcome to TIS 5 1 Internet Informaten Services 115 5 1 foe Mocroso Windows XP Professional brings the power of Web comouting to Windows Wah IS rou can cantly share fler and printers or you can creste spphcatons to securely pubbsh idtormaten on the Web to improve the way your erganzaton shares wtormamon 115 is a secure plettoem for buiding and deplorng e commerce sohsbons sad mauon erical sepbcabons to we Wed Using Windows XP Professional wah ITS stated provides a personel and Aeutlanne eed bases ee ose teed MCP Exam 70270 Preparation doc Fle Sm View Favortes Toots Heb y i J i isi
235. etrieval system without the written permission of the publisher except where permitted by law Published by CTF Services Limited 19 Regent St Timaru 7910 New Zealand Distributed by www ebooksctf co nz MCP Exam 70270 Preparation doc 388
236. etwork Places To use the My Network Places window perform the following steps 1 2 3 NOAM oo Click Start My Network Places In the right hand Network Tasks section click the Add A Network Place link which reveals the Add Network Place Wizard Click Next click Choose Another Network Location and then click Next again Enter the Internet Or Network Address or click Browse to locate the network share by viewing the available network resources You can connect to one of the following types of resources A shared folder using the following syntax server share A Web folder using the following syntax http webserver share An FTP site using the following syntax ftp ftp domain name Click Next to enter a name for the network place or accept the default name Click Next again to view a summary of the Network Place that you are adding Click Finish to establish the connection to the shared folder provided that you have the proper permissions A list of network resources to which you have already connected is then displayed within the My Network Places window MCP Exam 70270 Preparation doc 74 For Command Line Junkies The Net Share and Net Use Commands You can create and delete shared folders from the command line instead of using the GUI Windows XP offers several Net commands that you use from the command line You can view all of the available Net commands by typing Net at a command prompt window To crea
237. etwork card between the two different networks You can confirm that the bridge is working properly by running the ipconfig command The results of the command should indicate that the network bridge is the only connection and that it now has the IP address and TCP IP configurations needed to communicate with both networks It is possible to add more than two network cards to a network bridge Actually it is possible to add as many network cards as your computer will support After the network card is added to the network bridge it is located under the Network Bridge section in the Network Connections properties interface as shown in Figure 4 Figure _ 4 Network bridge interface showing the different network connections that are part of the bridge Network Connections OXR p Fie Edt yew Favorites Toos Advanced Heb seach Folders Xx 19 fie Network Connections Box Name Type Status Device Name Dishup Crug Disconnected Frewaled Lucent Win Modem amp Sprway com_DO_NOT_EDIT Disconnected Lucent Win Modem Network Bridge az Network Bridige Network Bridge 3 Network Bridge Enabled MAC Bridge Miniport L Lotad Area Connection Network Bridge Enabled Orxiged xrcom CardBus Ethernet I lt 1394 Connection Network Bridge Enabled Bridged 1394 Net Adapter Wizard SiNew Connection Wizard Network Setup Vitrard lt MCP Exam 70270 Preparation doc 310 Windows Messenger It is no surprise that Microsoft put a m
238. f data dictate Windows XP requires that all logical drives or other volumes in an extended partition be deleted before you can delete the extended partition MCP Exam 70270 Preparation doc 257 Dynamic Volumes What were called sets such as mirror sets and stripe sets under earlier operating systems are called volumes such as mirrored volumes and striped volumes in Windows 2000 and Windows XP Dynamic volumes are the only type of volume you can create on dynamic disks With dynamic disks you are no longer limited to four volumes per disk as you are with basic disks You can install Windows XP Professional onto a dynamic volume however these volumes must contain the partition table which means that these volumes must have been converted from basic to dynamic under Windows XP or Windows 2000 Windows XP cannot be installed onto dynamic volumes that have been created under Windows XP directly from unallocated space Only computers running Windows XP Professional the Windows 2000 family of operating systems or the Windows NET Server family of products can access dynamic volumes The five types of dynamic volumes are simple spanned mirrored striped and RAID 5 Windows XP Professional only supports simple spanned and striped dynamic volumes You must be an administrator or a member of the Administrators group to create modify or delete dynamic volumes Simple Volumes A simple volume is made up of disk space on a single physical
239. f this service is implemented the clients running Windows XP only need TCP IP installed The server running the service will need both TCP IP and NWLink installed to communicate with both the Microsoft network and the NetWare network CSNW and GSNW do not function with TCP IP even with NetWare 5 x servers These services are designed to function only with the IPX SPX protocol suite Another important aspect of communicating with a NetWare network is the frame type that is associated with the IPX SPX protocol To ensure communication is upheld be sure to check with the following list of frame types when configuring your Windows XP Professional clients e Netware 2 x through 3 11 802 3 e Netware 3 12 and later including 4 x and 5 x 802 2 MCP Exam 70270 Preparation doc 308 An option is available to set the frame type to autodetect but it will only detect one type at a time The order in which the frame types are detected is 802 2 802 3 ETHERNET ll and 802 5 The frame type 802 5 is used with Token Ring and is not usually used Unless you are running some form of metadirectory or software to synchronize the account information between Microsoft and NetWare you will need to change your password for the NetWare environment separately from the Microsoft environment One option is to use the SETPASS EXE command from the Windows XP Professional client The other option is to change the NetWare password from the Change Password option avai
240. following steps to install the RIS service 1 2 3 4 Log on to the server as Administrator Open the Control Panel select Start Settings Control Panel and double click Add Remove Programs Click the Add Remove Windows Components button and select the Remote Installation Services checkbox Insert the Windows 2000 Server CD ROM The service is copied to the server and you are prompted to reboot the server after the service has been installed Now that you have installed RIS you must run risetup exe to copy the initial CD based image of Windows XP Professional on the RIS server and configure the RIS server to respond to clients requests The initial image is simply a copy of the 1386 folder found on the Windows XP Professional CD ROM Perform the following steps to configure RIS Select Start Run type risetup exe in the Run dialog box and click OK The Remote Installation Services Setup Wizard presents a welcome page that reminds you of some of the RIS prerequisites Click the Next button By default the wizard offers to create the RIS folder structure and files on the C partition even though the wizard itself reminds you that this can t be done Choose a drive letter for a non system partition to place the files into and then click the Next button The next dialog box asks whether the RIS server should respond immediately to client requests before you have even finished the configuration Leave the checkbox desele
241. formance Monitoring troubleshooting and optimizing performance are some of the most important tasks you will perform as an administrator of Windows XP Professional systems Managing performance involves several steps Create a baseline Proactively monitor Evaluate performance Identify potential bottlenecks Take corrective action Monitor the effectiveness and stability of the change Return to Step 2 De Oe OP N gt Creating a Baseline One of the most important and most often overlooked steps of managing performance is creating a baseline A baseline is a range of acceptable performance of a system component under normal working conditions Baselining or establishing a baseline requires that you capture key counters while a system performs with normal loads and all services running Then you can compare future performance against the baseline to identify potential bottlenecks troubleshoot sudden changes in performance and justify system improvements A baseline should cover a relatively large timeframe so that it captures a range of data reflecting acceptable performance The sample interval for the log should be somewhat large as well so the baseline log does not become enormous You should generate baselines regularly perhaps even once a month so that you can identify performance trends and evaluate bottlenecks pertaining to system and network performance If you follow these guidelines you will produce a baselin
242. fresh frequency for all monitors to 60Hz You may need to double check this setting in your Unattended Installation script file commonly called Unattend txt Again set it to 60Hz Multiple display support in Windows XP presents some challenges when you are dealing with some older applications and DOS applications If you start a DOS application on your multiple monitor Windows XP machine and then both of your screens flicker and completely go dark you can fix the problem without much difficulty Multiple display support allows you to adjust the display settings so that your application runs and is viewable on both monitors First you may need to restart your system Then you select Safe Mode at the F8 startup menu Finally after you can see the contents of your desktop you can configure the DOS application to run in a window and change your Display settings from Default to Optimal MCP Exam 70270 Preparation doc 230 Removable Storage Support Windows XP Professional provides removable storage services for applications and network administrators that enhance the sharing and management of removable media hardware like backup tape drives optical discs and automated robotic media pool libraries Removable storage and media support in Windows XP precludes the need for third party software developers to write custom application programs to support each different type of removable media device In addition removable storage services allow org
243. from my old computer To start the process of saving data you need to be logged on as the user that will be migrated During the archiving of the old system you will have an opportunity to customize exactly which portion of the system files and settings you want saved Figure 4 over the page shows the interface for customizing the settings files folders and file types MCP Exam 70270 Preparation doc 53 Figure 4 Customization of the FAST Wizard files and settings Files and Settings Transfer Wizard Select custom files and settings The following list displays the folders file types and files to be transferred to your new computer To add additional items click the appropriate Add button To remove an item select it and then click Remove s a Accessibility Add Setting Adobe Acrobat Reader Command Prompt settings Add Folder Display properties Intemet Explorer settings Add File Microsoft Messenger Microsoft Netmeeting Add File Type Microsoft Office Mouse and keyboard MSN Explorer Network pnnter and dnves v After you have the old system archived you can install the new Windows XP Professional computer After the computer is installed you simply need to start up the FAST Wizard and download the information to the new XP system Note If you want to run the FAST Wizard for multiple users you need to perform these steps multiple times USMT from the Command Line If you work fo
244. fy include the following Maximum password age Specifies the period of time after which a password must be changed Minimum password length Specifies the number of characters in a password Passwords can contain up to 127 characters however most passwords should not exceed 14 characters Passwords must meet complexity requirements This policy if in effect does not allow a password change unless the new password contains at least three of four character types uppercase A through Z lowercase a through z numeric 0 through 9 and nonalphanumeric such as Enforce password history The system can remember a specified number of previous passwords When a user attempts to change his or her password the new password is compared against the history if the new password is unique the change is allowed Minimum password age Specifies the number of days that a new password must be used before it can be changed again Account lockout threshold Specifies the number of denied logon attempts after which an account is locked out For example if this is set to 3 a lockout occurs if a user enters the wrong password three times any further logon attempt will be denied If this is set to 0 there is no lockout threshold Reset account lockout counter after Specifies the number of minutes after which the counter that applies to the lockout threshold is reset For example if the counter is reset after five minutes and the acco
245. fy or delete existing network connections from this window To create a new network connection you would simply start the New Connection Wizard from the Network Connections window During this wizard you can create connections for your LAN dial up VPN or direct connection Figure 3 shows the wizard in action including some of the options that are available Figure 3 New Connection Wizard options for connecting to a workplace New Connection Wizard Network Connection How do you want to connect to the network at your workplace Create the following connection Dial up connection Connect using a modem and a regular phone line or an Integrated Services Digital Network ISDN phone line Virtual Private Network connection Connect to the network using a virtual private network YPN connection over the Intemet As soon as you complete the New Connection Wizard for a remote access connection a Connect dialog box appears It prompts you for a User Name and a Password Click the Connect button to initiate the connection Click the Properties button to modify the remote connection s properties Table 1 Required encryption levels Interface Text Encryption Level MPPE IPSec Require Encryption Standard 40 bit 56 bit DES Maximum Strength Encryption 128 bit 168 bit 3DES You can modify the properties of any network connection listed in the Network Connections window by right clicking the connection s ico
246. g you need to get a NET Passport account established You can either establish a Passport with a free MSN or Hotmail account or link it to an existing email account that you own The Passport information can be saved with your user account either as a domain or local account After you have the information stored with your user account you will have pass through authentication with a single username and password One way to ask for Remote Assistance is directly through Windows Messenger menu options This new Windows Messenger is compatible with the older MSN Messenger for the capabilities of MSN Messenger However if you are attempting to communicate with a NetMeeting user you will find that it is not compatible If you still need to have NetMeeting on your XP Pro clients to communicate with others who are running NetMeeting you can access NetMeeting from the XP Pro CD MCP Exam 70270 Preparation doc 311 Remote Desktop Remote Desktop is brand new for Windows XP Microsoft wanted to allow you to access a session that is running on your computer while you are sitting at another computer This is a great solution for those employees who want to connect to their computer at work while working from home You will have access to applications files and other network resources from the comfort of your home You will even be able to see the existing applications that were left open on your desktop Configuring Remote Desktop To get
247. g Service Packs SPs Using Group Policy and Slipstreaming Installing SPs in Windows NT is a very time consuming process First you have to install the OS and then you must apply the SP Windows XP allows you to incorporate a SP with the installation files Combining the latest SP with the Windows XP installation files enables you to install them as one In Windows NT however if you installed a new service after applying an SP you had to reapply the SP for the new service to gain any benefits the SP might have to offer Additionally you had to reinstall some services after you applied an SP Thankfully you don t have to contend with these situations in Windows XP Group Policy Deployments of SPs One great feature of Windows 2000 and XP is the ability to control the computing environment via Group Policy One control method is the deployment of software through Group Policy Objects GPOs A new option is provided for deploying service packs through MSI files and GPOs This option works best when you assign the service pack to computers in the environment This way you get a consistent installation of the SP regardless of which user logs on to the computer Slipstreaming SPs The process of combining the Windows XP installation files with an SP is called slipstreaming You apply an SP to a distribution share of the installation files by executing update exe s If you install Windows XP using the slipstreamed distribution the installat
248. g and then restarting the computer When you run the Driver Verifier tool Verifier exe from the command line it offers several options for troubleshooting drivers For example if you run the command verifier all it verifies all the drivers installed on the system See the Microsoft Knowledge Base article Q244617 for more information Updating Your System Files Manually from the Windows Update Web Site Windows Update is a Microsoft database of items such as drivers patches help files and Internet components that you can download to keep your Windows XP installation up to date Using the Product Updates section of Windows Update you can scan your computer for outdated system files drivers and help files and automatically replace them with the most recent versions To update your system files using Windows Update follow these steps 1 Go to Windows Update at http Awindowsupdate microsoft com This Web site address may change at any time because Microsoft is prone to shuffling Web page locations frequently You can also open Windows Update by clicking Start All Programs Windows Update Click Yes if you are prompted about whether to allow ActiveX or other components from Microsoft Corporation to be downloaded to your system Click Scan For Updates Follow the on screen instructions to review and install all or some of the applicable updates to your system MCP Exam 70270 Preparation doc 215 You may be required to be logg
249. gement console You must use Windows XP Explorer to format a dynamic volume as FAT or FAT32 Table 1 compares the terms used with basic and dynamic disks Upgrading Disks When you perform a new installation of Windows XP Professional or when you perform an upgrade installation from Windows 98 Windows ME or Windows NT Workstation 4 the computer system defaults to basic disk storage Only if you upgrade from Windows 2000 Professional or if you import a foreign disk from Windows 2000 Server or a later version could one or more of the disk drives be configured as dynamic Dynamic disks are proprietary to Windows 2000 and Windows XP Professional and they provide support for advanced disk configurations such as disk striping and disk spanning On Windows 2000 Server and later server versions dynamic disks provide support for fault tolerant configurations such as disk mirroring and disk striping with parity also known as Redundant Array of Inexpensive Disks RAID level 5 Table 1 A cross reference of terms used with basic and dynamic disks Basic Disks Dynamic Disks Active partition Active volume Extended partition Volume and unallocated space Logical drive Simple volume Mirror set Mirrored volume server only Primary partition Simple volume Stripe set Striped volume Stripe set with parity RAID 5 volume server only System and boot partitions System and boot volumes Volume set Spann
250. gged they appear in the Security Log which can be viewed by default only by administrators Other logs can be viewed by anyone MCP Exam 70270 Preparation doc 139 Resultant Set of Policy RSoP As you become more familiar with Group Policy both at the local and Active Directory levels you will quickly see that they can be very complex The complexity results not only from the numerous settings that are available within a single Group Policy but also from the fact that many policies can be applied and at many different areas within the enterprise When these settings finally apply to the computer and user on a Windows XP Professional computer it can be very difficult to determine the final policies that are applied Microsoft has gone to great lengths with Windows XP Professional to help decipher the complex array of GPOs and security settings that are possible Microsoft has done this with three fantastic tools Group Policy Result gpresult Group Policy Update gpupdate and the RSoP snap in Group Policy Result The first tool Group Policy Result is a command line tool This tool will give you the Resulting Set of Policies RSoP that apply to your computer and user accounts The tool is extremely simple to run and is easy to read when it spits the results back to you All you need to do is start a command prompt and enter gpresult as shown in Figure 4 Figure 4 Group Policy Result output for the RSoP AWINDOWS System32
251. ght clicking the computer name root container and selecting All Tasks Backup Restore Configuration The backup gets stored as a file with the mdO extension and the default backup location is systemroot system32 inetsrv metaback You should copy the metabase backups to removable media or to another computer over the network to preserve the backups in case of a hard drive failure on the IIS computer Administering the Default Web Site At any time an administrator can modify the settings for the default Web site by right clicking the site name and selecting Properties from the Internet Information Services IIS MMC snap in The Default Web Site Properties window shown in Figure 18 enables you to work with settings for the home directory directory security HTTP ISAPI filters and other configurations You can change the settings for a virtual directory by right clicking the directory name and selecting Properties The Properties dialog box for a virtual directory shown in Figure 19 enables you to configure settings for the virtual directory for its Web documents for directory security for HTTP headers and for working with custom error messages You can create a new virtual directory for the default Web site by right clicking lt Default Web Site gt from the IIS MMC snap in and selecting New Virtual Directory When the Virtual Directory Creation Wizard launches you assign a name to the new virtual directory You must also designate the pat
252. ging Hardware You configure devices on Windows XP machines using the Add Hardware icon in the Control Panel or by clicking the Add Hardware Wizard button from the Hardware tab on the System Properties window Keep in mind that in most cases you need to be logged on to the local machine as a member of the Administrators group to add configure and remove devices Installing PnP or UPnP Devices Connect the device to the appropriate port or slot on your computer according to the device manufacturer s instructions You may need to start or restart your computer but this happens much less often than it did with previous versions of Windows If you are prompted to restart your computer do so Windows XP should detect the device and then immediately start the Found New Hardware Wizard MCP Exam 70270 Preparation doc 211 Installing Non PnP Devices To install a device that is not Plug and Play follow these steps 1 Click the Add Hardware icon in the Control Panel 2 Click Next and then click Yes Have Already Connected The Hardware Click Next again 3 Scroll down the Installed Hardware list to the very bottom select Add A New Hardware Device and click Next 4 Select one of the following options Search For And Install The Hardware Automatically Recommended Do this if you want Windows XP to try to detect the new non Plug and Play device you want to install Install The Hardware That Manually Select From A List Advanced
253. ging NTFS encrypted files and folders If you are familiar with managing hard disks and volumes under Windows 2000 you should feel quite at home working with disk storage administration in Windows XP Hard disk management under Windows XP Professional is strikingly similar to the Disk Management console under both the Server and Professional editions of Windows 2000 For administrators who are more accustomed to working with Windows NT 4 Windows XP Professional introduces some new concepts such as basic and dynamic disk storage Even so the Disk MCP Exam 70270 Preparation doc 247 Management MMC Microsoft Management Console snap in has a resemblance to the old Disk Administrator utility used under Windows NT 4 MCP Exam 70270 Preparation doc 248 Disk Storage Management This chapter discusses how to manage and troubleshoot hard disks in Windows XP Professional It looks at available options under Windows XP for creating partitions on a hard disk creating and formatting drive volumes and disk administration In addition this chapter uncovers the features of the new disk storage types that were first introduced with Windows 2000 Windows XP Professional supports two disk configuration types basic storage and dynamic storage This chapter compares the differences between basic and dynamic storage and explains how to configure and manage disks that have been initialized with either type of configuration Basic Disks A Windows XP Ba
254. gistry which is not recommended because they get re created each time the computer restarts You can connect to a hidden share but only if you provide a user account with administrative privileges along with the appropriate password for that user account Administrators can create their own custom administrative hidden shares simply by adding a dollar sign to the share name of any shared folder Administrators can view all the hidden shares that exist on a Windows XP Professional system from the Shared Folders MMC snap in Connecting to Shared Resources on a Windows Network Users and network administrators have several options available to them for connecting to shared network resources These options include the following e Type in a Universal Naming Convention UNC path from the Start Run dialog box in the format servername sharename e Navigate to the share from the My Network Places window e Employ the net use command from a command prompt window If you want to connect to a shared folder named samples that resides on a Windows computer named SALES7 click Start Run type SALES7 samples and click OK At this point you are connected to that shared resource provided MCP Exam 70270 Preparation doc 73 that you possess the proper user ID password and security permissions needed to access the shared folder Connecting to Network Resources with the My Network Places Window You can connect to a network share from My N
255. gle computer or an upgrade to the same system The data that is going to be saved can be stored on the local system a server or removable media After the user data has been saved to a UNC file it can then be backed up or burned to a CD ROM for more permanent storage To get the transfer of the user data to work you need to mine the information from the existing or old system If this is a pre XP box you need to obtain a Wizard Disk or use the Windows XP Professional CD to access the Fastwiz exe tool To create the Wizard Disk you need to run the Files and Settings Transfer MCP Exam 70270 Preparation doc 52 Wizard located under Start All Programs Accessories System Tools Figure 3 shows the portion of the tool that creates the Wizard Disk Figure 3 The FAST Wizard interface that allows for the creation of the Wizard Disk Files and Settings Transfer Wizard Do you have a Windows XP CD You will also need to run this wizard on your old computer You can either create a wizard disk to use on your old computer or use the wizard from the Windows XP CD To create a Wizard Disk insert a blank formatted disk into this computer s disk drive Make sure the old computer has the same type of drive want to create a Wizard Disk in the following drive J 3 4 Floppy A v Ol already have a Wizard Disk Qi will use the wizard from the Windows XP CD l don t need the Wizard Disk have already collected my files and settings
256. good backup e Compression Windows XP supports compression when NTFS is installed However Windows XP does not support any other third party compression utilities in an upgrade scenario Always uncompress files before upgrading to ensure a clean and successful path e Virus scan software It is always best to disable and in some instances remove virus scan software before an upgrade These programs may have files open and limit the access to system resources during an upgrade e Incompatible software This is a rather vague item but it is better to be safe than sorry in an upgrade Programs such as third party protocols and clients virus scanners and ACPI APM tools can cause serious problems with an upgrade Always try to eliminate these programs from interfering with your upgrade MCP Exam 70270 Preparation doc 34 File System Considerations During the upgrade to Windows XP Microsoft makes some assumptions about which file system you are running based on your current OS If you are running Windows 9x Microsoft assumes you are running FAT32 or in some instances FAT If you are running Windows NT or 2000 Microsoft assumes you are running NTFS If you are upgrading from Windows NT or 2000 you will simply keep the existing file system NTFS as you move into Windows XP If you are upgrading from Windows 98 then you will have more choices Remember you are running FAT32 so for security reasons you probably want to run NTFS
257. guring and managing tasks with Task Scheduler Windows XP Professional supports the mobile user community more than ever before Microsoft addressed several complaints that many users had with Windows NT Workstation 4 under Windows 2000 Professional Windows XP Professional enhances the mobile user s experience even further Mobile users MCP Exam 70270 Preparation doc 153 of Windows NT Workstation 4 had a difficult job of Keeping files on a network file server synchronized with copies they kept on their mobile computer Windows XP Professional goes a long way toward fixing this age old problem and other problems such as Dynamic Link Library DLL conflicts application repair and software updates Also the user environment has been enhanced and made even more robust in Windows XP Professional by using various control applets MCP Exam 70270 Preparation doc 154 Configuring and Managing User Profiles A user profile is the look and feel of the user s desktop environment A profile is a combination of folders data shortcuts application settings and personal data For example users can configure their computer with the screen saver they prefer along with their favorite desktop wallpaper These settings are independent of other users settings for a specific local computer When users log on to their computer for the very first time a new profile is created for those users from a default user profile So when Joe logs on a profile is crea
258. h contains the CD based image for Windows XP Professional c Create a Riprep image d Create a Sysprep image Answer Answer c is correct Riprep is a tool that is used with RIS servers Riprep enables not only the core OS to be imaged but also the applications that are currently installed The image is stored on the RIS server and is made available to clients that have a PXE boot ROM NIC or can support a PXE boot ROM floppy disk The system that is created can have the applications installed via Group Policy software deployment Then when the Riprep image is created the applications and software are both included and the software will be maintained and controlled via Group Policy Answer a is incorrect because the i386 folder from the CD will not give the application requirements in the image nor the ability to boot without a floppy in the case that the existing OS is corrupt Answer b is incorrect because a CD based image through RIS will not include the applications that are required in the scenario Answer d is incorrect because Sysprep is not capable of producing an image that will work without some form of third party client which would require an OS running or a boot disk MCP Exam 70270 Preparation doc 64 4 You are in charge of the deployment of Windows XP for all 25 000 users at ACME computer sales The current network consists of Windows 2000 Professional systems and a Windows 2000 domain Most of the users are located at the
259. h disk volume fills up Therefore a spanned volume writes data to physical disk 0 MCP Exam 70270 Preparation doc 259 until it fills up then writes to physical disk 1 until its available space is full then writes to physical disk 2 and so on If just one disk fails in the spanned volume only the data contained on that failed disk is lost for that spanned volume Note You cannot extend a system volume or boot volume You cannot extend striped mirrored and RAID 5 volumes Striped Volumes A striped volume stores data in stripes on two or more physical disks Data ina striped volume is allocated alternately and evenly in stripes to the disks of the striped volume Striped volumes can substantially improve the speed of access to your data on disk To create a striped volume perform the following steps 1 Open Disk Management 2 Right click unallocated space on one of the dynamic disks where you want to create the striped volume and then click New Volume 3 Using the New Volume Wizard click Next click Striped and then follow he instructions on your screen Here are some guidelines about striped volumes e You need at least two physical dynamic disks to create a striped volume e You can create a striped volume onto a maximum of 32 disks e Striped volumes are not fault tolerant and cannot be extended or mirrored Mirrored Volumes and RAID 5 Volumes You can create mirrored volumes and RAID 5 volumes only on dynamic di
260. h for the physical folder where the Web files are stored for the new virtual directory After you have entered this information you can complete the wizard thereby setting up a new virtual directory that users can access via the http computer_name virtual_directory_name Uniform Resource Locator URL also known simply as a Web address MCP Exam 70270 Preparation doc 106 Figure 18 The Home Directory tab for the IIS Default Web Site Properties dialog box Default Web Site Properties DR Directory Security HTTP Headers Custom Erors_ Server Extensions WebSite ISAPI Fites Home Directoy Documents When connecting to this resource the content should come from A share located on another computer O A redirection to a URL Local Path eAinetpub wwwroot E Script source access Log visits Read Index this resource C Write C Directory browsing Application Settings Application name Default Application Remove Starting point lt Default Web Site gt Configuration Execute Permissions Scripts only Application Protection Medium Pooled Unload MCP Exam 70270 Preparation doc 107 Figure 19 The Properties dialog box for a virtual directory under IIS Virtual Directory Documents Directory Security HTTP Headers Custom Errors When connecting to this resource the content should come from O Ashare located on another comput
261. hardware acceleration setting has been set too high If you select an incorrect video driver or if you configure a video driver s settings incorrectly your Windows XP system may become unusable or even display the dreaded blue screen of death BSOD Fortunately Windows XP offers several ways to restore the previous functional video display settings When you restart the computer press the F8 key as Windows XP is restarting which enables you to select one of the following options from the Windows Advanced Options menu e Safe Mode Enables you to manually update remove or even roll back the problem video driver e Enable VGA Mode Enables you to boot the system using standard VGA 6400480 resolution with just 16 colors You can then correct any incorrect video settings e Last Known Good Configuration your most recent settings that worked Enables you to revert the system s Registry and device driver configurations back to how they were the last time that a user started the computer and logged on successfully Configuring Multiple Monitor Support Windows XP continues to support multiple monitor functionality that increases your work productivity by expanding the size of your desktop Multiple displays still must use PCI or Accelerated Graphics Port AGP port devices to work properly with Windows XP PCI or AGP video adapters that are built into the motherboard are also supported under the multiple monitor feature You can conne
262. hat conflict with other security permissions that have been granted to groups of which the user is also a member the most iberal permissions take precedence for that user The one overriding exception is any explicit Deny permission entry Deny permissions always take precedence over Allow permissions Just as Deny permissions always take precedence over Allow permissions explicit permissions always override inherited permissions NTFS Permissions vs Share Permissions Because share permissions apply to network access only they can serve only to complicate and possibly confuse access control settings when you apply them on top of NTFS security permissions which take effect at the file system level If share permissions and NTFS permissions conflict the most restrictive permissions apply For example suppose that you have set share permissions on the shared folder named C Samples and have set the share permissions for the Users group to Allow Read At the same time suppose that you also have NTFS permissions set on that folder and have applied the Allow Change permission for the Users group on that folder in NTFS Now you have conflicting permissions Allow Read at the share level and Allow Change at the NTFS level The net result is that members of the Users group are granted the ability only to read the files within that folder when accessing it over the network they cannot make any changes to those files because the most restrictive p
263. he Windows XP MUI Pack eases the deployment and maintenance of multilingual computing environments by helping administrators to define a single corporate standard for desktops worldwide enabling administrators to apply service packs or updates one time for all supported language environments and allowing workstations to be shared by users who speak different languages The MUI Pack also supports users logging on anywhere and getting the user interface in their own language Language Options All versions of Windows XP Professional offer support for editing documents in multiple languages Users or administrators can install Complex Script and Right to Left or East Asian language options as needed All editions of Windows XP provide support for editing documents in several different languages and the world s languages have been categorized by Microsoft into three major Language Collections Basic Collection Complex Script Collection and East Asian Collection The Basic Collection includes support for languages spoken in Western and Central Europe and the United States along with support for Baltic Greek Cyrillic and Turkic languages The Complex Script Collection is optionally installed depending on the localized language version of Windows XP and includes complex script support and right to left languages such as Thai Hebrew Arabic Vietnamese and Armenian The East Asian Collection is always installed on the Asian versions of Windows XP P
264. he Disk Management console where both the system and boot volumes are identified in parentheses for the C drive and the F drive respectively Of course the system volume and the boot volume may be one and the same MCP Exam 70270 Preparation doc 268 Figure 3 The Disk Management console shows which drive volume is the system volume and which is the boot volume Computer Management tsyout Type Pile System Status Capacty Free Space Free ADOROM t R Partion Basic s Heakthy wom ome EDET SERVER E Sge Ommam NIPS reathy A7 97 GDWINDOWSNT4 C Sagie Dynamic Heathy System 9 77GB 9 37GB CIWIO PRO Oc Senge Dynamic x Meathy 976 OC Be pro Sangle Dynamic 2 Heathy Boot 7 56 5 E2 Services and Applications lt A Boek 0 VS EEE eee ees Dynamic WINDOWSANT4 C WINZ000_PRO D NET_SERVER 6 XP_PRO f 37 27 GB 9 77 GB NTRS 9 77 GB PATI 9 77 GONTFS 7 97 GBFATR2 Online heathy System heathy Hesty Meathy Boot BB Primary partition JE Simple volume If you decide to undo the conversion to NTFS for the boot volume the volume that contains the Windows folder also known as the systemroot folder before you restart the computer you may edit the Windows XP Registry to remove the NTFS file system conversion flag that gets placed by the Convert exe utility As a warning Editing the Windows XP Registry is a risky procedure that can render a computer unstable or unbootable be sure to hav
265. he System Preparation Tool Sysprep prepares a master image of a computer that contains Windows XP Professional and any software applications that users might need The concept is to use Sysprep in conjunction with third party disk imaging software Disk imaging software makes an exact mirror image of whatever is on the computer including all the unique parameters of Windows XP Each Windows XP computer has its own unique Security Identifier SID and its own unique computer name Multiple computers on the network can t duplicate these settings If you were to apply an image that contained these unique settings to several computers they would all have the same computer name and the same SID Sysprep removes all the unique parameters from a Windows XP computer before the computer is imaged It is a very easy tool to use but you must follow several specific steps to use it The first step is to create a folder called sysprep in systemdrive for example c sysprep To use Sysprep you must extract it from the Deploy cab file and place it in the sysprep folder Perform the following steps to extract Sysprep exe and a helper file called Setupcl exe 1 Insert the Windows XP Professional CD ROM into the computer and select the Deploy cab file located in the Support Tools folder Double click the Deploy cab file to view the contents Right click Sysprep exe and select Extract Use the Explorer menu to extract the file to the sysprep folder that y
266. he applications hash Answer b is incorrect because a certificate rule identifies software by the publisher certificate used to digitally sign the software The applications may be by different publishers and you don t want to restrict users ability to run approved applications Answer c is incorrect because a zone rule identifies software that comes from the Internet local intranet trusted sites or restricted sites zones These applications are from a local file server MCP Exam 70270 Preparation doc 151 MCP Exam 70270 Preparation doc 152 Chapter 5 Implementing and Managing User and Desktop Settings Terms you ll need to understand User profiles Fast user switching Offline Files and Folders MSCOMFIG utility Windows Installer Service MSI files ZAP files Multilingual User Interface Pack File Settings and Transfer Wizard StickyKeys MouseKeys Narrator ClearType Dualview Utility Manager Fax Console Scheduled Tasks Techniques you ll need to master Configuring Offline Files and Folders options Implementing Windows Installer Packages Understanding the functionality of various Control Panel applets Configuring system startup settings Implementing software Group Policies Configuring support for multiple languages Transferring files and settings between computers Configuring accessibility options Setting up Dualview and ClearType display options Implementing and configuring the Fax service Confi
267. heck or clear the Compress Contents To Save Disk Space checkbox Click OK twice to exit both dialog boxes Instead of compressing individual files or even individual folders you can choose to compress an entire NTFS drive volume To compress an entire NTFS volume right click an NTFS drive volume in My Computer or in Windows Explorer select Properties and mark the checkbox labeled Compress Drive To Save Disk Space as shown in Figure 6 Click OK to close the drive volume s Properties dialog box MCP Exam 70270 Preparation doc 275 Figure 6 The Properties dialog box for an NTFS drive volume where you can mark the checkbox to Compress Drive To Save Disk Space NTFS_Volume C Properties General Tools Hardware Sharing Quota a NTFS_Volume Type Local Disk File system NTFS MB Used space 4 104 953 856 bytes MN Free space 2 297 184 256 bytes Capacity 6 402 138 112 bytes aa Allow Indexing Service to index this disk for fast file searching Moving and Copying Compressed Files and Folders A simple method exists for remembering whether the original compression attribute of an object is retained or inherited when you are moving and or copying files and folders For Zipped Compressed folders they retain their compression no matter where they are copied to For NTFS compressed files and folders When you move a compressed or uncompressed file or folder from one location to another within the same NTFS volum
268. her point to note is that you should apply the image to computers with similar hardware When you apply the image Sysprep exe triggers Plug and Play to resolve the differences in hardware However if the hard disk controller or the HAL on the image is different than its counterpart on the computer to which you are applying the image the image installation will fail for example if you create the image on a computer that contains a HAL for a computer with multiple processors but you are applying the image to a uniprocessor computer Windows XP has incorporated another new feature that is great for OEMs and might just be great for you too new switches that control the installation of a system that will be used for redistribution These options listed next allow for a cleaner and more efficient manipulation of the images that are created with Sysprep e Audit Reboots the computer into factory mode not generating a new SID or running any applications located in the Run Once portion of the setup files e Clean Clears the critical devices database that is used by the SysprepMassStorage section in the Sysprep inf file e Factory Boots the system into a special mode that will allow for automated customization of a preinstallation on the factory floor This will be done by using a Bill of Materials file to automate software installations and updates to software drivers the file system and the Registry The Factory exe file must be loca
269. histicated toolbox of data transport services name resolution services and troubleshooting utilities Microsoft s implementation of TCP IP for Windows XP includes the following network services and components e Dynamic Host Configuration Protocol DHCP This service is based on an industry standard specification for automatically assigning or leasing IP addresses to computers connected to the network The addresses are assigned from a predefined pool or scope of IP addresses that an administrator must configure DHCP makes the chore of assigning and maintaining TCP IP addresses on hundreds or thousands of computers much easier than having to maintain an exhaustive list of IP addresses and computer names by hand However administrators should manually assign static IP addresses for domain controllers file and print server computers and printers You can install the DHCP service only in the Windows 2000 Server product line but DHCP can assign addresses to both servers and workstations Any operating system that can make DHCP enabled requests for IP addresses can use a DHCP server that is running Windows 2000 DHCP enabled operating systems include Windows 3 x 9x ME NT 2000 and XP e DNS server Computers understand and work well with numbers but humans remember names much more easily than numbers TCP IP requires that each network device be assigned a numeric IP address DNS in conjunction with DNS servers maps numeric IP addres
270. ialog box oi Troubleshooting ICS Here are some tips for troubleshooting ICS e f you encounter problems with computers on the network not being able to connect to Web sites through the shared Internet connection verify the DNS server IP addresses with your ISP e To verify that the new IP settings have taken effect type ipconfig at a command prompt sometimes you may need to restart the computer for all the settings to become active e Check the subnet mask it must read 255 255 255 0 or else the computer that is attempting to connect to the ICS computer cannot connect e Make sure that each IP address that you assign to the other computers on the network falls within the range of 192 168 0 2 through 192 168 0 254 with no duplicate addresses on any computer If you have network devices that need to have static IP addresses while using ICS you will need to modify the Registry The update will modify the STOP value which needs to be set to the maximum IP address within the 192 168 0 0 24 network that will be given out to clients For example if you set the STOP value to 192 168 0 220 the DHCP service within the ICS service will MCP Exam 70270 Preparation doc 379 only give out IP addresses between 192 168 0 1 and 192 168 0 220 You would set your network devices to an IP address above 192 168 0 221 e f computers on the network can connect to the Internet only after you manually initiate the Internet connection from the ICS h
271. ice that Windows XP Plug and Play may have been unable to detect To install an image device you must be an administrative user Speech Applet The Speech applet invokes the Speech Properties dialog box in which you can control the text to speech voice selection preview the voice selection and specify the voice speed You can also click the Audio Output button to specify the preferred audio output device and volume level Taskbar and Start Menu Applet The Taskbar and Start Menu applet gives you control over the appearance and behavior of both the taskbar and the Windows XP Start menu Launching the Taskbar and Start Menu icon from the Control Panel invokes the Taskbar and Start Menu Properties dialog box illustrated in Figure 8 You can also access the Taskbar and Start Menu Properties dialog box by right clicking a blank area on the taskbar and selecting Properties or by right clicking a blank area on the Start menu itself and selecting Properties Figure 8 The Taskbar and Start Menu Properties dialog box Taskbar and Start Menu Properties Taskbar Start Menu Taskbar appearance SS a Start 2Internet gt fam Folder Lock the taskbar C Auto hide the taskbar Keep the taskbar on top of other windows Group similar taskbar buttons C Show Quick Launch Notification area lim ese deo PM Show the clock You can keep the notification area uncluttered by hiding icons that you have not clicked recently MCP Ex
272. ick the Local Printer button If the printer that you are adding is not Plug and Play compatible you may clear the Automatically Detect And Install My Plug And Play Printer checkbox If the printer is Plug and Play compliant Windows XP Professional automatically installs and properly configures it for you If the printer is not Plug and Play the Select A Printer Port dialog box appears Click the port you want to use from the Use The Following Port drop down list or click the Create A New Port button and choose the type of port to create from the drop down list Click Next Select the printer Manufacturer and Model Click the Have Disk button if you have a DVD ROM CD ROM or diskette with the proper printer drivers from the manufacturer Click the Windows Update button to download the latest drivers available from Microsoft s Web site You should strive to use only drivers that have been digitally signed by Microsoft for compatibility Click Next Enter a name for the printer The name should not exceed 31 characters and best practice dictates that the printer name should not contain any spaces or special characters Specify whether this printer will be designated as the system s default printer Click Next In the Printer Sharing dialog box click the Share Name button if you want to share this printer with the network Enter a share name for the printer it s a good idea to limit the share name to 14 or fewer characters and to place no
273. igned from the Deploy Software dialog box and then click OK Note If you are using a transform you must select Advanced Published Or Assigned You can create a transform to install only specific applications from a software suite of applications or to customize the installation 10 Close the Group Policy console and click the Close button for the OU Properties dialog box The software Group Policy will take effect when the users of the domain or the OU log on to the network The users can then install the software Publishing Applications A software package is typically published to users when it is not mandatory that they have a particular application installed on their computer This is a means to make the applications available for users if they decide they want to use them Once you have created a GPO to publish a software package you can log on to your computer and find any applications that were published from the Add or Remove Programs applet in the Windows XP Control Panel Select the Add New Programs button to see which applications have been published Users can install a published application with user credentials Windows Installer Service installs the published application with elevated privileges on behalf of users This method provides a central location for users to install applications This saves users from having to search for network shared folders that contain applications they want to install Assigning Application
274. iguration for any of the following areas that could cause conflicts during and after the upgrade process e Hardware and software compatibility The Windows XP Professional CD ROM contains a utility called Chkupgrd exe which scans the current OS and hardware to see whether any known items are incompatible with Windows XP Professional You can run the utility using various methods One of the most common methods is to place the Windows XP CD ROM in the computer and click the Upgrade option The utility runs before the upgrade to alert you about any incompatibilities However if you are not prepared to perform an upgrade on the computer you can run the utility by placing the Windows XP Professional CD ROM in the computer selecting Start Run and then typing D I386 winnt32 exe checkupgradeonly where D is the drive letter your CD ROM drive uses The utility scans the system and creates a text file of the results which you can save to the computer or print The Chkupgrd exe tool is also referred to as the Readiness Analyzer e f you are attempting to install Windows XP Professional on a system that has third party SCSI or RAID controllers you will need to select F6 during the initial blue screen of the setup process If you miss this selection and setup proceeds you will most likely end up with an error specifying that the boot device is not accessible and you will need to start the installation again MCP Exam 70270 Preparation doc 33
275. ined within an encrypted folder are the objects that actually become encrypted You can also individually encrypt files without their having to reside within a folder that is marked for encryption To encrypt and decrypt files physically located on a Windows 2000 server or on a Windows NET server over the network that server must be trusted for delegation By definition domain controllers are already trusted for delegation Member servers require this Trust For Delegation setting To encrypt a file or folder from Windows Explorer follow these steps 1 Right click the file or folder and select Properties 2 From the General tab click the Advanced button 3 Click the Encrypt Contents To Secure Data checkbox in the Advanced Attributes dialog box 4 Click OK 5 Click OK in the Properties dialog box The folder then becomes encrypted and any files and folders that are placed within it are encrypted If subfolders or files exist within the folder the Confirm Attribute Changes dialog box shown in Figure 7 appears MCP Exam 70270 Preparation doc 278 Figure 7 The Confirm Attribute Changes dialog box Confirm Attribute Changes You have chosen to make the following attribute changes encrypt Do you want to apply this change to this folder only or do you want to apply it to all subfolders and files as well Apply changes to this folder only 6 Click either Apply Changes To This Folder Only or Apply Changes To This Folder
276. ing Hardware Hardware includes any physical device that is connected to your computer and that your computer s processor controls This includes equipment that was connected to your computer when it was manufactured as well as equipment that you added later Modems disk drives CD ROM drives printers network cards keyboards display adapter cards and USB cameras are all examples of devices Windows XP offers full support for Plug and Play PnP devices and partial support for non Plug and Play devices Partial support means only one thing Some work others do not Sometimes testing a device may be the only sure way to determine if it will work with Windows XP Always consult the latest Windows XP Hardware Compatibility List HCL before installing a new device For a device to work properly with Windows XP software a device driver must be installed on the computer Each hardware device has its own unique device driver s which the device manufacturer typically supplies However many device drivers are included with Windows XP and work even better with Windows XP than the manufacturer s own driver Look for Microsoft to recommend using its own drivers for a given device rather than those of the manufacturer because Microsoft understands the inner workings of the operating system better than anyone else Because Windows XP controls your computer s resources and configuration you can install PnP hardware devices and many other devices
277. ing 1 9 2002 Schedule Task Start time vccky ONCOL Schedule Task Weekly Every 1 week s on Mon C Sat Tue C Sun Wed Thu Fri C Show multiple schedules 7 Click Next to display the Set Account Information dialog box Type in the user account under which this scheduled backup job will run type in the password for the user account and then confirm the password Click OK 8 Click Finish to complete the wizard Configuring a Job Using the Scheduled Jobs Tab To configure a job using the Scheduled Jobs tab perform the following steps 1 In the Windows Backup utility click Advanced mode and click the Scheduled Jobs tab 2 Double click the day you wish to start scheduled backups or click the Add Job button at the bottom of the Scheduled Jobs window 3 Complete the information for the Backup Wizard Volume Shadow Copy Technology MCP Exam 70270 Preparation doc 331 Microsoft introduces Volume Shadow Copy Technology VSCT to enable backups to be made of data files and application files even when they are currently locked and in use Whenever a backup procedure begins an instant shadow copy is created of the original volume s that is are being backed up VSCT is enabled by default Volume shadow copies are created only for NTFS formatted volumes running under Windows XP Professional Enough available free disk space must exist on any available local NTFS volume for the shadow copy to be made If none
278. ing activated your system Answer a is incorrect because this is used for a RIS installation You have a good installation you just need to activate what is installed Answer c is incorrect because the Recovery Console won t be available without activating the system Answer d is incorrect because the F8 menu option won t be available until you activate the product MCP Exam 70270 Preparation doc 68 Chapter 3 Establishing Configuring and Managing Resources Terms you ll need to understand Shared folders Hidden shares Simple file sharing Offline files client side caching Share permissions NT File System NTFS NTFS permissions User rights Built in security principals Access control list ACL Access control entry ACE Taking ownership of objects Auditing Internet Information Server IIS Internet Printing Protocol IPP Techniques you ll need to master Why Creating network shares Configuring share permissions Configuring options for offline files Setting basic and advanced NTFS permissions Viewing effective permissions Learning how to turn on auditing Installing and managing Internet Information Server Connecting to printers over the Internet do we have computer networks anyway Well they empower us to collaborate on projects and share information with others whether they re around the corner or across the globe If you re working on a Windows XP Professional system that is connected to a networ
279. ing environments such as Unix Mainframe and minicomputers e Trivial File Transfer Protocol TFTP Copies files to and from remote computers that are running the TFTP service Diagnostic tools include the following e Address Resolution Protocol ARP Lists and edits the IP to Ethernet or Token Ring physical translation tables that ARP uses e HOSTNAME Lists the name of the local host computer e IPCONFIG Shows all of the current TCP IP configuration settings for the local computer such as its IP address subnet mask and any WINS servers and DNS servers assigned to the computer There are special switches that deal with the DNS portion of the IP session These would be the registerdns displaydns and flushdns switches These switches will register the client with DNS show the DNS cache and flush out the DNS cache respectively MCP Exam 70270 Preparation doc 302 LPQ Shows the current status of the print queue on a computer that is running the LPD service NBTSTAT Delineates network protocol statistics and lists the current connections that are using NetBIOS over TCP IP Don t forget about the R and RR switches that can help refresh the cache as well as send release packets to WINS and then refresh the client connection NETSTAT Delineates network protocol statistics and lists the current TCP IP connections PING Is used to test TCP IP related connectivity to remote computers This command also
280. ing is a list of the different protocols that are available e Data Link Control DLC Used in a Microsoft world for two main purposes to communicate with AS 400 devices or IBM emulators and to communicate with network printers such as HP Directjet devices e AppleTalk Allows Windows XP Professional computers to communicate with Apple printers e NetBEUI Is an older protocol that is used for a network that is not running Active Directory nor connected to the Internet MCP Exam 70270 Preparation doc 309 Network Bridging The Windows XP network bridge option is not unlike a typical bridge It connects different network segments into a single network appearing as a single network subnet This will be ideal for the small office and home office SOHO networks The technology will allow different network media to be bridged as well Some of these different network media might include Ethernet FireWire and wireless Ethernet To get the network bridge established you will highlight both of the network adapters that will be part of the bridge After highlighting the adapters you will right click one of them and select the Bridge Connections menu option After the bridge is established between the two network cards the bridge will function as a single logical network card The two original network cards will not be configurable because they are now part of the bridge The bridge will obtain an IP address and will function as a single n
281. ing user successfully logs on and then subsequently logs off from a Windows XP workstation the user s profile is uploaded to the profile server and stored The next time that the user logs on to the network their roaming profile is compared with their local profile and the most recent profile is used See Figure 1 raed MCP Exam 70270 Preparation doc 157 Figure 1 The User Profiles dialog box User Profiles F User profiles store settings For your desktop and other e32 information related to your user account You can create a different profile on each computer you use or you can select a roaming profile that is the same on every computer you use Profiles stored on this computer Name Size Type Status Modified 7800XP1 Administrator 625KB Local Local 9 20 2001 7800XP1 Dan 925 KB Local Local 9 18 2001 7800XP 1 Derek 601 KB Local Local 9 20 2001 Change Type To create new user accounts open User Accounts in Control Panel In Windows XP if you create a roaming profile on an NTFS drive volume by using the username variable the user and the built in local Administrators group are assigned Full Control permission of that directory Note Local or roaming profiles are protected from permanent change by renaming NTUSER DAT to NTUSER MAN By renaming the file you have effectively made the profile read only meaning that Windows XP does not save any changes made to the profile when the user logs off NTUSER DAT is found in
282. inistration of the policy settings The solution to this decentralized administration is to implement Active Directory and apply the desired settings to a grouping of computers or users by using Group Policy Objects within Active Directory MCP Exam 70270 Preparation doc 135 Group Policy Objects Group Policy Objects GPOs take the concept of policy enforced configurations and applies it to multiple computers or users Unlike Local Group Policy GPOs provide a centralized enumeration of configuration settings You can apply or link GPOs to the following e A site This is an Active Directory object that represents a portion of your network topology with good connectivity a local area network LAN for example e A domain This causes the configuration specified by the policy to be applied to every user or computer in the domain e An OU This applies policies to users or computers in the OU or any child OUs To access Group Policy you must go to the properties of a site domain or OU SDOU and click the Group Policy tab Therefore to work with group policy for a site you use the Active Directory Sites and Services Console whereas to work with group policy for a domain or OU you use Active Directory Users and Computers In the case of an individual machine it can only have one Local Group Policy whereas an SDOU can have multiple GPOs In the Group Policy Properties dialog box you can create a new GPO by clicking New o
283. inistrators 7300XP1 Dan 7800XP1 Derek 7800XP 1 Power Users EB CREATOR GROUP CREATOR OWNER 7 Click OK for the basic Select Users Or Groups dialog box 8 Verify that the Allow checkboxes are marked for the Read amp Execute List Folder Contents and Read permissions as shown in Figure 8 MCP Exam 70270 Preparation doc 93 Figure 8 The Security tab of an NTFS folder showing permissions for users and groups General Sharing Security Customize Group or user names EF Administrators 7800XP 1 Administrators AisonJ 7800XP1 Alison 3 fi Backup Operators 7800XP 1 Backup Operators a Brendan 7800XP 1 Brendan n TONYDD Nan s5 lt amp Permissions for Backup Allow Deny Full Control Modify Read amp Execute List Folder Contents Read Write OBAwOO For special permissions or for advanced settings click Advanced Advanced 9 Click OK to accept your settings MCP Exam 70270 Preparation doc 94 Denying Access to a Resource Deny permissions always override Allow permissions so you can be assured that after you establish Deny permissions for a particular user or group on a resource no other combination of Allow permissions through group memberships can circumvent the Deny permission To assign Deny security permissions to a user or a group for a specific folder follow these steps 1 Right click the folder on which you want
284. install the computer to a workgroup to complete the installation MCP Exam 70270 Preparation doc 62 Practice Questions 1 You are the network administrator for the East branch of the ACME publishing company You have a Windows 2000 domain that contains Windows 95 Windows 98 Windows NT 4 and Windows 2000 clients Your network has four locations each configured as an Active Directory site You want to upgrade all of the clients to Windows XP to take advantage of the Remote Assistance capability You upgrade the Windows 98 NT and 2000 clients but are having trouble upgrading the Windows 95 clients What should you do to the Windows 95 clients a Run the Readiness Analyzer b Run winnt32 checkupgradeonly c Run winnt checkupgradeonly d Upgrade them to Windows 98 Answer Answer d is correct It is not possible to upgrade Windows 95 clients directly to Windows XP Professional You must first upgrade them to Windows 98 and then you can make the upgrade to Windows XP Answer a is incorrect because this is a tool that is used to determine if your system will be compatible with Windows XP Answers b and c are incorrect because the checkupgradeonly switch will determine if the existing system is compatible with Windows XP In addition the checkupgradeonly switch is not compatible with the winnt command 2 You are the network administrator at the AllMine talent company You are looking to upgrade your Windows NT domain to Windows 200
285. ion to being able to copy files to floppy disks and other removable media Table 2 Recovery Console commands Command Description attrib Changes file attributes batch Runs a list of commands stored in a text file bootcfg Scans the hard drives to modify or rebuild the Boot ini file so that the system will boot properly chdir cd Displays the name of the current folder or changes the current folder chkdsk Checks a disk and displays a status report cls Clears the screen Copies a single file to another location delete del Deletes one or more files dir Displays a list of files and subfolders in a folder disable Disables a system service or a device driver diskpart Adds and deletes hard drive partitions Starts or enables a system service or a device driver exit Exits the Recovery Console and restarts your computer MCP Exam 70270 Preparation doc 341 expand Expands compressed files such as Windows XP setup files and CAB files fixboot Writes a new partition boot sector onto the system partition fixmbr Repairs the master boot record of the partition boot sector format Formats a disk help Displays a list of the commands that you use in the Recovery Console listsvc Displays all available services and drivers installed on the system along with their startup status logon Logs on to a Windows 2000 or Window
286. ion method is to place the contents of the Windows XP Professional CD ROM in a folder on a network server and then share the folder This network server is referred to as a distribution server Establish a network connection to the distribution server to start the installation If Windows 95 98 NT or 2000 is on the target computer connect to the share point and execute winnt32 exe to start the installation process If DOS is on the target computer use a network boot disk to connect to the source files and use winnt exe to start the installation You use winnt32 exe in a 32 bit environment whereas you use winnt exe in a 16 bit DOS environment Automating the Installation of Windows XP Professional When performing an attended installation option someone must be in front of the computer to answer all the installation prompts If you need to install hundreds maybe thousands of computers this is a very inefficient method This section discusses how to use Setup Manager the System Preparation Sysprep Tool and Remote Installation Service RIS for automating the installation process Creating Unattended Answer Files and Uniqueness Database Files by Using Setup Manager The Setup Manager utility answers the installation prompts and saves the answer results in an answer file called Unattend txt Windows XP can then use Unattend txt during the installation to configure the screen resolution and other typical hardware and OS settings This tool i
287. ions contain the SP Using this method can save you a lot of time and helps you to avoid having to apply an SP after each installation Applying SPs Manually If you didn t have the opportunity or ability to create a slipstreamed distribution share you can apply an SP simply by running update exe on the local machine If you install any new services after applying the SP Windows XP gets any files it needs for those services from the installation files or the SP This process updates a service or an application without requiring you to continually reapply the SP whenever you add something new MCP Exam 70270 Preparation doc 56 Installing Hotfixes A few common ways exist to deploy hotfixes to Windows XP Professional clients The first way is to deploy the hotfixes during the installation of the OS itself To accomplish this form of installation you need to create and configure the following items 1 Create a distribution folder This will be named i386 and contain a folder named OEM The installation process will refer to this folder for the inclusion of additional files and content 2 Create an answer file This will instruct the installation on how to interact with the distribution folder that you have created in the first step 3 Create a Cmdlines txt file This file will contain specific lines of code that install each hotfix separately 4 Copy files to the distribution folder After all the files are created you will then c
288. is unavailable when you select the monitor icon that is currently set as your primary monitor The monitor that is designated as the primary monitor displays the Logon dialog box when you start your computer Most programs display their window on the primary monitor when you first open them Moving Items between Monitors or Viewing the Same Desktop on Multiple Monitors To move items between monitors or to view the same desktop on multiple monitors perform the following steps 1 Open the Display applet in the Control Panel 2 On the Settings tab click the monitor icon that represents the monitor you want to use in addition to your primary monitor 3 Select the Extend My Windows Desktop Onto This Monitor checkbox refer to Figure 5 Selecting this checkbox enables you to drag items across your screen onto alternate monitors You can also resize a window to stretch it across more than one monitor MCP Exam 70270 Preparation doc 229 Troubleshooting Multiple Displays The default refresh frequency setting is typically 60Hz although your monitors may support a higher setting A higher refresh frequency might reduce flicker on your screens but choosing a setting that is too high for your monitor may make your display unusable and may even damage your hardware If your refresh frequency is set to anything higher than 60Hz and your monitor display s goes black when you start Windows XP restart the system in Safe Mode Change your re
289. isk but you can t extend either the system or the boot partition The process of upgrading volumes is covered later in this chapter Any troubleshooting tools that cannot read the dynamic Disk Management database work only on a basic disk Dynamic disks are only supported on desktop or server systems using Small Computer System Interface SCSI Fibre Channel Serial Storage Architecture SSA Integrated Drive Electronics IDE Enhanced Integrated Drive Electronics EIDE Ultra Direct Memory Access DMA or Advanced Technology MCP Exam 70270 Preparation doc 250 Attachment ATA interfaces Portable computers removable disks and disks connected via Universal Serial Bus USB or Firewire IEEE 1394 interfaces are not supported for dynamic storage Dynamic disks are also not supported on hard drives with a sector size of less than 512 bytes Cluster disks groups of several disks that serve to function as a single disk are not supported either Basic and dynamic disks are Windows XP s way of looking at hard disk configuration If you re migrating to Windows XP from Windows NT 4 the dynamic disk concept might seem odd in the beginning but once you understand the differences working with dynamic disks is not complicated You can format partitions with FAT16 FAT32 or NT File System NTFS on a basic or a dynamic disk FAT and NTFS are discussed later in this chapter However you can only format a dynamic volume as NTFS from the Disk Mana
290. iskperf exe enables and disables hard disk performance counters on earlier versions of Windows 6 What is the easiest way to convert an NTFS drive volume configured as drive D to the FAT32 file system without losing any existing data Assume that the volume is not the system or boot volume A Use the command convert d fs fat32 B Use the command convert d fs ntfs C Use the Disk Management console to revert the volume back to FAT or FAT82 D Back up all the data stored on the NTFS drive volume use Diskpart exe or the Disk Management console to delete the volume create a new volume format the volume as FAT32 and then restore the backed up data A6 Answer d is correct Windows XP does not offer a conversion tool for converting an existing NTFS volume to FAT FAT32 or any other file system You must back up all the data on the volume create a new volume format it and restore the data Answer a is incorrect because the Convert exe command does not support the conversion to the FAT or FAT32 file system Answer b is incorrect because the Convert exe command line tool only supports a conversion to NTFS prepending a minus sign to the NTFS parameter is not supported Answer c is incorrect because the Disk Management console only supports reformatting an existing NTFS drive volume to convert it to the FAT or FAT32 file system MCP Exam 70270 Preparation doc 288 A7 How can you set disk quotas on NTFS drive volumes f
291. ity permissions for the following groups Administrators System and Creator Owner MCP Exam 70270 Preparation doc 87 If you upgrade from Windows NT 4 Workstation to Windows XP Professional all existing users become members of the Local Power Users group under Windows XP This default upgrade behavior ensures that existing users can run noncertified applications under Windows XP because Windows XP permissions for members of the Users group are more restrictive than under Windows NT 4 More stringent NTFS security permissions now get applied to the root of all NTFS drive volumes whenever you upgrade to Windows XP format a drive volume as NTFS under Windows XP or use the convert exe command on a drive volume under Windows XP The new default NTFS security permissions are outlined here and illustrated in Figure 4 e System Full Control with inherited permissions from parent folder e Administrators Full Control with inherited permissions from parent folder e Creator Owner Full Control with inherited permissions from parent folder e Everyone Read and Execute with no inherited permissions from parent folder e Users Read and Execute with inherited permissions from parent folder Figure 4 The Advanced Security Settings dialog box showing the default NTFS permissions for the root of a drive volume converted to NTFS Advanced Security Settings for XP_PRO F Permissions Auditing Owner Effective Permissions To view mo
292. iver Uninstall To uninstall the driver Advanced MCP Exam 70270 Preparation doc 216 Managing and Troubleshooting Device Conflicts You configure devices using the Add Hardware Wizard in the Control Panel or from the Hardware tab on the System Properties window which can also be accessed from the Control Panel Each resource for example a memory address range interspt request IRQ input output I O port Direct Memory Access DMA channel and so on that is assigned to your device must be unique or the device won t function properly For PnP devices Windows XP attempts to ensure automatically that these resources are configured properly If a device has a resource conflict or is not working properly you see next to the device name a yellow circle with an exclamation point inside it Occasionally two devices require the same resources but keep in mind that this does not always result in a device conflict especially if the devices are PnP or UPnP compliant If a conflict arises you can manually change the resource settings to be sure that each setting is unique Sometimes two or more devices can share resources such as interrupts on Peripheral Connection Interface PCI devices depending on the drivers and the computer For example you may see Windows XP share IRQ 9 among multiple devices on many mobile computers When you install a non PnP device the resource settings for the device are not automatically configured Depe
293. k you can share one or more of that system s folders with other computers and users on that network Drive volumes and folders are not automatically shared for all users in Windows XP Professional Members of the Administrators group and the Power Users group discussed later in this chapter are the only users who retain the rights to create shared network folders MCP Exam 70270 Preparation doc 69 Managing Access to Shared Folders Windows XP Professional implements a new feature called Simple File Sharing which is enabled by default when the computer is stand alone or a member of a network workgroup Simple File Sharing is disabled when the computer is a member of a Windows domain Simple File Sharing creates a Shared Documents folder inside of which it creates two subfolders Shared Pictures and Shared Music Remote users who access a shared folder over the network always authenticate as the Guest user account when Simple File Sharing is enabled The Properties sheet for a shared folder under Simple File Sharing configures both share permissions and NTFS permissions if the shared folder is stored on an NTFS volume simultaneously you are not allowed to configure the two permissions separately For example you cannot make a shared folder private under Simple File Sharing unless the folder resides on an NTFS volume To turn off Simple File Sharing for a stand alone system or for a computer that is a member of a workgroup perform the fo
294. l to configure power management settings on your computer If your computer does not have an APM compliant BIOS Windows XP cannot install APM this means no APM support for your machine plus no APM tab in the Power Options applet in the Control Panel Keep in mind though that your machine can still function as an ACPI computer if your BIOS is ACPl compliant The ACPl based BIOS will take over your system configuration and power management from the Plug and Play BIOS Advanced Configuration and Power Interface The ACPI standard has replaced the older APM specification ACPI is an open industry specification that defines a flexible and extensible hardware interface for your system board Windows XP is a fully ACPl compliant operating system Software developers and designers use the ACPI specification to integrate power management features throughout a computer system including hardware the operating system and application software This integration enables Windows XP to determine which applications are active and to handle all the power management resources for computer subsystems and peripherals ACPI enables the operating system to control power management on a wide range of mobile desktop and server computers and peripherals ACPI is the foundation for the OnNow industry initiative which allows manufacturers to deliver computers that will start at the touch of a key on a keyboard ACPI design is essential when you want to take full a
295. lable to add as members only when the domain is in native mode meaning that it can contain only Windows 2000 domain controllers and no legacy backup domain controllers Renaming Accounts To rename an account right click the account and choose Rename Type the new name and press Enter Each user and group account is represented in the local security database by a long unique string called a Security Identifier SID which is generated when the account is created It is the SID that is assigned permissions and privileges The user or group name is just a user friendly interface name for humans to interact with the computer Therefore when you rename an account the account s SID remains the same and the account retains all of its group memberships permissions and privileges MCP Exam 70270 Preparation doc 128 Two situations mandate renaming an account The first occurs when one user stops using a system and a new user requires the same access as the first Rather than creating a new local user account for the new user simply rename the old user account The account s SID remains the same so its group memberships privileges and permissions are retained You should also specify a new password in the account s Properties dialog box and select the User Must Change Password At Next Logon option Note One thing to keep in mind is that the users Home Directory name will not change along with renaming the user The administrator will need t
296. lable when you press Ctrl Alt Delete This enables the Windows XP Professional user to change their password on a NetWare 4 x and higher server that is running Novell Directory Services NDS Unix Connectivity Microsoft has made a valiant effort to incorporate better connectivity with Unix servers and has produced many new services and applications that allow better communication However the tools still have not made their way into the base operating system The standard tools are available with Windows XP e Print Services for Unix This service enables Line Printer Remote LPR ports to be installed on your Windows XP client An LPR port can send a document to a print spooler service on another computer or Unix printer The Line Printer Daemon LPD service is also installed with Print Services for Unix This allows the receipt of a print job e Services for Unix SFU This service can be installed on a Windows system to allow the Windows system to communicate with Unix file and print servers The different services that are installed include Telnet client Telnet server Unix shell and utilities and Client for NFS SFU is not a free product but can be purchased online or from a Microsoft vendor Other Protocols A Microsoft OS comes with more than just the standard TCP IP and NWLink protocols Microsoft has continued to integrate additional protocols to communicate with a variety of different OSs and network resources The follow
297. lder access Logons and logoffs System shutdowns and restarts Changes to user and group accounts Changes attempted on Active Directory objects if the Windows XP Professional computer is a member of a Windows Active Directory domain When you track successful events you can gauge how often different resources are used This information can be useful when you are planning for future resource allocation By tracking failed events you can become aware of possible security intrusions Unsuccessful logon attempts attempts to change security permissions or efforts to take ownership of files or folders may all point to someone trying to gain unauthorized access to the system or to the network If such attempts occur at odd hours these events take on an even more suspicious tone You must be a member of the Administrators group to turn on audit policies if your computer is connected to a network network policy settings may prohibit you from configuring audit settings To enable auditing on a Windows XP Professional system follow these steps 1 Launch the Local Security Policy MMC snap in from the Start All Programs Administrative Tools folder 2 Atthe Local Security Settings Console expand the Local Policies folder and then click Audit Policy 3 Double click the audit policy setting that you want to enable the dialog box for the audit event will display as shown in Figure 13 To enable auditing of object access double click the Audit Object
298. led services and their current status stopped or running on the Windows XP computer You can enable or disable each service for the next time the computer is restarted e Startup Lists the programs and utilities that are configured to run at system startup You can enable or disable each startup item to take effect at the next system restart Figure 11 The General tab of the MSCONFIG utility 2 System Configuration Utility General SYSTEM INI WIN INI BOOT INI Services Startup Startup Selection O Normal Startup load all device drivers and services O Diagnostic Startup load basic devices and services only Selective Startup Process SYSTEM INI File Process WIN INI Fie Load System Services Cl Load Startup Items Use Original BOOT INI MCP Exam 70270 Preparation doc 175 Application Program Compatibility Support Applications that worked under earlier versions of Windows may fail to operate properly under Windows XP for any one of a number of reasons A program may expect older formats of Windows data or it may expect user information such as that in personal and temporary folders to be in specific locations or formats These types of compatibility issues mostly concern applications developed for Windows 95 98 or ME but some applications written for Windows NT 4 or Windows 2000 may also be affected To better support legacy applications Microsoft has built application compatibility support directly in
299. lement new authentication methods for Smart Cards generic token cards and even biometric devices such as fingerprint identification scanners In this way EAP can support authentication technologies that will be developed in the future To add EAP authentication methods go to the Security tab of the remote access server s Properties dialog box IPSec IP Security IPSec is a suite of security related protocols and cryptographic functions for establishing and maintaining private and secure IP connections IPSec is easy to implement and offers superb security for potential network traffic sniffing PSec enabled clients establish a Security Association SA with the server that serves as a private key for encrypting data IPSec uses simple on off configurations or you can configure policies for configuring its security services IPSec policies support different gradations of security levels for different types of network traffic Administrators can set IPSec policies at the Local Organizational Unit Domain or Site level You configure IPSec policies with the IP Security Policy Management snap in of the Microsoft Management Console MMC L2TP You can compare the Layer 2 Tunneling Protocol L27P to the Point to Point Tunneling Protocol PPTP in that it provides an encrypted tunnel for data to pass through an untrusted public network such as the Internet Both L2TP and PPTP use PPP to establish initial communications MCP Exam 70270 Prep
300. lent addition to Windows XP Professional The product is considered to be a stateful firewall in that it monitors all aspects of the traffic that crosses the interface which includes inspecting the source and destination addresses for further control ICF needs to track traffic that has originated from the computer running ICF as well as from computers on the Internet To do this in an efficient manner the computer keeps track of all traffic that originates from the computer This might be traffic that it is sending on behalf of another computer through the ICS service If this is the case the ICF service will check with the ICS translation table to see if there is an internal computer that should be receiving the traffic If so the ICF service will allow the traffic to pass and reach the final internal computer destination In the case where the traffic originated from the Internet the ICF computer will handle this traffic in a much different manner In this case the traffic will be dropped by default unless the traffic is associated with a service that is listed on the Services tab as shown in Figure 6 Fiqure 6 Services tab for an ICF connection Advanced Settings Services Security Logging ICMP Select the services running on your network that Internet users can access Services O FTP Server O Internet Mail Access Protocol Version 3 IM4P3 O Internet Mail Access Protocol Version 4 IMAP4 O Internet Mail Server SMTP O
301. lick Next 4 Follow the subsequent instructions on your screen To launch a MCP Exam 70270 Preparation doc 212 troubleshooter from the Windows XP Help and Support Center click Finish and go through the troubleshooter s steps to try to resolve the problem Device Driver Updates Keeping drivers and system files updated ensures that your operating system performs at its peak level Microsoft recommends using Microsoft digitally signed drivers whenever possible The Driver cab cabinet file on the Windows XP CD ROM contains all the drivers that Windows XP ships with This cabinet file is copied to the systemroot Driver Cache i386 folder when Windows XP is installed Whenever a driver is updated Windows XP looks in the Driver cab file first The location of Driver cab is stored in a Registry key and can be changed via HKLM Software Microsoft Windows CurrentVersion Setup DriverCachePath Automatic Device Drivers Updates Windows XP supports automatic updating of device drivers and other critical operating system files In Windows XP Professional you must be logged on as either the local administrator or as a member of the Administrators group to install updated components or to change Automatic Updates settings If your computer is a member of a Windows Active Directory domain Group Policy settings may further restrict your ability to modify these settings and install updated components To turn on turn off or modify Windows XP Automati
302. lied to their user accounts so that they are granted permission to manage documents as well Users may manage only their own print jobs unless they are members of the Administrators group or the Power Users group if the computer is standalone or a member of a workgroup or members of the Print Operators group or the Server Operators group if the Windows XP print server is a member of a Windows domain Users can also manage other users print jobs if they have been granted the Allow Manage Documents permission Windows XP has dropped support for the Data Link Control DLC protocol which is used by some older Hewlett Packard HP Jet Direct cards and Jet Direct print server devices These older devices should be upgraded to newer HP network interface cards and print devices that support TCP IP and the standard port monitor Configuring Print Server and Printer Properties A Windows XP Professional computer becomes a print server when you physically connect a printer to the system and then share that printer with the network You can easily configure many of the properties of your Windows XP Professional system as a print server by selecting File Server Properties from the Printers And Faxes window You can configure many print server settings such as changing the location of the Spool folder from the Print Server Properties dialog box Using this dialog box means that you don t have to edit the Registry directly to make changes to your Windo
303. line equivalent to Disk Management You must restart the computer for the conversion to take effect Answer a is incorrect because Diskperf exe enables and disables hard disk performance counters on earlier versions of Windows it does nothing for converting basic disks to dynamic disks Answer b is incorrect because a command line utility functionally equivalent to Disk Management exists Diskpart exe Answer d is incorrect because the Convert exe command line tool is used to convert a FAT or FAT32 volume to NTFS What are the three types of dynamic volumes that are supported by dynamic disks under Windows XP Professional Check all correct answers A Spanned volumes B Extended volumes C RAID 5 volumes D Simple volumes E Volume sets F Striped volumes G Mirrored volumes Answers a d and f are correct Spanned volumes enable you to store data sequentially over two or more physical disks but Windows XP displays the disks as one logical drive volume Simple volumes are the most fundamental dynamic volumes with each simple volume residing on only one physical disk Striped volumes are also supported under Windows XP enabling you to store data in stripes across two or more physical disks but Windows XP displays the disks as one logical drive volume Answer b is incorrect because there is no such volume as an extended volume on a dynamic disk Answer c is incorrect because Windows XP Professional does not support the fault tolerant R
304. ll files that the user owns or after another user has taken ownership of the files By default only members of the Administrators group can view and change quota entries and settings In addition all members of the Administrators group inherit unlimited disk quotas by default To work with disk quota entries click the Quota Entries button on the MCP Exam 70270 Preparation doc 273 Quota tab of an NTFS drive volume s Properties dialog box The Quota Entries window is shown in Figure 5 Figure 5 The Quota Entries window enables you to set and remove disk quota limits and warning levels for individual users gt Quota Entries for NTFS_SYSTEM C Quote Edt Yew Help Oxg Q Status Name Logon Name 0K TROOXP 1 Derek DOK Aison 7800XP 1 Alison 0K 7800XP 1 Dan lt gt OK BUILTIN Administrators T total temis 1 selected Set identical or individual disk quota limits for all user accounts that access a specific volume Then use per user disk quota entries to allow more a fairly common scenario or less for those disk space hogs disk space to individual users when necessary MCP Exam 70270 Preparation doc 274 Data Compression Windows XP Professional supports two types of data compression NTFS compression and a new Compressed Zipped Folders feature Files and folders compressed using the Compressed Zipped Folders feature remain compressed under all three supported file systems NTFS FAT and FAT32 Comp
305. llowing steps 1 Open a window in either My Computer or Windows Explorer 2 Click Tools Folder Options from the menu 3 Click the View tab 4 Clear the Use Simple File Sharing Recommended checkbox under the Advanced Settings section 5 Click OK Note The Shared Documents Shared Pictures and Shared Music folders are not available if the Windows XP Professional computer is a member of a Windows domain MCP Exam 70270 Preparation doc 70 Creating Shared Folders from My Computer or Windows Explorer To share a folder with the network with Simple File Sharing disabled you can use My Computer or Windows Explorer and follow these steps Open a window in either My Computer or Windows Explorer 2 Right click the folder that you want to share and then select Sharing And Security from the pop up menu 3 Click the Share This Folder button 4 Type in a Share Name or accept the default name Windows XP uses the actual folder name as the default Share Name 5 Type in a Comment if you desire Comments appear in the Browse list when users search for network resources Comments can help users to locate the proper network shares 6 Specify the User Limit Maximum Allowed or Allow This Number Of Users Windows XP Professional permits a maximum of 10 concurrent network connections per share Specify the Allow This Number Of Users option only if you need to limit the number of concurrent users for this share to fewer than 10 Te
306. located free space on the same dynamic disk Answer a is incorrect because repartitioning and reformatting a disk deletes any data stored on the disk Answer d is incorrect because converting a disk from dynamic to basic deletes any data stored on the disk 5 To make accessing several different hard drive volumes and removable drives easier on a local Windows XP computer you want your users to be able to access each drive volume through different folder names located on the same drive letter How can you accomplish this A Use the Subst exe command line utility to specify each folder as a unique drive letter B Use the Disk Management console to create mount points for each hard drive volume letter through empty folders on the same FAT or FAT32 volume C Use Diskpart exe to create mount points for each hard drive volume letter through empty folders on the same NTFS volume D Use Diskperf exe to create mount points for each hard drive volume letter through empty folders on the same NTFS volume MCP Exam 70270 Preparation doc 287 A5 Answer c is correct You may use either Diskpart exe or the Disk Management MMC snap in to create mount points for a drive letter through empty NTFS folders Answer a is incorrect because the Subst exe command associates a specific drive letter path with a different drive letter root folder Answer b is incorrect because you can only create mount points on empty NTFS folders Answer d is incorrect because D
307. log off and then log back on for the new settings to take effect Microsoft recommends that you do not modify the default settings for Offline Files MCP Exam 70270 Preparation doc 161 Configuring Shared Network Folders for Offline Use Use the following steps under Windows XP to configure a network shared folder for making files available offline for remote users 1 From the My Computer window select Tools Folder Options and click the Offline Files tab to enable Offline Files 2 Mark the Enable Offline Files checkbox 3 Select or deselect any of the other options as you deem appropriate 4 For increased security of offline data mark the Encrypt Offline Files To Secure Data checkbox as shown in Figure 3 This is a new feature of Windows XP Enabling Offline Files encryption is considered a best practice by Microsoft Figure 3 The Folder Options dialog box displaying the Offline Files options Folder Options General View File Types Offline Files FA Use Offline Files to work with files and programs stored on the 4 network even when you are not connected Enable Offline Files C Synchronize all offline files when logging on Synchronize all offline files before logging off Display a reminder every 60 EJ minutes C Create an Offline Files shortcut on the desktop Amount of disk space to use for temporary offline files J 612 MB 10 of drive 5 Share each folder that you want to make avail
308. lts in the infamous BSOD Blue Screen Of Death Available Recovery Actions The following are the available recovery actions that only members of the Administrators group may configure from the Startup And Recovery dialog box as shown in Figure 2 Write An Event To The System Log Send An Administrative Alert Automatically Restart Small Dump Directory Specify the small memory dump location and folder name Dump File Specify the dump file location and file name MCP Exam 70270 Preparation doc 336 Figure 2 System Failure and Write Debugging Information option settings System startup Default operating system Microsoft Windows XP Professional fastdetect v Time to display list of operating systems 30 seconds seconds To edit the startup options file manually click Edit System failure A v A v Time to display recovery options when needed 30 Write an event to the system log Send an administrative alert Automatically restart Write debugging information Complete memory dump v Dump file i E SystemRoot MEMORY DMP Overwrite any existing file The Write Debugging Information drop down list enables you to select from four different options None Small Memory Dump 64KB Kernel Memory Dump and Complete Memory Dump The Complete Memory Dump option requires a paging file on the boot volume at least as large as the computer s installed physical RAM plus 1MB If you select the Ker
309. m 70270 Preparation doc 264 All files must be closed for the Error Checking process to run Your volume is not available to run any other tasks while this process is running If the volume is currently in use a message asks if you want to reschedule the disk checking for the next time you restart your system Then the next time you restart your system disk checking runs If your volume is formatted as NTFS Windows XP automatically logs all file transactions replaces bad clusters automatically and stores copies of key information for all files on the NTFS volume The Disk Defragmenter Tool Disk Defragmenter rearranges files programs and unused space on your computer s hard disk s allowing programs to run faster and files to open more quickly Putting the pieces of files and programs in a more contiguous arrangement on disk reduces the time the operating system needs to access requested items To run Disk Defragmenter perform the following steps 1 Click Start All Programs Accessories System Tools and then click Disk Defragmenter Alternatively you can right click a drive letter in My Computer select Properties click the Tools tab and click Defragment Now 2 Select which disk s you would like to defragment and any additional options you would like to set 3 Click the Defragment button to start the defragmentation process Note Windows XP Professional ships with a command line version of the disk defragmenter Defrag exe
310. m taking strategies that you should be able to use to your advantage Assessing Exam Readiness We strongly recommend that you read through and take a Self Assessment A good site is www measureup com and the site includes some free samples This will help you compare your knowledge base to the requirements for obtaining an MCSE and it will also help you identify parts of your background or experience that may be in need of improvement enhancement or further learning If you get the right set of basics under your belt obtaining Microsoft certification will be easier After you ve gone through the Self Assessment you can remedy those topical areas where your background or experience may not measure up to an ideal certification candidate But you can also tackle subject matter for individual tests at the same time so you can continue making progress while you re catching up in some areas After you ve worked through these notes and have taken practice tests you will have a pretty clear idea of when you should be ready to take the real exam We strongly recommend that you keep practicing until your scores top the 80 percent mark This is a good goal to give yourself some margin for error in a real exam situation where stress will play more of a role than when you practice After you hit that point you should be ready to go But if you get through the practice exams without attaining that score you should keep taking practice tests and stu
311. matically becomes a member of the Local Users group 81 Table 2 Built in security principals installed by default under Windows XP Professional Built in Role Security Principal Everyone Includes all users who access the computer The best practice is to avoid using this group If you enable the Guest account any user can become authorized to access the system and the user inherits the rights and permissions assigned to the Everyone group Authenticated Users These users have valid user accounts on the local system or they possess a valid user account within the domain of which the system is a member It is preferable that you use this group over the Everyone group for preventing anonymous access to resources The Guest account is never considered as an Authenticated User Creator Owner A user who creates or takes ownership of a resource Whenever a member of the Administrators group creates an object the Administrators group is listed as the owner of that resource in lieu of the actual name of the user who created it Creator Group f placeholder for an access control entry ACE that can be inherited Network Any user accounts from a remote computer that access the local computer via a current network connection Interactive Any user accounts who are logged on locally Anonymous Any user accounts that Windows XP did not validate or Logon authorize Users cannot log on
312. me 5 You must restart the computer for the change to take effect MCP Exam 70270 Preparation doc 232 You can use this procedure only to upgrade from a single processor HAL Hardware Abstraction Layer to a multiple processor HAL If you use this procedure to change from a standard HAL to an ACPI HAL for example after a BIOS upgrade or vice versa unexpected results may occur including an inability to boot the computer If you upgrade the BIOS from supporting APM to ACPI you need to reinstall Windows XP so that the operating system will properly support that type of upgrade MCP Exam 70270 Preparation doc 233 Mobile Computing PCMCIA PC Card adapters USB ports IEEE 1394 FireWire and infrared devices are fully supported in Windows XP You manage these through Device Manager Support is provided in Windows XP Professional for both the APM and the ACPI power management standards which are covered near the end of this chapter Hot computer is fully powered and cold computer is in Suspend mode docking and undocking are fully supported for computers with a Plug and Play BIOS Hibernate complete power down while maintaining the state of open programs and connected hardware and Suspend deep sleep with some power modes are also supported for extending battery life When you install a PC Card USB or infrared device Windows XP automatically recognizes and configures it if it meets Plug and Play specifications If Windows d
313. metimes information supplied in earlier questions will shed more light on later questions Also when you answer a question correctly you are presented with a more difficult question next to help the software gauge your level of skill and ability When you answer a question incorrectly you are presented with a less difficult question and the software lowers its current estimate of your skill and ability This continues until the program settles into a reasonably accurate estimate of MCP Exam 70270 Preparation doc 25 what you know and can do and takes you on average through somewhere between 15 and 30 questions as you complete the test The good news is that if you know your stuff you ll probably finish most adaptive tests in 30 minutes or so The bad news is that you must really really know your stuff to do your best on an adaptive test That s because some questions are so convoluted complex or hard to follow that you re bound to miss one or two ata minimum even if you do know your stuff So the more you know the better you ll do on an adaptive test even accounting for the occasionally weird or unfathomable questions that appear on these exams Because you can t always tell in advance if a test is fixed length short form or adaptive you will be best served by preparing for the exam as if it were adaptive That way you should be prepared to pass no matter what kind of test you take But if you do take a fixed length or short form
314. ming profiles B The system is configured to use only mandatory roaming profiles C Fast User Switching is turned on so user profiles exist only on a domain controller D The user profiles are located in systemroot Profiles Answer d is correct The computer must have been upgraded from Windows NT Workstation 4 Upgraded systems continue to store user profiles in the same folder as the Windows NT 4 default location systemroot Profiles All profiles get stored on the local computer including roaming and mandatory roaming profiles so answers a and b are incorrect Fast User Switching has nothing to do with user profile locations WRKSTN3 is a Windows XP Professional computer that is connected to a workgroup named SALESDEPT All computers in the workgroup are configured with default settings A user named Alexis makes sure that she shares her GROUPDOCS folder with the network and leaves the default settings for caching A user named Brendan working on WRKSTN7 connects to Alexis GROUPDOCS share He right clicks one of the files in the shared folder to make it available offline however that option does not exist on the pop up menu How can Brendan solve this problem A Make sure that his computer s DNS settings are correct B Turn off Fast User Switching C Run the Network Settings Wizard to enable Offline Files D Make the computer a member of a Windows 2000 Server or a Windows NET Server Active Directory domain Answ
315. move button After items have been moved to the left list you can reorder an item by selecting the item and clicking the up or down button MCP Exam 70270 Preparation doc 16 Create a Tree Question Format Questions in the create a tree format also present two lists one on the left side of the screen and one on the right side of the screen The list on the right consists of individual items and the list on the left consists of nodes in a tree To answer the question you must move items from the list on the right to the appropriate node in the tree These questions can best be characterized as simply a matching exercise Items from the list on the right are placed under the appropriate category in the list on the left Here s an example of how they appear in this book for a sample of how they appear on the test see Figure 3 Figure 3 This is how create a tree questions appear Treelist Washington s Birthday Thanksgiving Easter TreeList Chrstmas Washington s Birthday Spree 9 Fiag Day Memorial Day Easter Summer Fourth of July Labor Day Fal Thanksgiving MCP Exam 70270 Preparation doc 17 QUESTION 4 The calendar year is divided into four seasons Winter Spring Summer Fall Identify the season when each of the following holidays occurs Christmas Fourth of July Labor Day Flag Day Memorial Day Washington s Birthday Thanksgiving Easter ANSWER The correct answer is Winter Ch
316. must belong to in order to gain access to the work computer from the home computer You can add users to this group by using the interface shown in Figure 5 or by using the Local Users and Groups option in the Computer Management snap in Administrators automatically have Remote Desktop access without being placed into the group Connecting with Remote Desktop When a user wants to connect to a computer that has Remote Desktop enabled they will only need to run a simple application The application is installed by default on all Windows XP Professional computers To access the application go to Start All Programs Accessories Communications Remote Desktop Connection You will be prompted to input the computer name or IP address of the work computer After clicking the Connect button you will be prompted for a username and password for the Remote Desktop connection Microsoft put in a security feature for the work computer The feature locks the desktop and puts up a screen so no one can see what you are working on remotely As long as you are connected to the computer through Remote Desktop no one will be able to connect to the computer locally In order for you to gain access to your computer after you get back to work you press Ctrl Alt Delete to be prompted for your username and password enabling you to unlock the system If you have accidentally left the connection established on your home computer to your work computer it will autom
317. n You should try this option before resorting to the Automated System Recovery feature discussed later in this chapter Directory Services Restore Mode This option applies only to Windows 2000 Server and Windows NET Server domain controllers and is used to restore Active Directory and the sysvol folder This option is not applicable to Windows XP even though it is one of the menu choices Debugging Mode In this mode Windows XP can send debugging information through a serial cable to another computer for troubleshooting the operating system kernel and system analysis Start Windows Normally This option simply starts Windows XP normally without selecting any advanced startup option Reboot This option restarts Windows XP Professional Return to the OS Choices Menu MCP Exam 70270 Preparation doc 335 This option takes you back to the operating system selection menu if your computer has more than one operating system installed System Recovery Settings To specify Windows XP s behavior if the system stops unexpectedly follow these steps 1 2 Right click the My Computer icon not a shortcut and then select Properties On the Advanced tab click the Settings button under the Startup And Recovery section From the System Failure section and from the Write Debugging Information section select the actions that Windows XP should perform if a stop error occurs which shuts down the operating system and usually resu
318. n and selecting MCP Exam 70270 Preparation doc 372 Properties From the connection s Properties dialog box you can configure connection devices modems and so on list alternate phone numbers and configure dialing options and redialing options You can specify security options configure dial up server settings and modify network connection components You can also set up Internet Connection Sharing ICS from the Sharing tab if this connection will be used to connect other users on the network to the Internet ICS is covered in more detail later in this chapter The Networking tab of a dial up connection s Properties dialog box enables you to configure several essential components for successful connections see Figure 4 Be sure to specify the proper dial up server type to which you will be connecting either PPP or SLIP You can change PPP settings by clicking the Settings button as shown in Figure 5 Be sure that your connection has at least one dial up network protocol in common with the remote access server to which it will be attempting to connect You can install and uninstall networking components such as protocols from the Networking tab You can also enable or disable any listed component by marking or clearing its checkbox Figure 4 The Networking tab of a dial up connection s Properties dialog box 1 BCN Properties General Options Security Networking Advanced Type of dial up server am calling PPP Windo
319. n checked Answer d is incorrect because that would cause the users to not be able to connect to the Web site which is not what you want MCP Exam 70270 Preparation doc 385 MCP Exam 70270 Preparation doc 386 CONCLUSION THANK YOU hope you have enjoyed your journey with this course MCP Exam 70270 Preparation May this be a significant step in your journey of success Success might be defined as the progressive realization of worthwhile goals We are very pleased to be able to work with you Please refer to our Web Page at www ebooksctf co nz under the section International Certification in IT for other relevant Courses Please continue to E Mail us if you have any questions or comments Our E Mail address is questions ebooksctf co nz e Please also feel free to seek our advice about any area where you think we can help e Please include where possible the Course Name and the Page Number these can be found on the footer of each page if it is a question about a Course Please share your success stories with us We are delighted to hear from you We look forward to your continual success MCP Exam 70270 Preparation doc 387 MCP EXAM 70 270 PREPARATION Copyright by CTF Services Limited 2005 All rights reserved worldwide No part of this book may be reproduced or transmitted in any form or by any means electronic or mechanical including photocopying recording or by any information storage and r
320. n doc 7 MCP Exam 70270 Preparation doc 8 Chapter One Microsoft Certification Exams Terms you ll need to understand e Case study Multiple choice question formats Build list and reorder question format Create a tree question format Drag and connect question format Select and place question format Fixed length tests Simulations Adaptive tests Short form tests Techniques you ll need to master e Assessing your exam readiness Answering Microsoft s varying question types Altering your test strategy depending on the exam format Practicing to make perfect Making the best use of the testing software Budgeting your time Guessing as a last resort MCP Exam 70270 Preparation doc 9 Exam taking is not something that most people enjoy no matter how well prepared they may be In most cases familiarity helps offset test anxiety In plain English this means you probably won t be as nervous when you take your fourth or fifth Microsoft certification exam as you ll be when you take your first one Understanding the details of taking the new exams how much time to spend on questions the environment you ll be in and so on and the new exam software will help you concentrate on the material rather than on the setting Mastering a few basic exam taking skills should help you recognize and perhaps even outfox some of the tricks and snares you re bound to find in some exam questions This chapter describes some proven exa
321. n the IT department who can help you with the issue but they are working at home today What Windows XP component will allow them to help you with your issue A Remote Desktop Web Access B Remote Desktop C Remote Assistance D Application Compatibility A7 Answer c is correct Remote Assistance will allow someone to gain access to your computer and assist you with a problem or issue This tool will allow remote control chat and voice communications Answers a and b are incorrect because they are related to Remote Desktop not Assistance With Remote Desktop someone can take control of your computer but they can t assist you with the problem Answer d is incorrect because Application Compatibility will attempt to run applications in another OS environment not help someone connect to your computer MCP Exam 70270 Preparation doc 321 A8 A9 You have been given the task of documenting the IP network and the Classful subnets that make up your network To make the correct classification for the subnets you need to have the correct ranges for each different class of IP address You also need to specify which IP address ranges are functional on the internal network but not routable on the Internet Which is the correct set of IP address ranges for the A B and C classes and which is the set of IP addresses that are within these ranges but are not routable on the Internet Check all correct answers A 0 to 128 for Class A
322. namic disks under a Windows 2000 or a Windows NET Server operating system See the upcoming section Dynamic Volumes to find out how to migrate data from stripe sets or volume sets that are stored on a basic disk under Windows NT 4 Workstation or Windows 2000 Professional Because Windows XP Professional is a desktop client side network operating system it does not support any type of fault tolerant volumes even on dynamic disks Only Microsoft server operating systems support fault tolerant features such as mirrored volumes and RAID 5 volumes stripe sets with parity Windows 2000 Server and later server operating systems require fault tolerant volumes to be stored on dynamic disks Partitions and Logical Drives on Basic Disks You can create primary partitions extended partitions and logical drives only on basic disks You should create partitions instead of dynamic volumes if your computer also runs a down level Microsoft operating system You must be an administrator or a member of the Administrators group to create modify or delete basic volumes Partitions and logical drives can reside only on basic disks You can create up to four primary partitions on a basic disk or up to three primary partitions and one extended partition You can use the free space in an extended partition to create multiple logical drives Note You can extend a basic volume but it must be formatted as NTFS it must be adjacent to contiguous unallocated
323. nd Objects checkbox 8 Click OK for the Advanced Security Settings dialog box 9 Click OK for the Properties dialog box How Upgrading to Windows XP Affects File Sharing Behavior Windows NT 4 Workstation computers and Windows 2000 Professional computers whether members of a workgroup or a domain maintain their workgroup or domain membership respectively and retain the classic file sharing and security user interface when they are upgraded to Windows XP Professional Simple File Sharing is disabled NTFS security permissions and shared folder permissions are not changed after the upgrade Windows 98 and Windows ME computers that have per share sharing permissions as members of a workgroup always have Simple File Sharing enabled by default after they are upgraded to Windows XP Professional Shared folders that have passwords assigned to them are removed shared folders that have blank passwords remain shared after the upgrade Windows 98 and Windows ME systems that are logged on to a Windows domain with share level access enabled are joined to that domain when they are upgraded using the Windows XP Setup program and Simple File Sharing is disabled after the upgrade Auditing System and Network Events Windows XP Professional enables administrators to audit both user and system events enabling various auditing policies When auditing is enabled for specific events the occurrence of the events triggers a log entry in the Windows XP Prof
324. nd dual boot with Windows NT 4 then you will see the warning If you want to configure your computer to run Windows NT 4 and Windows XP you need to upgrade your version of Windows NT 4 to SP4 or later An updated NTFS SYS driver is included in NT 4 SP4 and later SPs that enables NT 4 to read from and write to NTFS 5 volumes created with Windows 2000 or Windows XP If you expect to dual boot Windows 98 or Windows Me with Windows XP remember that Windows 98 Me can read only FAT and FAT32 file systems Converting from One File System to Another Windows XP supports converting from one file system to another with some special caveats and limitations that you need to be well aware of Converting a FAT or FAT32 Partition to an NTFS Partition Let s say that you want to convert drive D to NTFS from either FAT or FAT32 No problem From the command line click Start Run type CMD EXE and click OK enter the command convert d fs ntfs If the FAT or FAT32 partition is the boot partition the conversion takes place when the machine next reboots because many of the operating system files are locked This command is a one way ticket only and is not reversible However if you convert the boot volume you do have one option before the computer restarts The boot volume should not be confused with what Microsoft calls the system volume the first logical operating system partition usually denoted as the C drive Figure 3 shows an example of t
325. nd folder permissions support for disk quotas the Encrypting File System EFS and a number of other useful features The disk quotas feature is covered later in this chapter When you install Windows XP existing legacy NTFS volumes are automatically upgraded to NTFS 5 No options are presented to choose NTFS 5 during the installation The existing volumes are simply converted to NTFS 5 whether you want it or not When you install Windows XP to an NTFS partition part of the Setup process is to apply default security settings to the system files and folders located on the boot partition essentially the Windows and Program Files folders MCP Exam 70270 Preparation doc 267 All local NTFS volumes including removable media are upgraded to the new version 5 of NTFS This occurs after you restart your computer the first time after the graphical portion of Setup Any NTFS volumes that are removed or powered off during the installation or upgrade process are upgraded automatically when those drives are mounted If during the installation the system detects a version of Windows NT earlier than Windows NT 4 with Service Pack 4 SP4 you will see a warning message indicating that an earlier version of Windows NT was found and that Windows NT will not be accessible if you continue Windows NT Workstation 4 can be upgraded to Windows XP Professional without applying service packs However if you want to create a new installation of Windows XP a
326. ndard VGA and create a boot log which is useful when you are determining the exact cause of system startup problems As a precautionary measure when you boot into Safe Mode Windows XP does not update the Last Known Good Configuration information So you always have the option of booting the computer using the Last Known Good Configuration even after you have restarted the computer under Safe Mode and perhaps changed some settings You can go back to the original settings under the Last Known Good Configuration and discard any changes you may have made under Safe Mode In Safe Mode Windows XP uses default settings including the VGA monitor Microsoft mouse driver no network connections and the minimum device drivers required to start Windows Support for audio devices as well as for most USB and FireWire IEEE 1394 devices is disabled by Safe Mode Users applications that normally run at startup do not run at startup under Safe Mode If your computer does not start successfully using Safe Mode you may need to use the Recovery Console feature or the Automated System Recovery ASR feature covered later in this chapter to repair your system Windows XP also provides several startup modes to help you troubleshoot and repair Windows XP systems as well as recover from various types of disaster Understanding each mode enables you to make informed decisions about the best startup method to use in a MCP Exam 70270 Preparation doc 333 par
327. nding on the type of device you are installing you may have to manually configure these settings The appropriate range of settings should be supplied in the user s manual that ships with your device Generally you should not change resource settings manually because when you do so the settings become fixed and Windows XP then has less flexibility when allocating resources to other devices If too many resources become fixed Windows XP may not be able to install new PnP devices Managing and Troubleshooting Driver Signing Microsoft is promoting driver signing for devices as a method to advance the quality of drivers and to reduce support costs for vendors and total cost of ownership TCO for customers Windows XP uses a driver signing process to make sure drivers have been certified to work correctly with the Windows Driver Model WDM in Windows XP If you are having problems it may be because you are using a driver not correctly written for Windows XP To identify such drivers use the Signature Verification tool This utility Sigverif exe helps you to quickly identify unsigned drivers if a device is not working or if you want to ensure that all drivers in use are properly signed MCP Exam 70270 Preparation doc 217 Using the Signature Verification Tool To use the Signature Verification tool perform the following steps Start Sigverif exe Start Run Sigverif exe Click the Advanced button Select the option Look For Other Fil
328. ne of the Computer Management Console until you see the snap in In this snap in you can create modify duplicate and delete users in the Users folder and groups in the Groups folder MCP Exam 70270 Preparation doc 123 Built in User and Group Accounts The three primary built in user accounts are Administrator Guest and HelpAssistant The Administrator account is a critical account for your computer and has some essential characteristics including the following e Cannot be disabled locked out or deleted e Has through its membership in the Administrators group all privileges required to perform system administration duties e Can be renamed The Guest account is on your system for rare and infrequent use and should be kept securely disabled This account also has some distinct characteristics including the following e ls disabled by default Only an administrator can enable the account If it is enabled it should be given a password and User Cannot Change Password should be set if multiple users will log on with the account e Cannot be deleted e Can be locked out e Does not save user preferences or settings The HelpAssistant account is on your system for use when the Remote Desktop Assistance functions are used This account s characteristics include the following e Disabled by default e ls automatically enabled when an invitation is created for Remote Assistance e Can be deleted e Can be renamed Built in Local g
329. nel Memory Dump option Windows XP writes only kernel information to the listed file instead of the entire contents of system memory The Small Memory Dump option requires at least a 2MB paging file on the boot volume If you contact Microsoft Product Support Services about a stop error the support engineer may ask for the system memory dump file generated by the Write Debugging Information options Except for small memory dumps Windows always writes to the same file name for each dump file generated To save successive dump files change the file name after each stop error or change the location path or file name MCP Exam 70270 Preparation doc 337 setting in the Dump File text box For small memory dumps a new file name is created each time the system stops unexpectedly Setting Up Recovery Actions to Occur When a Service Fails To set up recovery actions to take place when a service fails perform the following steps 1 Open the Services MMC snap in 2 Right click the service for which you want to set recovery actions and then click Properties 3 On the Recovery tab select the actions you want the system to take for the First Failure Second Failure and Subsequent Failures as shown in Figure 3 Figure 3 The Recovery tab of a service s Properties dialog box enables you to select actions that the system will take if the service fails Fax Properties Local Computer General Log On Recovery Dependencies S
330. nformation Restoring files backed up from a Windows XP NTFS volume onto a FAT or FAT32 volume will result in all NTFS settings being lost If you attempt to restore Windows XP NTFS stored files onto an NTFS volume running under Windows NT 4 you will lose all EFS settings disk quota settings advanced NTFS 5 permissions and Remote Storage configuration information MCP Exam 70270 Preparation doc 332 Troubleshooting and Repairing Windows XP Professional Systems Windows XP Professional offers several advanced startup options for troubleshooting and repairing the operating system In addition to supporting various options when you restart the computer Windows XP also offers more effective ways to recover from reconfiguration errors or from intentional or accidental system damage than any other previous Microsoft operating system With Windows XP disaster recovery no longer needs to be an overly arduous process Safe Mode and Other Advanced Startup Options Safe Mode enables you to start your system with a minimal set of device drivers and services For example if newly installed device drivers or software are preventing your computer from starting you may be able to start your computer in Safe Mode and then remove the software or device drivers from your system Safe Mode does not work in all situations especially if your system files are corrupted or missing or if your hard disk is damaged or has failed All Safe Modes start using sta
331. ng other group accounts Membership of system groups changes based on how the computer is accessed not on who accesses the computer Built in System groups include the following Everyone Includes all users who access the computer including the Guest account Authenticated Users Includes all users with a valid user account in the local security database or in the case of domain members in Active Directory s directory services You use the Authenticated Users group rather than the Everyone group to assign privileges and group permissions because doing so prevents anonymous access to resources MCP Exam 70270 Preparation doc 125 e Creator Owner Contains the user account that created or took ownership of a resource If the user is a member of the Administrators group the group is the owner of the resource e Network Contains any user with a connection from a remote system e Interactive Contains the user account for the user logged on locally at the system e Anonymous Logon Includes any user account that Windows XP did not authenticate e Dial up Contains all users that currently use a dial up connection Creating Local User and Group Accounts To create a local user or group account right click the appropriate folder Users or Groups and choose New User or New Group enter the appropriate attributes and then click Create User account names e Must be unique e Are recognized only up to their 20th charact
332. ng the installation When it comes time to uninstall an application Windows Installer Service knows exactly where every last component of the application is thereby successfully uninstalling the application If during the installation of an application something happens and the install fails Windows Installer Service can restart the installation from the point of failure MCP Exam 70270 Preparation doc 179 That may not always be the best solution though Windows Installer Service can also roll back everything that was installed up to the point of failure enabling the user to start the install from scratch Installing Packages A Windows Installer Package MSI file contains all the information necessary to tell Windows Installer Service how the application should be installed To take advantage of the features that Windows Installer Service offers you must install an application as an MSI file Applications such as Microsoft Office 2000 and Office XP have their own MSI files Software developers must design their applications to use this new service However existing applications can still gain some of the functionality that MSI files have to offer An application can repackage existing applications using third party tools such as Winlnstall LE which is available on the Windows 2000 Professional CD ROM but does not ship on the Windows XP Professional CD ROM The full featured version WinInstall is published by Veritas Software This ap
333. nges containing 62 IP addresses each Understanding Classless Interdomain Routing The technology that we just looked at VLSM takes a Classful IP address range and makes more IP networks with fewer IP addresses This is great for smaller companies or companies that want to break up the network into segments to reduce broadcasts However what if you are a larger company and you require additional IP addresses for one network segment For this solution you will need to combine IP address ranges together This is called Classless Interdomain Routing CIDR With CIDR multiple subnets are seen as a single logical network of IP addresses CIDR does have limitations such as routing protocols and hardware devices However if your network can support CIDR it just might be the solution that you are looking for MCP Exam 70270 Preparation doc 299 When you are determining whether or not two IP address ranges can be combined with CIDR you need to first determine if they share the higher order bits Here examples will help explain how this works Example 1 Bits 10 1 2 0 24 00001010 00000001 00000010 00000000 10 1 3 0 24 00001010 00000001 00000011 00000000 Example 2 Bits 10 3 2 0 24 00001010 0000001 1 00000010 00000000 10 1 3 0 24 00001010 00000001 00000011 00000000 The first example can use CIDR because the first 23 bits are the same and therefore can be combined into a single network by the use of a classless network This w
334. ns You configure all regional locales and language settings through the Regional and Language Options applet in the Control Panel folder see Figure 14 Perform the following steps to select a regional setting for standards and formats 1 Open the Regional and Language Options applet in the Control Panel 2 Select the Regional Options tab 3 Select your preferred locale from the Standards and Formats drop down list 4 Click OK MCP Exam 70270 Preparation doc 185 Figure _ 14 The Regional Options tab for the Regional and Language Options Control Panel applet Regional and Language Options Regional Options Languages Advanced Standards and formats This option affects how some programs format numbers currencies dates and time Select an item to match its preferences or click Customize to choose your own formats Samples Number 123 456 789 00 Currency 123 456 789 00 Time 07 51 48 Short date 95 10 2001 Long date 05 October 2001 Location To help services provide you with local information such as news and weather select your present location v No reboot is required The change of locale takes effect immediately In addition applications that depend on these settings reflect the new locale immediately As an alternative to selecting a specific locale you can click the Customize button to individually adjust the regional settings for Numbers Currency Time and Date from the Customize R
335. nstallation rollback feature or implement the Install On First Use Feature The following is a basic example of how to create a ZAP file application FriendlyName WinZip Version 7 0 SetupCommandz server1 apps winzip WinZip70 EXE DisplayVersion 7 0 ext ZIP MCP Exam 70270 Preparation doc 180 Publishing MSI Packages You typically install MSI files over the network or locally on the client computer A common method for installing MSI files in a Windows Active Directory domain environment is to publish or assign applications to users through Active Directory Users and computers in Active Directory can be grouped into containers called organizational units OUs You can create a Group Policy Object GPO for an OU that either publishes or assigns MSI files to users Any users in the OU would then receive the software when they log on to their Windows XP Professional computers Using Group Policy to Publish or Assign Windows Installer Packages Network administrators use Group Policy Objects GPOs to publish or assign application programs When you publish a software application using a GPO you are making it available to one or more users and the published application will follow the user s from workstation to workstation within an Active Directory domain Users install a published application from the Add Remove Programs icon in the Windows Control Panel You may only publish an application to users When you assign a s
336. o all folders Reset All Folders Advanced settings C Launch folder windows in a separate process gt Managing pairs of Web pages and folders Show and manage the pair as a single file Show both parts and manage them individually Show both parts but manage as a single file C Remember each folder s view settings C Restore previous folder windows at logon C Show Control Panel in My Computer Show pop up description for folder and desktop items C Use simple file sharing Recommended v MCP Exam 70270 Preparation doc 280 Accessing Encrypted Files and Data Recovery Agents DRAs Encryption is just an extended or advanced attribute of a file or folder If you set NTFS permissions to deny the Write Attributes permission on a file or folder the users to whom you have assigned this Deny permission cannot use encryption To work with NTFS permissions on a Windows XP computer that is not a member of an Active Directory domain you must clear the Use Simple File Sharing Recommended checkbox from the Folder Options dialog box After a file has the encryption attribute only the user who encrypted it or the DRA can access it DRAs are users who are designated as recovery agents for encrypted files Only these users have the ability to decrypt any encrypted file no matter who has encrypted it Other users who attempt to access an encrypted file receive an Access Is Denied message The default DRAs are as follows e User
337. o allow this assistance to your Windows XP clients you will want to start by opening port 3398 on the firewall All of the sessions are encrypted so the security of the information being transferred back and forth should be extremely high As far as creating a new invitation you can do this with a command line if you feel so brave The HELPCTR EXE tool can create almost any view of the Help and Support Center including starting a Remote Assistance session MCP Exam 70270 Preparation doc 317 Practice Questions le A1 A2 You are the administrator of a small company that has 20 nodes on the network The network is currently split into two distinct network segments You are looking for an inexpensive solution to allow the computers on one network segment to communicate with the users on the other network segment What will you implement to allow this communication A Set up a DHCP relay agent B Configure ICS on one of the client computers C Configure a TCP IP profile for each node D Set up a network bridge Answer d is correct A network bridge connects different network segments into a single network allowing them to appear as a single network subnet Answer a is incorrect because the DHCP relay agent is only for DHCP clients not for allowing normal network traffic communication Answer b is incorrect because it does not allow a network of computers access to the Internet through a single computer Answer c is incorrec
338. o change the reference in the user properties and within the directory structure where the folder resides The second situation that warrants renaming a user account is the security practice of renaming the built in Administrator and Guest accounts You cannot delete these accounts nor can you disable or remove the Administrator account from the Local Administrators group so renaming the accounts is a recommended practice for hindering malicious access to a system A Group Policy exists to modify the Administrator and Guest name You can either create this at the local computer level or at the site domain or organizational unit OU level within Active Directory Disabling or Enabling User Accounts To disable or enable a user account open its Properties dialog box and select or clear the Account Is Disabled checkbox If an account is disabled a user cannot log on to the system using that account The Administrator account cannot be disabled and only Administrators can enable the Guest account Deleting Accounts You can delete a local user or group account but not built in accounts such as Administrator Guest or Backup Operators by right clicking the account and choosing Delete When you delete a group you delete the group account only not the members of the group A group is a membership list not a container Note When you delete an account you are deleting its SID Therefore if you delete an account by accident and re cre
339. o the Internet using local non long distance connections and offers them a way to connect to PPTP computers in remote locations without incurring toll charges or requiring dedicated data lines e Layer 2 Tunneling Protocol L2TP An alternative to PPTP L2TP was new to Windows 2000 and offers similar functionality to PPTP However L2TP is an industry standard VPN protocol and is shipped with Windows XP Professional L2TP also encapsulates TCP IP IPX or NetBEUI data packets and encrypts the data being transmitted as it is tunneled through MCP Exam 70270 Preparation doc 296 the Internet You can also use L2TP in conjunction with Microsoft IP Security IPSec for enhanced security L2TP is covered in more detail later in this chapter e PSec This is a relatively new Internet security protocol also referred to as Secure IP It provides computer level authentication in addition to data encryption for VPN connections that use the L2TP protocol IPSec negotiates between the client computer and the remote tunnel server before an L2TP connection is established which secures both authentication passwords and data L2TP uses standard PPP based authentication protocols such as Extensible Authentication Protocol EAP Microsoft Challenge Handshake Authentication Protocol MSCHAP CHAP Shiva Password Authentication Protocol SPAP and Password Authentication Protocol PAP with IPSec e World Wide Web WWW publishing service This is a
340. o the devices attached to your computer supplying power to those that you are using and conserving power for those you are not Windows XP automatically manages the power for devices However some devices may have options you can set in Device Manager To take full advantage of Plug and Play you need to use Windows XP on an ACPl compliant computer that is running in ACPI mode and the hardware devices must be PnP and or ACPI compliant In an ACPl compliant computer the operating system not the hardware configures and monitors the computer s MCP Exam 70270 Preparation doc 239 devices Windows XP Professional supports ACPI wake events for ACPI compliant devices These events include wake on ring for modems wake on LAN for network cards and wake on critical battery MCP Exam 70270 Preparation doc 240 Managing Card Services Card services play an important role in Windows XP Professional Support for card services includes PC Cards as peripheral devices and Smart Card technology for logon authentication The operating system supports both the PC Card formerly known as PCMCIA standard as well as the CardBus PC Card 32 standard The many benefits of these devices include their compact size low power requirements and support for the Plug and Play standard The CardBus specification is a combination of the PC Card 16 standard and the Peripheral Component Interconnect PCI standard This combination provides 32 bit performance and th
341. ocess s priority Processes are assigned a priority of Normal by default Choosing Above Normal or High will increase the priority of a process and thereby increase the frequency with which its threads are serviced Choosing Below Normal or Low will diminish the servicing of a process Do not use the Realtime priority This priority should be reserved for real time data gathering applications and operating system functions Setting an application to Realtime priority can cause instability and can be difficult to reverse without restarting the system Process priority can also be controlled when an application is launched using the start command with the low belownormal normal abovenormal high and realtime switches On dual processor Windows XP Professional computers you can also assign one or more specific processes to a specific processor of your choosing When you right click a process in Task Manager from the Processes tab the Set Affinity option is available in addition to the Set MCP Exam 70270 Preparation doc 357 Priority option The Set Affinity option is not displayed at all on single CPU systems Monitoring Event Logs The new Eventtriggers exe command line tool displays and configures actions to be taken based on events system messages warnings and failures that occur which are tracked by the Windows XP Event Viewer The Eventtriggers exe utility works on both local and remote computers and monitors the Applica
342. ods and not start the task if the computer is running on batteries Also you can assign security permissions to the task to control which users can modify the task options Click Finish After you have closed the Scheduled Task Wizard and the Advanced Properties sheet an icon that represents the task is created Users can double click a task to view and configure its advanced properties after they have created the task as shown in Figure 20 Figure 20 The Scheduled Tasks window displaying the advanced settings for a task r B Nee Pun Time last FunTee Status Delete the task t is not schedided to run again F Sopthetakdammefor 2 Si houi 2 muntels Other Places ksa Tene G Corot Pace T Ordy stant the task E the computer has boen iSe for at oost CL My Documents miritaia O Shared donmenss 3 Sy Newer Pinces f the conger has not been ido that long retry flor up to E ese T Stop the task the computer caosas to be idie Power Management f Dont stat the task Ethe computer is runring on batteries F Stop the task betiery mode begins F Waka the computer to nun this taik MCP Exam 70270 Preparation doc 202 Troubleshooting Tasks The Scheduled Task Wizard makes it very easy to create tasks However sometimes tasks do fail to run The most common reason for this is that the wrong username or password was entered for the task If a task failed verify that you entered the correct username and
343. oes not have an entry in its Driver cab file for the new hardware you are prompted to supply one Support for Offline Files enables mobile users to work with documents and other files even when they are disconnected from the network Offline Files can be synchronized when users reconnect to the network Folder Redirection enables administrators to redirect system folders such as My Documents to store users files at an alternate location on a network server while making it appear to the users that the folder is local to their computer This feature helps to ensure that users data is stored in a central location that can be backed up When used with Offline Files mobile users can take their data with them on the road and then synchronize their files when they return to the office Equipping mobile computers with Smart Cards and implementing the NTFS file system in conjunction with the Encrypting File System decreases the likelihood of confidential data being compromised if the computer is stolen lost or simply placed into the wrong hands Managing Hardware Profiles A hardware profile stores configuration settings for a collection of devices and services Windows XP can store different hardware profiles so that users needs can be met even though their computer may frequently require different device and service settings depending on the circumstances A good example is a portable computer that is used in an office with a docking station Th
344. of packets using only Windows XP Professional tools from the GUI To conduct detailed network analysis for a Windows XP Professional system perform the following steps 1 Install the Network Monitor Driver 2 From the Network Connections folder right click a connection choose Properties and then click Install 3 Select the Protocol component and click the Add button Select Network Monitor Driver and click OK 4 Click Close to exit from the connection s Properties dialog box MCP Exam 70270 Preparation doc 355 The Network Monitor Driver can collect packets that the Windows XP system s network interfaces send or receive You can then analyze those packets using a version of Network Monitor that ships with Systems Management Server SMS Windows 2000 Server or Windows NET Server You can also use a new tool that ships with Windows XP Professional the Netcap exe command line utility to analyze your system s network packets Managing Processor Performance A system s processor is one of the more difficult components to optimize because every other component impacts it Low memory leads to paging which increases processor usage fragmented disk drives increase processor usage hardware interrupts keep the processor busy and of course applications and services place many demands on the processor Therefore to optimize a processor you need to look at Processor counters as well as counters for other objects Some of the most
345. ofessional computer Remote Assistance will be similar to the existing remote control software that you currently use such as PCAnywhere Funk Proxy or VNC However this software is built into the OS and allows for better control and security With this technology the end user is able to invite someone to help them troubleshoot or walk through an issue that they are having on their desktop The end user will simply fill out a small questionnaire and ship it to the desired support personnel This questionnaire is referred to as an invitation Before the end user can create and successfully send an invitation they need to enable Remote Assistance on their computer This is accomplished by going to Control Panel Performance and Maintenance System Remote tab and selecting the option to enable Remote Assistance as shown in Figure 7 Figure 7 Remote Assistance options under System Properties i z General Computer Name Hardware Advenced System Restore Automatic Updates Remote lt Select the ways that thes computer cen be used from another locaton V Allow Remote Assistance irmitations to be sent from thes computer Leam more about Remote Assistance Advanced Remote Assistance Settings Remote Desktop a ec e reer You can set limits for the use of Remote Assistance on this computer Full computer name Remote contro xpprom V Allow this computer to be controlled remotely Leem more about Remote Invitabon
346. oftware application using a GPO you are placing an icon for that application on the Start menu and associating its file extensions You may assign applications to both computers and users An assigned application actually gets installed the first time that a user opens the assigned program or attempts to open a file with a file extension that is registered to that application such as sheet1 xls which would be associated with Microsoft Excel Windows Installer Packages are published or assigned to users through an Active Directory based Group Policy Perform the following steps to create a software installation Group Policy 1 On an Active Directory domain controller open Active Directory Users and Computers 2 Select the domain to deploy the software to all users in the domain or select a specific OU to deploy software to users just in that OU 3 Right click the domain or OU and choose Properties Select the Group Policy tab 5 Click the New button to create a new Group Policy Type a name for the Group Policy and press Enter Select the policy and then click Edit 7 Under User Configuration expand Software Settings Next right click Software Installation and select New Package 8 Type the UNC path to the MSI package on the network for example server1 officexP proplus msi the MSI file for Microsoft Office XP Professional with Front Page A D MCP Exam 70270 Preparation doc 181 9 Select either Published or Ass
347. og box warning if an unsigned driver is encountered during a device installation It gives the user the option of continuing with the installation or terminating the device s setup e Do Not Allow Installation This option is the most restrictive of the three settings To prevent the installation of any unsigned device drivers this is the option you should select MCP Exam 70270 Preparation doc 219 Figure 4 The Group Policy settings for unsigned driver installation behavior s ra 2 C Console Root Policy Securty Setting pel Bz Devices Unsigned dever instalation behavior Wan but allow installation menter Contiguration Software Settings E Devices Unsigned driver installation behavior Properties ME 2 Windows Settings Local Securty Setting Scripts Startup Shutdown GP Securty Settings i Devices Linsigned diver installation behavior 0B Accourt Policies F w GD Local Policies CD Aude Policy s 9 User Rights Assignment C Securty Options Wam but allow installation J Public Key Policies I Software Rastriction Policies 3 P Securty Pobces on Local Corr C Adewistranve Templates f Gf User Configuration Using Cameras and Scanning Devices The Scanners And Cameras applet part of the Control Panel enables you to configure properties for scanners and digital cameras If you have a PnP camera or scanner Windows XP detects it and installs it automatically You can use the Scanne
348. older which replaced the older AT scheduler service Under Windows XP Microsoft has further refined this GUI utility that is designed to automatically run tasks at specified times This utility is quite similar to the Windows 98 Task Scheduler You can open the Scheduled Tasks folder from the Control Panel by double clicking the Scheduled Tasks icon or by clicking Start All Programs Accessories System Tools Scheduled Tasks Unlike Windows 2000 Professional the Scheduled Tasks folder is not shared by default You still can however create a task on a Windows XP computer and then copy it to another Windows XP computer This is helpful if a similar task needs to run on many computers By copying the task from one computer to another you don t have to re create it multiple times Creating a Task To create a new task open the Scheduled Tasks folder and double click the Add Scheduled Task icon to launch the Scheduled Task Wizard This wizard steps users through the process of selecting a program batch file or script to run automatically at a scheduled time The Scheduled Tasks service runs under the security context of the Windows XP local system account However for each scheduled task you must specify a user account and password that determines the security context under which each scheduled task will execute You still have the option of using the legacy AT command via the command line to set up scheduled events Events scheduled using the A
349. olume Select Add Click Mount In The Following Empty NTFS Folder and type the path to an empty folder on an NTFS volume or click Browse to locate it e To unmount a volume Select the drive letter path and then click Remove Confirm your selection by clicking Yes to remove the mount point or click No to retain it When you mount a local drive in an empty folder on an NTFS volume Windows XP assigns a drive path to the drive rather than a drive letter To modify a drive path remove it and then create a new drive path using the new location You cannot modify the drive path directly If you are administering a local computer you can browse NTFS folders on that computer If you are administering a remote computer browsing is disabled and you must type the path to an existing NTFS folder Support for FAT32 on DVD RAM Disks Under Windows XP Professional DVD RAM disks can be used as CD ROM devices as DVD ROM devices or as recordable and rewritable media Windows XP employs the FAT32 file system for both read and write operations on DVD RAM disks The Universal Disk Format UDF file system is utilized for read only operations Windows XP support for DVD RAM disks includes multiple session recording and logical block addressing See the Windows XP Hardware Compatibility List HCL on the Microsoft Web site www microsoft com hcl default asp for a current listing of supported DVD RAM drives MCP Exam 70270 Preparation doc 272 Disk Qu
350. ome office network The new IP allocation process follows these steps 1 The DHCP enabled client attempts to locate a DHCP server 2 The client will attempt to contact a DHCP server for approximately 60 seconds and then will try to configure its own IP address 3 The computer will use the information configured on the Alternate Configuration tab to determine whether to use APIPA or to use the alternate configuration information Figure 3 illustrates the options available for the Alternate Configuration tab Figure 3 The Alternate Configuration tab for TCP IP profiles Internet Protocol TCP IP Properties General Alternate Configuration If this Computer is used on more than one network enter the alternate IP settings below Automatic private IP address User configured IP address Subnet mask Default gateway Preferred ONS server Altemate DNS server Prefered WINS server Altemate WINS server The Alternate Configuration tab is only available if the initial TCP IP configuration is set to Obtain An IP Address Automatically MCP Exam 70270 Preparation doc 307 Connecting to Novell NetWare Networks and Unix Based Computer Systems Microsoft has always made an effort to allow its client operating systems the connectivity that they need to communicate with other network operating systems Windows XP does not stray from these efforts Microsoft s OSs have always had the capability to connect with Nov
351. on appears in the Control Panel When another IrDA transceiver comes in range the Wireless Link icon appears on the desktop and on the taskbar You can then send a file over the infrared connection with any of the following actions e Specify a location and one or more files using the Wireless Link dialog box e Use drag and drop operations to move files onto the Wireless Link icon on the desktop e Right click any selection of files on the desktop in Windows Explorer or in My Computer and then click Send To Infrared Recipient e Print to a printer configured to use an infrared port In addition to sending or printing files you can create a network connection that connects two computers using the infrared port You can use this capability to map shared drives on a host computer and work with files and folders in Windows Explorer or My Computer You can also use an infrared network connection to connect directly to another computer without modems cables or network hardware Enabling or Disabling Receiving Files via IrDA Connections To enable or disable receiving files using an infrared link perform the following steps 1 Open the Wireless Link applet in the Control Panel 2 On the Infrared tab mark or clear the checkbox labeled Allow Others To Send Files To Your Computer Using Infrared Communications and click OK Wireless Local Area Networking WLAN Support Windows XP Professional includes support for the IEEE standard 802 11 f
352. one file or folder previously so that either the local Windows XP system or the Active Directory domain has issued the user an EFS compatible certificate To add or remove users for shared access to encrypted files you must be the original user who encrypted the file or you must be one of the users already listed as having shared access to the file Perform the following steps to share access to an encrypted file with one or more other users 1 Right click a file that you have already encrypted under EFS and select Properties 2 Click the Advanced button from the General tab 3 Click the Details button to display the Encryption Details dialog box for the encrypted file 4 Click the Add button to display the Select User dialog box as shown in Figure 10 The Find User button is only available when the computer is a member of an Active Directory domain Figure 10 The Select User dialog box enables you to pick other users with whom to share access to an encrypted file Select the user s certificate with whom you want to share the access Issued to Friendly Expiration Date EJAlexis None 10 20 2101 EJsBrendan None 10 20 2101 Enan None 10 16 2101 gt 5 Click the user with whom you want to share access to this file and then click OK Repeat this step for each user with whom you want to share access to this file 6 Click OK to close the Encryption Details dialog box This dialog box should display all the users who can transparentl
353. opy the answer file Cmdlines txt file and hotfix executables to the distribution folder 5 Start the installation The final step is to install the OS which will in turn install the hotfixes from the entries that were placed in the Cmdlines txt file The two installation commands for XP are winnt exe and winnt32 exe Another option to install hotfixes with ease is to use the Qchain exe tool from Microsoft This tool allows multiple hotfixes to be installed without a reboot Of course if you attempt to install hotfixes normally without a reboot you could cause serious damage to your system even corruption and complete failure MCP Exam 70270 Preparation doc 57 Automatic Updates Automatic Updates is the new look and feel for the Critical Update Notification feature that was available in the Windows 9x series and Windows 2000 This feature automatically contacts the Windows Update site at Microsoft to detect any critical updates for the system This is an excellent service that is built in but for some environments usually corporations the service can be a problem not knowing which updates have been installed on the client computers However by selecting Control Panel System and then selecting the Automatic Updates tab the administrator can control how these critical updates are handled as shown in Figure 5 The three configurations are as follows e Download the updates automatically and notify me when they are ready to be installed
354. or WLANs WLAN support under Windows XP includes a new roaming feature that enables the operating system to detect a move to a new wireless access point and forces reauthentication to verify appropriate network access at a new location By default WLAN support under Windows XP uses the zero client configuration feature to automatically configure and use IEEE 802 11 authentication on the wireless network You can configure WLAN networking settings by opening the Network Connections window from the Control Panel right clicking the wireless connection you want to modify and selecting Properties From the wireless connection s Properties dialog box you can enable or disable the automatic wireless configuration set up or disable IEEE 802 11 authentication and specify a connection to a wireless network with or without a Wired Equivalent Privacy WEP Network Key MCP Exam 70270 Preparation doc 226 Installing Configuring and Supporting Video Display Adapters When Windows XP is being installed your system s BIOS selects the primary video display adapter based on PCI slot order You can install and configure any additional video adapters you want to use with your system by using the Display applet or the Add Hardware applet in the Control Panel Video problems often occur for one of three reasons e An incorrect video device driver has been installed e The display settings for the video adapter have been configured incorrectly e The graphics
355. or the Power Users group and for the Administrators group A Right click the drive letter in My Computer select Properties click the Quota tab and mark the checkboxes for Enable Quota Management and Deny Disk Space To Users Exceeding Quota Limit Click Apply and click the Quota Entries button Configure quota entries for the Power Users group and for the Administrators group B Right click the drive letter in My Computer select Properties click the Quota tab and mark the checkboxes for Enable Quota Management and Deny Disk Space To Users Exceeding Quota Limit Click Apply and click the Quota Entries button Configure quota entries for the Power Users group C Right click the drive letter in My Computer select Properties click the Quota tab and mark the checkboxes for Enable Quota Management and Deny Disk Space To Users Exceeding Quota Limit Click Apply and click the Quota Entries button Configure quota entries for each member of the Power Users group D Create a new local group named Super Users and make all the members of the Power Users group and the Administrators group members of this new group Right click the drive letter in My Computer select Properties click the Quota tab and mark the checkboxes for Enable Quota Management and Deny Disk Space To Users Exceeding Quota Limit Click Apply and click the Quota Entries button Configure quota entries for the Super Users group Answer c is correct Windows XP Professional supp
356. ore directly from one or more CD R or CD RW discs with the Windows XP Backup program Backing Up the System State The Backup tool can back up what is called System State data which includes critical files that you can use to rebuild the system You can reinstall a failed system with the Windows XP CD ROM Then you can restore the System State data bringing the system back to its original condition as of the date of the System State backup Be familiar with backing up the System State You should understand that the backup program can provide you with a backup of the system s Registry as a whole but it cannot back up individual components of System State data System State data includes the following e The Registry e The component services class registration database Component Object Model COM objects e System startup files e Certificate Services database applies only to Windows 2000 Server and Windows NET Server domain controllers DCs and member servers running Certificate Services not Windows XP e Active Directory Applies only to DCs not Windows XP e Sysvol folder Applies only to DCs not Windows XP Configuring the System State Backup MCP Exam 70270 Preparation doc 329 To configure the System State backup using the Backup Wizard perform the following steps 1 In the Backup Wizard on the What Do You Want To Back Up page select Let Me Choose What To Back Up and then click Next 2 On the Items To
357. orrect because Kim will receive an error message when he attempts to copy the encrypted file to a floppy disk MCP Exam 70270 Preparation doc 291 MCP Exam 70270 Preparation doc 292 Chapter 8 Implementing Managing and Troubleshooting Network Protocols and Services Terms you ll need to understand e Transmission Control Protocol Internet Protocol TCP IP Dynamic Host Configuration Protocol DHCP Domain Name System DNS Windows Internet Naming Service WINS Automatic Private IP Addressing APIPA File Transfer Protocol FTP Simple Mail Transfer Protocol SMTP Address Resolution Protocol ARP lpconfig Ping Route tracert TCP IP profiles Bridged connection Windows Messenger Remote Desktop Remote Assistance Techniques you ll need to master e Configuring and troubleshooting TCP IP Configuring protocols to interoperate with Unix and Novell Configuring a network bridge Using Windows Messenger Configuring and troubleshooting Remote Desktop Configuring and troubleshooting Remote Assistance The idea of a protocol in the networking world is rather simple When one computer needs to communicate with another computer they must talk the same language and be on the same connection The protocol is the language that the computers talk and the network itself typically an Ethernet network is the connection over which the protocols travel Many different protocols exist to choose from including NetBEUI IPX SPX
358. orts disk quotas on NTFS drive volumes only for individual users not for groups Therefore you would have to create a quota entry for each member of the Power Users group you cannot assign a quota limit to a group All members of the Administrators group inherit a no limit disk quota by default so you cannot set quotas on members of this group Answer a is incorrect for the reasons just cited Answer b is incorrect because you cannot set quotas on groups Answer d is incorrect for the same reason MCP Exam 70270 Preparation doc 289 A8 Brandy wants to move an NTFS compressed file from NTFS drive D to an uncompressed folder on NTFS drive F What will happen to the file when she performs this operation A The compressed file will become uncompressed when it is moved to drive F B The compressed file will remain compressed when it is moved to drive F C Windows XP will prompt the user as to whether the file should remain compressed or should be uncompressed after it is moved D Brandy will receive an error message when she attempts to move the file to an uncompressed folder Answer A is correct When you move a compressed file from one NTFS volume to a different NTFS volume the file inherits the compression attribute from the target location Answer b is incorrect because an NTFS compressed folder or file only retains its compression attribute when it is moved to another folder on the same NTFS volume Answer c is incorrect beca
359. ost computer check that Establish A Dial Up Connection Whenever A Computer On My Network Attempts To Access The Internet is checked on the Advanced tab of the Internet connection s Properties dialog box MCP Exam 70270 Preparation doc 380 Practice Questions di A1 A2 Bob is a consultant for an IT outsourcing company He has a number of clients that have network infrastructures that enable him to access their internal networks via a Virtual Private Network VPN One of his new clients ACME Corp needs Bob to check the status of its Exchange Server Bob configures a VPN connection for ACME on his Windows XP Professional workstation to use a Smart Card Bob tries to check Automatically Use My Windows Logon Name And Password but the option is grayed out What should Bob do to enable this option A Change the Security option setting from Use Smart Card to Require Secured Password B Change the Security option setting from Typical to Advanced C Change the Security option setting from Require Secured Password to Allow Unsecured Password D Disable his Smart Card Answer A is correct The option Automatically Use My Windows Logon Name And Password is only available when the Security option setting Require Secured Password is selected When using a Smart Card for authorization the logon name and password entry will be secured and there is no need to have the system require a secured password Answer b is incorrect because sele
360. otas Windows XP disk quotas track and control disk usage on a per user per volume basis You can apply disk quotas only to Windows XP NTFS volumes Quotas are tracked for each volume even if the volumes reside on the same physical disk The per user feature of quotas enables you to track every user s disk space usage regardless of which folder the user stores files in Disk quotas do not use compression to measure disk space usage SO users Cannot obtain or use more space simply by compressing their own data To enable disk quotas open the Properties dialog box for a disk select the Quota tab and configure the options as shown in Figure 4 Figure 4 The Quota tab of the Properties dialog box for an NTFS volume enables you to configure Windows XP disk quota options NTFS_SYSTEM C Properties General Tools Hardware Sharing Quota Status Disk quotas are disabled Enable quota management Deny disk space to users exceeding quota limit Select the default quota limit for new users on this volume Do not limit disk usage Limit disk space to 50 Set waming levelto 45 TE Select the quota logging options for this volume Log event when a user exceeds their quota limit Log event when a user exceeds their waming level When a user no longer stores data on a volume you need to delete disk quota entries The catch to this is that you can delete the user s quota entries only after you have removed from the volume a
361. ou created Right click Setupcl exe and extract it to the sysprep folder The next step is to install and configure all applications that must be in the disk image After you have accomplished this run sysprep exe in the sysprep folder Using the sysprep exe command removes all unique parameters from the computer and then shuts down the computer Reboot the computer with a disk image boot disk and create an image of the computer After you have applied an image to a computer a Mini Setup Wizard runs It prompts you to put back the unique parameters that you took out The SID is generated automatically at this point However you ll have to input the following settings e Computer Name e User Name e Regional Settings Company Name Network Settings Time Zone Place Computer In A Workgroup Or Join A Domain MCP Exam 70270 Preparation doc 43 As you can see you need to enter a fair amount of information for every computer you apply the image to You can use Setup Manager discussed earlier in this chapter to create an answer file called Sysprep inf This file provides the preceding settings to the Mini Setup Wizard to answer all the installation prompts The end result is an unattended install of the image Note You must place Sysprep inf in the sysprep folder or on a floppy disk which are the default locations where the Mini Setup Wizard looks for the answer file it checks the sysprep folder first after you have applied the image Anot
362. ou will need one folder to house the scanning portion and another folder to handle the loading portion of the process In the scanning folder copy the following files from the ValueAdd MSFT USMT folder off of the Windows XP Professional CD e Scanstate exe e dll e inf In the loading folder copy the following files from the same location e Loadstate exe e dll e MigUser inf Phase Il Scan the Source Computer Next you need to scan the user state on the source computer This is an easy phase that consists of multiple steps First map a drive to the scanning folder that you have on the server Then run the following command while logged in as the user that will be migrated Scanstate I migapp inf I migsys inf I migfiles inf I sysfiles inf lt server gt USMT_DATA The INF files in the command are fully customizable to incorporate different applications files and settings Phase Ill Load the Target Computer Finally you are ready to load the target computer To successfully install the user settings you need to be logged in with administrative rights and confirm that the users whose data that you are migrating does not have an existing account on the target computer When all of these items are taken care of you can map a drive to the loading folder that you have on the server and run the following command Loadstate I miguser inf lt server gt UMT_DATA MCP Exam 70270 Preparation doc 55 Deployin
363. ough a decreasing list of questions as you answer the trickier ones in order Reading the exam over completely before answering the trickier questions has at least one potential benefit Sometimes information supplied in later questions sheds more light on earlier questions At other times information you read in later questions might jog your memory about Windows XP Professional facts figures or behavior that helps you answer earlier questions Either way you ll come out ahead if you defer those questions about which you re not absolutely sure MCP Exam 70270 Preparation doc 24 Here are some question handling strategies that apply to fixed length and short form tests Use them if you have the chance e When returning to a question after your initial read through read every word again otherwise your mind can fall quickly into a rut Sometimes revisiting a question after turning your attention elsewhere lets you see something you missed but the strong tendency is to see what you ve seen before Try to avoid that tendency at all costs e f you return to a question more than twice try to articulate to yourself what you don t understand about the question why answers don t appear to make sense or what appears to be missing If you chew on the subject awhile your subconscious might provide the details you lack or you might notice a trick that points to the right answer e As you work your way through the exam another counter that
364. ould be accomplished by using a new subnet mask of 255 255 254 0 This would result in a new subnet that would have a total of 510 host addresses The second example will not work with a shortened CIDR subnet because only the first 14 bits are the same Note To get further information on CIDR refer to the Microsoft Windows 2000 Resource Kit Chapter 1 Introduction to TCP IP Configuring TCP IP TCP IP is installed by default when you install Windows XP Professional However you can override this default setting if your network does not require it or if you will not be on a network with Active Directory In addition the protocol s default configuration is to obtain an IP address automatically This means that the computer automatically requests a unique TCP IP address for your network from a DHCP server If no DHCP server is available the operating system invokes APIPA to query the other computers that are currently powered on and connected to the network so that it can assign itself a unique IP address To work with TCP IP you need to become familiar with the following terms e Subnet mask This is essentially an IP address filter that gets applied to each unique IP address The subnet mask determines which part of the IP address for a computer specifies the network segment where the computer is located versus which part of the IP address specifies the unique host address for that individual computer As an example an IP address of 192
365. ound on the Diagnostics tab of the Properties dialog box for the modem the Query Modem button is also accessible from the modem s Properties dialog box in Device Manager Another option for troubleshooting a modem problem is to use the Troubleshoot button which is also available from the modem s Properties dialog box but you should use this only as a last resort because it just invokes the Windows XP Help and Support Center and runs you through a basic troubleshooting checklist Configuring and Managing Compact Disc CD and Digital Versatile Disc DVD Devices Windows XP supports a variety of CD read only memory CD ROM CD recordable CD R CD rewritable CD RW DVD read only memory DVD ROM DVD recordable DVD R DVD rewritable DVD RW and DVD random access memory DVD RAM drives and disc formats Check with the most recent MCP Exam 70270 Preparation doc 222 Hardware Compatibility List HCL or your hardware vendor to see if your CD or DVD device will work with Windows XP If the CD or DVD device is PnP compliant you can rely on Windows XP to detect the device and install the appropriate drivers as well as allocate system resources for the device If you are using a CD or DVD drive that is not PnP compliant use the Add Hardware applet in the Control Panel to install the drivers and assign resources for the device The Windows XP Compact Disc File System CDFS reads CDs that are formatted according to the ISO 9660 stand
366. ounts with predefined attributes One thing to keep in mind when working with templates is to disable the template account This will ensure that a real user can t access the network as the template user Of course when copying the template account to create a new user make sure to enable the new account Disabling and Deleting User Accounts The process for disabling and deleting domain user accounts is the same as for local user accounts except that you use the Active Directory Users and Computers snap in to perform the tasks The checkbox for disabling an account is on the user s Property sheet or you can disable the account by right clicking the user object and selecting the Disable Account menu option MCP Exam 70270 Preparation doc 134 Understanding and Implementing Group Policy One of the most powerful aspects of Windows XP Professional and Windows 2000 Active Directory is the implementation of Group Policy Group Policy is the ability to control finite details of a computer or user quickly and easily These policies can either be configured at the local level or within the Active Directory structure Regardless of the location of implementation these settings are extremely powerful and can change the way normal control and administration is done within a company Local Group Policy Actually you can administer Local Policies from two different locations a Local Group Policy and a Local Security Policy The Local Group Policy c
367. ourself needing to do this though first save your data convert the disk to basic and then restore your data Because the upgrade from basic to dynamic is per physical disk all volumes on a physical disk must be either basic or dynamic Again you do not need to restart MCP Exam 70270 Preparation doc 253 your computer when you upgrade from a basic to a dynamic disk from the Disk Management Console You must restart your computer only if you use the Diskpart exe command line tool upgrade your startup disk or upgrade a volume or partition When you upgrade or convert a basic disk to a dynamic disk at least 1MB of free space must be available for the dynamic disk database Under normal circumstances this should not be a problem Converting Dynamic Disks to Basic Disks You must remove all volumes from the dynamic disk before you can change it back to a basic disk After you change a dynamic disk back to a basic disk you can create only partitions and logical drives on that disk After being upgraded a dynamic disk cannot contain partitions or logical drives nor can any operating systems other than Windows XP Windows 2000 or Windows NET Server access it To convert a dynamic disk to a basic disk perform the following steps 1 Open Disk Management 2 Right click the dynamic disk you want to change back to a basic disk and then click Convert To Basic Disk Moving Disks to Another Computer To move disks to another computer
368. ously switching back and forth without closing the programs they are running To switch to another user click Start click Log Off click Switch User and then click the user account you would like to switch to The following caveats apply when using Fast User Switching e It will not appear if it has not been turned on in User Accounts in Control Panel e Itis not available on computers that are members of a network domain e t can be turned on or off only by users with a computer administrator account on a computer e It cannot be turned off while multiple users are logged on to the computer e When it is not turned on programs shut down when you log off and the computer runs faster for the next user who logs on Authentication When a user wants to access resources on a machine that user s identity must first be verified through a process called authentication For example when a user logs on the security subsystem evaluates the user s username and password If they match the user is authenticated The process of logging on to a machine where you are physically sitting is called an interactive logon Authentication also happens when you access resources on a remote system For example when you open a shared folder on a server you are being authenticated as well only this time the process is called a remote or network logon because you are not physically at the server The Security Dialog Box The Security dialog box allows for in
369. ovable media These limitations are in place for security concerns and access to other devices or systems is functionally beyond the scope and purpose of the Recovery Console The main purpose of the Recovery Console is to allow you to repair the existing installation and to successfully boot Windows XP Recovery Console Commands MCP Exam 70270 Preparation doc 340 The easiest way to work in the Recovery Console as in any unfamiliar environment is to type help at the command prompt and then press the Enter key The commands available in the Recovery Console are listed in Table 2 You can use Group Policy in conjunction with a Set command to enable write access for removable media while using the Recovery Console Run GPEdit msc from the Start Run box to launch the Local Group Policy snap in and expand Computer Configuration Windows Settings Security Settings Local Policies Click Security Options Double click the policy named Recovery Console Allow Floppy Copy And Access To All Drives And All Folders and click the Enabled button Click OK to save the new setting and exit from the Group Policy snap in The next time that you boot into the Recovery Console type the following command Set AllowRemovableMedia TRUE Be sure to insert a space before and after the equal sign When you enable this environment variable setting after turning on the Group Policy setting you have access to all local hard drive volumes and folders in addit
370. over a parent menu item and having newly installed programs highlighted on the Start menu Figure 9 The Advanced tab of the Customize Start Menu dialog box Customize Start Menu General Advanced Start menu settings Open submenus when pause on them with my mouse Highlight newly installed programs Start menu items Printers and Faxes Run command C Scroll Programs Search BT Sinton Admirisuatve Tot Display on the All Programs menu 1 Rienlan an the All Pranrame mann and the Chart mann Recent documents Select this option to provide quick access to the documents you opened most recently Clearing this list does not delete the documents List my most recently opened documents Clear List MCP Exam 70270 Preparation doc 171 The following is a list of the Start menu features and items that you can customize from the Advanced tab of the Customize Start Menu dialog box e Control Panel Drag and drop Favorites menu Help and Support My Computer My Documents My Music My Network Places My Pictures Network Connections Printers and Faxes Run command Scroll Programs e Search e System Administrative Tools Other Taskbar Options The taskbar serves as a multipurpose tool to help make navigating the interface more efficient The taskbar in Windows XP similar to that in Windows 2000 offers several customization options One of the new options for the taskbar is the Group Similar Taskbar Buttons checkbox
371. ovided that you had installed Peer Web Services or IIS 5 on your previous version of Windows Before you can install IIS your computer must already have the Transmission Control Protocol Internet Protocol TCP IP network protocol and its related connectivity utilities installed In addition Microsoft recommends that you have a Domain Name System DNS server available on your network for hostname to IP address resolution For very small networks you may use a HOSTS file or a LMHOSTS file in lieu of a DNS server A HOSTS file maps DNS host computer names to IP addresses A LMHOSTS file maps NetBIOS computer names to IP addresses Windows XP Professional looks for these two text files in the systemroot system32 drivers etc folder Sample HOSTS and LMHOSTS files are also installed by default into this folder After you have installed IIS you manage the services from the Internet Information Services snap in of the MMC You can launch the IIS Console by clicking Start All Programs Administrative Tools Internet Information Services From the IIS Console you can administer the default FTP site not installed by default default Web site and the default Simple Mail Transfer Protocol SMTP virtual server for the Windows XP Professional computer as shown in Figure 16 MCP Exam 70270 Preparation doc 104 Figure 16 The Internet Information Services Console z z Internet Information Services Ele Action yew Hsp e OOTAB I Intern
372. ox you can copy those inherited permissions and turn them into explicit permissions or you can remove them entirely and manually establish new explicit permissions This checkbox is located at the bottom of the Advanced Security Settings dialog box Table 5 Advanced NTFS security permissions for both files and folders Permission Description Full Control Grants the Allow setting for all basic and advanced NTFS security permissions including the entries for Change Permissions and Take Ownership Traverse Allows or denies moving through folders to reach other files Folder Execute or folders even if the user has no permissions for the File traversed folders applies to folders only Traverse Folder takes effect only when the group or user is not granted the Bypass Traverse Checking user right in the Group Policy snap in By default the Everyone group is given the Bypass Traverse Checking user right The Execute File permission allows or denies running application program files List Folder Read Allows or denies viewing file names and subfolder names Data within the folder and allows or denies viewing data in files Read Attributes Allows or denies viewing the attributes such as read only hidden and archive of a file or folder Read Extended Allows or denies viewing the extended attributes of a file or Attributes folder Some extended attributes are defined by application programs and can vary by application Creat
373. pare future activity Answer b is incorrect because the System Monitor snap MCP Exam 70270 Preparation doc 362 in displays only current activity or past activity it does not store such data Answer c is incorrect because the Task Manager displays only current activity for applications processes performance and networking it does not store such data Answer d is incorrect because the Network Monitor Driver and the Netcap exe utility capture and analyze network data packets they do not store any other performance related data 7 Which of the following actions represents a best practice approach to configuring virtual memory on a Windows XP Professional computer that has three physical hard disks assigned as drives C D and E the systemroot folder located on the C drive and 256MB of memory installed a Place the paging file on the C drive with an initial size of 192MB and a maximum size of 256MB b Place a paging file on the D drive with an initial size of 192MB and a maximum size of 192MB and place a second paging file on the E drive also with an initial size of 192MB and a maximum size of 192MB c Place a paging file on the E drive with an initial size of 128MB and a maximum size of 256MB d Place a paging file on the E drive with an initial size of 192MB and a maximum size of 192MB and place a second paging file on the C drive also with an initial size of 192MB and a maximum size of 192MB A7 Answer b is corr
374. password on the task Another area where an incorrect account can cause problems is if a task has been created for old 16 bit applications It may fail to run if the system account is used on the Task Service If an error relating to the Task Service is generated change the account used to run the service Use the AT command to create a scheduled event and select Advanced AT Service Account from the Scheduled Tasks folder s menu You can then specify a particular user account whose security context will be used for all events that are scheduled using the AT command If the task still won t run stop and restart the Task Service You can configure it to restart automatically if it fails To do so go to Start Control Panel Administrative Tools and open the Services console Right click the Task Scheduler service and choose Properties Click the Recovery tab and specify actions for service failures MCP Exam 70270 Preparation doc 203 Practice Questions di A1 A2 As a network administrator for your company you log on to a Windows XP Professional workstation computer You suspect that several different users are logging on to this workstation so you want to view all the user profiles that are stored locally You look in the c Documents and Settings folder but no user profiles exist The c drive is the only volume on the computer What has happened to all the user profiles for this system A The system is configured to use only roa
375. pe sets on a basic disk Striped and spanned volumes are only supported by dynamic disks under Windows XP Professional To migrate data on volume sets or stripe sets from Windows NT 4 to Windows XP Professional perform the following steps 1 Under Windows NT 4 back up the data Delete the volume s Upgrade the operating system to Windows XP Professional Convert the appropriate hard disks from basic to dynamic disks Create the appropriate volume s Restore the backed up data O01 BO N When You Are Upgrading from Windows 2000 Professional with Volume Sets on a Basic Disk If you need to upgrade a computer running Windows 2000 Professional that has hard drives configured as volume sets or stripe sets you must still back up all the data stored on each volume set or stripe set because Windows XP Professional does not support volume sets or stripe sets on a basic disk Under Windows 2000 Professional volume sets and stripe sets are supported on basic disks for backward compatibility although you cannot create such sets on basic disks Under Windows XP Professional volume sets and stripe sets are strictly not supported Windows XP Professional Setup will not allow an installation to complete if stripe sets or volume sets are present on basic disks To migrate data on volume sets or stripe sets stored on basic disks from Windows 2000 Professional to Windows XP Professional perform the following steps 1 Under Windows 2000 back up
376. pear with an additional tab Fax Security By default three groups have Fax Security permissions Administrators Everyone and Interactive Under default permissions Interactive users can send MCP Exam 70270 Preparation doc 199 documents as low normal or high priority faxes They can view fax jobs manage fax jobs view the Fax service configuration and view incoming fax and outgoing fax archives Administrators by default can additionally manage the Fax service configuration plus manage incoming and outgoing fax archives You use the Fax Console itself to troubleshoot and monitor fax transmissions You can perform the following functions with the Fax Console e Send a fax e Receive a fax e Change sender information Manage personal cover pages Check fax printer status Run the Fax Configuration Wizard to reconfigure the Fax service Open the Fax Properties window Launch the Fax Monitor The Fax Console window displays four folders for organizing faxes e Incoming e Inbox e Outbox e Sent Items If faxes aren t being sent or received verify that a user has permission to use the fax device and make sure the fax device is configured to send and receive faxes If those settings are correct and faxes are still not being sent or received stop and restart the Fax service MCP Exam 70270 Preparation doc 200 Scheduled Tasks With the advent of Internet Explorer IE 5 and later versions Microsoft introduced the Scheduled Tasks f
377. percent MCP Exam 70270 Preparation doc 167 Configuring and Troubleshooting Desktop Settings The Windows XP Professional desktop combines the best features of Windows 98 Windows ME and Windows 2000 In general a regular local or domain user account can configure very few changes on a Windows XP Professional computer The options that users can configure to customize their desktop are the following Control Panel applets and customization options see Figure 7 e Keyboard Display Mouse Sounds and Audio Devices Scanners and Cameras Speech Taskbar and Start Menu e Wireless Link Figure 7 The Windows XP Professional Control Panel P Control Panel file Edt Yew Favortes Took tiep amp Q O Pj Address O Control Parel Hjo E Control Panel R T sa T E Addo Adminitrative Date andTime Display Folder Options G atch to Category Vien Tools See Also v Windows Update wW Help and Support System Taskbar and User Accounts Wireless Link Rat Mong Keyboard Applet The Keyboard applet adjusts the cursor blink rate the speed at which a character repeats when you hold down a key the time lapse before a character repeats and the input locale for different language groups of keyboard hardware For example you can use several language locales with a U S keyboard layout so that you can add foreign accent marks to documents that are written in French Spanish Italian and so on The Regional applet can also be used to config
378. plication tracks the installation process and notes all the files that were installed their locations and modifications they made to the Registry You can then customize this information and turn it into an MSI file A Windows Install Transform file MST can be used to modify and customize a Windows Installer Package MSI file using tools such as those found in the Microsoft Office Resource Kit Transform files contain the customizations MSI files themselves should never be altered An MSP file is a Windows Installer patch file used for deploying bug fixes or service releases of a software product Patch files cannot remove components or features change product codes or remove or change the names of shortcuts files or Registry keys Application assignment scripts AAS files contain instructions associated with the publication or assignment of a Windows Installer Package You may be wondering what to do if you don t have an MSI file or if you can t repackage the file Non Windows Installer oased applications such as Install exe and Setup exe must use a ZAP file to publish a package A ZAP file is just a text file with a zap extension The file provides information about how to install a program and the application s properties ZAP files can only be published not assigned ZAP files cannot utilize the advanced features of using MSI files ZAP file installations cannot use elevated installation privileges take advantage of the unsuccessful i
379. policies that need to be applied e force Reapplies all settings in the policies whereas if no switches are used only the changed policies will apply e logoff Some user based Group Policy settings exist such as Folder Redirection that do not apply until the user logs off and back on With this switch the user will automatically be logged off after the other policies refresh e boot Like the user settings some computer settings require a reboot such as software deployment With this switch the computer will automatically reboot after the other policies refresh RSoP Snap in The final tool for determining the RSoP is the new RSoP snap in This tool enables you to investigate the policies in a GUI interface which can then be saved to a file or Web site for archiving To open this tool open up a new MMC and add the Resulting Set of Policy snap in When you open the tool you will have the following options for your Windows XP Professional computer e Computer scope You will have the choice of selecting either your computer or another computer on the network as long as you have administrative credentials on the remote computer You will also be able to eliminate the computer portion of the RSoP if you only want to see user based settings e User scope You can select the currently logged on user or another user that can access the local computer Again you must have the correct privileges to view another user s RSoP
380. porates to form to form to form Boils to form Condenses to form For this type of question it s not necessary to use every object and each connection can be used multiple times MCP Exam 70270 Preparation doc 19 Select and Place Question Format Questions in the select and place drag and drop format present a diagram with blank boxes and a list of labels that need to be dragged to correctly fill in the blank boxes To answer the question you must move the labels to their appropriate positions on the diagram This type of question is best described using graphics Here s an example QUESTION 6 Place the items in their proper order by number on the following flowchart Some items may be used more than once and some items may not be used at all 5 All requirements are met a dial up connection is 1 Place here allowed for the client 4 Place here Policy Conditions Account Conditions Account Profile Account Permissions Policy Profile MCP Exam 70270 Preparation doc 20 ANSWER 1 Policy Conditions 5 All requirements are met a dial up connection is allowed for the client 4 Account Profile Policy Profile Microsoft s Testing Formats Currently Microsoft uses four different testing formats e Case study e Fixed length e Adaptive e Short form As mentioned earlier the case study approach is used with Microsoft s design exams These exams consist of a set of case studies th
381. priate selections Question 2 How can you seize FSMO roles Check all correct answers a The Ntdsutil exe utility b The Replication Monitor c The Secedit exe utility d Active Directory Domains and FSMOs ANSWER Answers a and b are correct You can seize roles from a server that is still running through the Replication Monitor or in the case of a server failure you can seize roles with the Ntdsutil exe utility The Secedit exe utility is used to force group policies into play therefore answer c is incorrect Active Directory Domains and Trusts are a combination of truth and fiction therefore answer d is incorrect For this particular question two answers are required Microsoft sometimes gives partial credit for partially correct answers For Question 2 you have to check the boxes next to items a and b to obtain credit for a correct answer Notice that picking the right answers also means knowing why the other answers are wrong MCP Exam 70270 Preparation doc 14 Build List and Reorder Question Format Questions in the build list and reorder format present two lists of items one on the left and one on the right To answer the question you must move items from the list on the right to the list on the left The final list must then be reordered into a specific order These questions can best be characterized as From the following list of choices pick the choices that answer the question Arrange the list in a certain o
382. r a large corporation you will certainly need a more robust tool than the FAST Wizard That is where the USMT command line options come into play These options are fully customizable to migrate multiple user settings However you will need to have the following requirements in place to use this option e A server to which both source and target computers can gain access e Adequate space for migrating all users data Source computers containing the users accounts to be transferred A target computer running Windows XP Professional that does not contain a profile for the user whose state you will be transferring e An account with administrative privilege on the target computer The account cannot have the same name as the migrating user account e The account name and password of the users whose settings and files are to be transferred MCP Exam 70270 Preparation doc 54 After you have acquired all of this information you are ready to start the migration The migration will occur in three phases Phase l Prepare the Server The server share needs to be created to house the users data A standard configuration needs to have a large amount of disk space with a shared folder to house the users data For purposes of this discussion suppose that folder is named USMT_DATA Then you need two distinct folders to house the USMT migration files and executables It might be best to make two different folders to keep each portion separate Y
383. r abilities to create users and groups on the local machine Bob took over Mary s duties when Mary retired You created Bob s user account and put him in the same groups as Mary and changed the ACLS on the resources to allow Bob access You then deleted Mary s account Later Bob comes to you and reports that he can t get access to some resources that he needs that Mary had access to You give him access and later he reports the same problem on different resources How should you have configured Bob s account to avoid the problems you are now facing without giving Bob unnecessary access A You should have renamed Mary s account to Bob B You should have made Bob an administrator in the domain C You should have made Bob a Server Operator D You should have changed the dACLS on all resources in the domain to give Bob access Answer A is correct Renaming the account would have ensured that Bob had all the access to resources that Mary had Answer b is incorrect because you would have given Bob more access than was necessary plus it does not ensure that Bob has access to all resources MCP Exam 70270 Preparation doc 148 A3 A4 that Mary had Answer c is incorrect because making Bob a Server Operator does not ensure that Bob has access to all resources that Mary had Answer d is incorrect because that would have given Bob unnecessary access You successfully set the Local Security Policy to enable you to shut down your Window
384. r card for the CD ROM drive could be failing or the drive itself could be bad e Installation halts or errors f a STOP error occurs during the installation it is typically the result of incorrect or incompatible drivers Obtain the correct and current drivers and restart the installation process Also the installation may stop just after the copy or text phase with a warning that the master boot record has a virus This warning typically results when the BIOS has the virus warning option enabled Turn this option off and restart the installation As a final measure ensure that all devices are on the HCL e Lack of drive space Windows XP needs much more free space compared to its predecessors Ensure that at least 650MB of free space is available at a minimum e Dependency failures For the installation to be completed successfully all services must be able to start when needed Some services depend on others to complete a task For example if the drivers for the network adapter could not load that will affect all services that depend on the network adapter s successful installation As a result the computer won t be able to join the domain e Problems joining the domain lf the network adapter has initialized but the computer still can t join the domain verify that the DNS server is online and that you are using the correct IP address of the DNS server Also verify that you typed the domain name correctly If problems persist
385. r computer to complete this operation ISKPART gt Ei gt Note In addition to Diskpart exe Windows XP administrators can take advantage of another command line tool for managing FAT FAT32 and NTFS file systems Fsutil exe With Fsutil exe Windows XP administrative users can perform tasks such as managing disk quotas reparsing mount points and several other advanced disk related tasks Type Fsutil at a command prompt to view a list of supported commands When you upgrade a basic disk to a dynamic disk any existing partitions on the basic disk become simple volumes on the dynamic disk Any existing mirrored volumes striped volumes RAID 5 volumes or spanned volumes become dynamic mirrored volumes dynamic striped volumes dynamic RAID 5 volumes or dynamic spanned volumes respectively You cannot dual boot to another operating system if you upgrade a basic disk to a dynamic disk which typically isn t an issue for servers However it s something to consider for Windows XP Professional machines After you upgrade a basic disk to a dynamic disk you cannot change the dynamic volumes back to partitions Instead you must delete all dynamic volumes on the disk and then use the Convert To Basic Disk command Note Upgrading to a dynamic disk is a one way process Yes you can convert a dynamic disk with volumes back to a basic disk but you ll lose all of your data Obviously this is a major downside If you find y
386. r computers Remote Access Services RAS generally refers to server computers that accept inbound remote connections from dial up clients Dial up connections usually involve regular phones using analog modems and or dial up integrated services digital network ISDN lines MCP Exam 70270 Preparation doc 365 Authentication Protocols Windows XP Professional provides advanced support for remote access authentication protocols over older versions of Windows operating systems These new authentication protocols offer enhanced security and dynamic bandwidth allocation for remote access These authentication protocols authenticate the logon credentials for all users who attempt to connect to a Windows based network Windows XP Professional supports all the authentication protocols that Windows 2000 offered including PAP CHAP MSCHAP v1 and v2 EAP SPAP PPTP and L2TP Figure 1 shows the new interface for configuring an XP Professional s authentication protocols Security configurations for a dial up or VPN connection ben Properties Figure 1 General Options Security Networking Advanced S ec urity m ptio ns Typical recommended settings Validate my identity as follows Require secured password C Automatically use my Windows logon name and password and domain if any Require data encryption disconnect if none O Advanced custom settings IPSec Settings Note The Security tab has two different
387. r link an existing GPO to the SDOU by clicking Add If you select a group policy and click Edit you expose the GPO in the Group Policy Editor Application of Group Policy Objects GPOs are divided into the Computer Configuration and User Configuration nodes The computer settings apply to every computer in the SDOU to which the policy is linked and by default to all child OUs Computer settings take effect at startup and every refresh interval which by default is 90 minutes User settings affect every user in the SDOU and its children at logon and after each refresh interval When configuring GPOs ensure that the computers and or users lie within the path of the GPO SDOU to receive the policy settings For example if you want to control a Web server named IIS_Apps you would need to move this computer object to the proper OU in order to have the GPO for that OU apply to the IIS_Apps computer When a computer starts its current settings are modified first by any configuration specified by the Local Group Policy Then the configurations for the SDOU GPOs are applied The SDOU policies are applied in order First the policies linked to the computer s site and then the policies for its domain and finally the policies for each OU in the branch that leads to the object s OU The MCP Exam 70270 Preparation doc 136 policy settings from the Local Group Policy and the SDOU will append to each other If there is ever a conflict in a particul
388. r of a domain Manage the users that can access the local computer Modify the type of access a user has on the computer This would include Standard user Limited user or a custom type of user such as an Administrator Manage passwords that are stored on the local computer Manage NET Passport Access advanced user and computer settings Change the local administrator password Modify the secure logon preferences basically whether or not a user is required to press Ctrl Alt Delete to log on MCP Exam 70270 Preparation doc 130 For machines that do not participate in a domain in Windows XP two categories of user accounts exist Limited and Administrator By default the person installing the operating system is an administrator An account that is an administrator can perform any and all functions on the computer By contrast an account designated as Limited cannot create shares or install software Table 1 lists several of the differences between the accounts Passwords Passwords are not required but are highly recommended If your system has accounts that don t require any form of password virtually anyone will be able to access your files and folders even if you don t want them to It is always recommended to have a password even a simple password is better than no password at all Forgotten Passwords If you forget your password you can recover your settings and user account with the Forgotten Password Wizard The wi
389. r pooling which enables you to select two or more identical print devices that are configured as one logical printer print jobs are directed to the first available print device The Advanced Tab On the Advanced tab you work with scheduling and spooling settings like these e Set time availability limits e Set print job priority e Change the printer driver or add a new driver e Spool print jobs and start printing immediately or start printing after the last page has spooled Print directly to the printer do not spool print jobs Hold mismatched documents e Print spooled documents first e Retain documents after they have been printed e Enable advanced printing features such as metafile spooling and enable advanced options such as Page Order Booklet Printing and Pages Per Sheet advanced options vary depending upon printer capabilities e Set printing defaults e Select a different print processor RAW EMF or Text e Specify a separator page MCP Exam 70270 Preparation doc 115 The Security Tab You can configure the following security settings with the Security tab e Set permissions for users and groups similar to NTFS file and folder permissions Allow or Deny the Print Manage Printers and Manage Documents e Set up printer auditing similar to NTFS file and folder access auditing via the Auditing tab by clicking the Advanced button e Take ownership of the printer similar to taking ownership of NTFS
390. rately on each computer No centralized management scheme exists within a workgroup environment duplicate user and group accounts must exist on each computer to grant and control access permissions on each workstation s individual resources User and group accounts are stored within a local database on each Windows XP Professional computer In a Windows domain network environment on the other hand the domain acts as a central administration point for managing users groups and security permissions A domain is simply a logical grouping of computers that share a centrally managed database Duplicate user and group accounts are unnecessary and unwarranted within the domain security context Users simply log on to the domain from any domain member computer and their Domain group memberships along with their user rights follow them wherever they travel throughout the domain A Windows Active Directory domain maintains a domain wide database of users and groups that is referred to as the directory The Active Directory database is physically stored on domain controller computers The Active Directory database can contain much detailed information about its users The Active Directory database is replicated and synchronized with all the other domain controllers within a domain Under Windows Active Directory domains group memberships travel with users throughout the entire forest MCP Exam 70270 Preparation doc 90 Windows XP User Permissions vs
391. rder To give you practice with this type of question some questions of this type are included in this study guide Here s an example of how they appear in this book for a sample of how they appear on the test see Figure 2 Figure 2 This is how build list and reorder questions appear TreeList Ben Frankin Abe Lincolr George Washington Andrew Jackson Pau Revere Treel ist George Washington MCP Exam 70270 Preparation doc 15 Question 3 From the following list of famous people pick those that have been elected President of the United States Arrange the list in the order in which they served Thomas Jefferson Ben Franklin Abe Lincoln George Washington Andrew Jackson Paul Revere ANSWER The correct answer is George Washington Thomas Jefferson Andrew Jackson Abe Lincoln On an actual exam the entire list of famous people would initially appear in the list on the right You would move the four correct answers to the list on the left and then reorder the list on the left Notice that the answer to the question did not include all items from the initial list However this may not always be the case To move an item from the right list to the left list first select the item by clicking it and then click the Add button left arrow After you move an item from one list to the other you can move the item back by first selecting the item and then clicking the appropriate button either the Add button or the Re
392. re establish a network connection and log on to the network Any changes that you made to the file s while you were offline are then synchronized with the original file s on the network One caveat if you have logged on to the network from a slow dial up connection it could take a long time to synchronize your offline files while you are logging on Several options are available to customize the synchronization process to deal with this type of problem To customize the process when offline files are synchronized open a Windows Explorer window and select Tools Synchronize The first dialog box displays the files and folders that are available offline To configure synchronization click the Setup button which opens the Synchronization Settings dialog box shown in Figure 6 Figure 6 The Synchronization Settings dialog box cj Synchronization Settings Logon Logoff On Idle Scheduled You can specify items to be synchronized when you log on or log off The choice of items can be different for each network connection When am using this network connection e Eee Synchronize the following checked items Offline Files 3 dell2002 docs on dell2002 49 Offline Web Pages all cs My Current Home Page Automatically synchronize the selected items When log on to my computer When log off my computer _ Ask me before synchronizing the items MCP Exam 70270 Preparation doc 165 This dialog box offers three tabs tha
393. re information about Special permissions select a permission entry and then chick Edit Permission entries Type Name Permission Inherited From Apply To Allow Administrators DELL Full Control lt not inherted gt This folder subfolders and files Allow SYSTEM Full Control lt not inherited gt This folder subfolders and files Allow CREATOR OWNER Full Control lt not inhetited gt Subfolders and files only Allow Users DELLXP Users Read amp Execute lt notinherited gt This folder subfolders and files Allow Evenone Read amp Execute lt notinherted gt This folder onl C Replace permission entries on all chid objects with enties shown here that apply to child objects MCP Exam 70270 Preparation doc 88 You should not change the default security settings for the systemroot folder and its subfolders Modifying the default permissions for the Windows XP Professional system files can have very adverse effects on the system In addition to not changing its default permissions you should never attempt to compress or encrypt the systemroot folder or any of its subfolders Compression or encryption placed on the system folders can render Windows XP Professional unstable or possibly unbootable NTFS Permission Conflicts Obviously a user may be a member of several different groups You can apply NTFS permissions to both users and groups for access control over resources such as files and folders For security permissions assigned to a user t
394. re not connected Enable Offline Files C Synchronize all offline files when logging on C Synchronize all offline files before logging off Display a reminder every 60 minutes C Create an Offline Files shortcut on the desktop Amount of disk space to use for temporary offline files Delete Files The Offline Files feature is also known as Client Side Caching CSC The default location on Windows XP computers for storage of offline files is systemroot CSC for example C Windows CSC You can use the Cachemov exe tool from the Windows 2000 Professional Resource Kit or the Windows 2000 Server Resource Kit to relocate the CSC folder onto a different drive volume The Cachemov exe utility moves the CSC folder to the root of the drive volume that is specified After the CSC folder has been moved from its default location all subsequent moves place it in the root of the drive volume Cachemov exe never returns the folder to its original default location MCP Exam 70270 Preparation doc 77 Shared Folder Permissions In addition to the Caching button located at the bottom of the Sharing tab of a shared folder s Properties dialog box is the Permissions button The caption next to this button reads To Set Permissions For Users Who Access This Folder Over The Network Click Permissions However these share permissions are intended solely for backward compatibility purposes you should actually avoid changing the default set
395. re willing to invest some time and energy Most large or complex Web sites and Microsoft s qualifies on both counts offer a search engine On all of Microsoft s Web pages a Search button appears along the top edge of the page As long as you can get to Microsoft s site it should stay at www microsoft com for a long time use this tool to help you find what you need The more focused you can make a search request the more likely the results will include information you can use For example you can search for the string training and certification to produce a lot of data about the subject in general but if you re looking for the preparation guide for Exam 70 058 Networking Essentials you ll be more likely to get there quickly if you use a search string similar to the following Exam 70 058 AND preparation guide Likewise if you want to find the Training and Certification downloads try a search string such as this training and certification AND download page Finally feel free to use general search tools such as www google co nz www search com www altavista com and www excite com to look for related information Although Microsoft offers great information about its certification exams online there are plenty of third party sources of information and assistance that need not follow Microsoft s party line Therefore if you can t find something where the book says it lives intensify your search MCP Exam 70270
396. reen as assigned by Windows XP Figure 5 The Display Properties dialog box enables you to configure multiple monitors when multiple video adapters are installed Display Properties Themes Desktop Screen Saver Appearance Settings Drag the monitor icons to match the physical arrangement of your monitors 25 1 Default Monitor on 3 VIRGE DX GX Screen resolution Color quality Lee p Hm High 24 bit 640 by 480 pixels C Use this device as the primary monitor Extend my Windows desktop onto this monitor MCP Exam 70270 Preparation doc 228 The icon positions determine how you move items from one monitor to another For example if you are using two monitors and you want to move items from one monitor to the other by dragging left and right place the icons side by side To move items between monitors by dragging up and down place the icons one above the other The icon positions do not have to correspond to the physical positions of the monitors You can place the icons one above the other even though your monitors are side by side Changing the Primary Monitor To change the primary monitor perform the following steps 1 Open the Display applet in the Control Panel 2 On the Settings tab click the monitor icon that represents the monitor you want to designate as the primary one 3 Select the Use This Device As The Primary Monitor checkbox see Figure 5 This checkbox
397. require a lot of power such as cameras should be plugged into self powered hubs Universal Serial Bus Controller appears only if you have a USB port on your computer The Power tab appears only for USB hubs MCP Exam 70270 Preparation doc 224 Troubleshooting USB Devices Sometimes when you install a USB device on a computer the computer might start functioning poorly or the system might even freeze entirely The first step to take in such a scenario is to power off the computer wait about 60 seconds and then power it back on If that doesn t help try one or more of the following steps e Follow the manufacturer s installation instructions which may require that you run a setup program before connecting the USB device to the computer e Connect the device to a different computer to verify that it is not defective e Plug the device directly into a USB hub on the back of the computer instead of plugging it into a USB hub e Look at the Windows XP Event Log for USB related error messages e Check Device Manager to verify that all USB devices on the Universal Serial Bus Controller s tree are operating correctly e Check whether one or more USB devices are drawing more power more than 500 milliamps than the bus or hub can provide Use a separate power adapter for high power consumption devices if available or use a self powered USB hub for such devices e Try replacing the USB cables e Make sure that no more than five hubs are conne
398. ressing any system folders such as the Windows folder or the Program Files folder is not recommended Compressed Zipped Folders are identified by a zipper icon that is part of the folder s icon To create a Compressed Zipped Folder right click a folder point to Send To and click Compressed Zipped Folder This action actually creates a Zip file that Windows XP recognizes as a Compressed Zipped Folder that contains the folder you selected to be compressed along with all of that folder s contents You can also use any popular third party utility such as WinZip or PKZip to read write add or remove files to any Compressed Zipped Folder The NTFS file system under Windows XP enables you to compress individual files and folders so that they occupy less space on the NTFS volume Any Windows or DOS based program can read and write to NTFS compressed files without having to decompress them first The compressed files decompress when opened and recompress when closed The Windows XP NTFS file system handles this entire process transparently to the user You can use Windows Explorer to have compressed items displayed in a different color than uncompressed items Setting the compression state compressed or uncompressed on a file or folder is as simple as setting a file or folder attribute Simply right click the file or folder that you d like to compress or uncompress and select Properties On the General tab click the Advanced button C
399. rious OUs in your domain You have 100 remote Windows XP Professional computers that use VPN connections to connect to the corporate LAN You want the connections to be encrypted so you use L2TP with IPSec on the VPN connection What type of authentication is being used by default during the negotiation of security settings A Preshared key authentication B Certificate based authentication C Pass through authentication D Internet Authentication Service Answer b is correct When you make an L2TP with IPSec connection an IPSec policy is automatically created to specify that the Internet Key Exchange IKE will use certificate based authentication during the negotiation of security settings for L2TP This means that both the L2TP client and L2TP server must have a computer certificate also known as a machine certificate installed before a successful L2TP over IPSec connection can be established Answer a is incorrect because Microsoft does not recommend frequent use of preshared key authentication because the authentication key is stored unprotected in the IPSec policy Preshared key methodology is provided only for interoperability purposes and to adhere to the IPSec standards set forth by the Internet Engineering Task Force IETF Answer c is incorrect because pass through authentication is for access to resources not the negotiation of security settings Answer d is incorrect because IAS performs MCP Exam 70270 Preparation doc 383
400. ristmas Washington s Birthday Spring Flag Day Memorial Day Easter Summer Fourth of July Labor Day Fall Thanksgiving In this case all the items in the list were used However this may not always be the case To move an item from the right list to its appropriate location in the tree you must first select the appropriate tree node by clicking it Then you select the item to be moved and click the Add button If one or more items have been added to a tree node the node will be displayed with a icon to the left of the node name You can click this icon to expand the node and view the item s that have been added If any item has been added to the wrong tree node you can remove it by selecting it and clicking the Remove button MCP Exam 70270 Preparation doc 18 Drag and Connect Question Format Questions in the drag and connect format present a group of objects and a list of connections To answer the question you must move the appropriate connections between the objects This type of question is best described using graphics Here s an example QUESTION 5 The following objects represent the different states of water Use items from the following list to connect the objects so that they are scientifically correct e Sublimates to form e Freezes to form Evaporates to form Boils to form Condenses to form Melts to form The correct answer is Sublimates to form Water Vapor Condenses Freezes Eva
401. rofessional and can be optionally installed on all other versions This collection includes Japanese Korean Simplified Chinese as well as Traditional Chinese The following are the MCP Exam 70270 Preparation doc 184 three key areas of language configuration settings within the Regional and Language Options applet from the Windows XP Control Panel e Regional Options e Languages e Advanced Regional Options Locales A locale is a collection of Windows XP Professional settings that reflects a specific country or region s language and cultural conventions For example the English United Kingdom and English United States locales reflect different countries or regions that may share a common language but use different dialects currencies and even date and time formats Applications use the locale information to input the correct symbols and characters A locale contains information about standards and formats such as the following e Number Currency Time and date formats Localized calendar settings Character code page conversion tables Country abbreviation The Regional Options tab on the Regional and Language Options dialog box gives you the ability to select a country from the Standards and Formats dropdown list box When you select a country the corresponding formats and standards for that locale are listed under Samples To change the default settings for a locale click the Customize button Configuring Regional Optio
402. roups have assigned to them specific privileges also called user rights that enable them to perform specific sets of tasks on a system The default local group accounts on a Windows XP Professional system are the following e Administrators Users in this group have all built in system privileges assigned They can create and modify user and group accounts manage security policies create printers and manage permissions to resources on the system The local Administrator account is the default member and cannot be removed Other accounts can be added and removed When a system joins a domain the Domain Admins group is added to this group but it can be removed e Backup Operators Users in this group can back up and restore files and folders regardless of security permissions assigned to those resources They can log on and shut down a system but cannot change security settings MCP Exam 70270 Preparation doc 124 Power Users Users in this group can share resources and create user and group accounts They cannot modify user accounts they did not create nor can they modify the Administrators or Backup Operators groups They cannot take ownership of files back up or restore directories load or unload device drivers or manage the security and auditing logs They can run all Windows XP compatible applications as well as legacy applications some of which members of the Users group cannot execute If you want certain users to have broad
403. rs And Cameras applet to install other scanners digital still cameras digital video cameras and image capturing devices After a device is installed Scanners And Cameras can link it to a program on your computer For example when you push Scan on your scanner you can have the scanned picture automatically open in the program you want Installing Scanners or Digital Cameras To install a scanner or digital camera perform the following steps 1 Open Scanners And Cameras in the Control Panel 2 Click Add An Imaging Device and then follow the instructions on the screen Remember that you must be logged on as an administrator or a member of the Administrators group to complete this procedure If your computer is connected to a network network policy settings may prevent you from installing devices MCP Exam 70270 Preparation doc 220 Testing Scanners or Digital Cameras To test a scanner or digital camera perform the following steps 1 Open Scanners And Cameras in the Control Panel 2 Right click the scanner or camera you want to test and then click Properties 3 On the General tab click Test Scanner Or Camera An on screen message tells you if the camera or scanner completed the test successfully You can also check your Event Log to see if the test was successful Using Modems At one time or another if you ve used a computer you have probably used a modem to connect to your office or to an Internet service provider IS
404. rs by default Administrator HelpAssistant SUPPORT_xxxxxxxx the x s represent a unique number for your Windows XP system and Guest The Guest user account and the SUPPORT_xxxxxxxx account are disabled by default The Administrator user account is all powerful on the local machine and cannot be deleted although it can be renamed Nine local groups are installed automatically Administrators Backup Operators Guests HelpServicesGroup Network Configuration Operators Power Users Remote Desktop Users Replicator and Users The Power Users group is not present in any edition of Windows 2000 Server or Windows NET Server it exists only as a Local group in Windows XP Professional The Administrators account is all powerful because it is a member of the Administrators group and you cannot remove the Administrator user account from membership in the Administrators group Table 1 outlines the Local groups that are installed by default when you first install Windows XP Professional Special Built in Security Principals Special built in security principal entities apply to any user account that happens to be using a Windows XP computer in a particular manner at a given point in time For example when a user logs on to a Remote Desktop session the security principal Terminal Server User gets applied to his user account for the duration of the Remote Desktop session until he logs off When a user logs on to a computer remotely over the network that
405. rties from the context menu to display the properties window for that device as shown in Figure 2 All the pertinent information about the device is available from this window including its device status as determined by the operating system Figure 2 Using Device Manager to troubleshoot hardware issues File Acton View Help D TTS eaa Network of Xircom CrodtCard Rhomet 10 100 Modem 56 DE Genera Advanced Driver Resources Network of Xircom CredtCard Ethemet 10 100 Moden 56 Device type Network adapters Marsfocturer Arcom Location on Xircom CreditCard Ethemet 10 100 Mod This device is working property a an E you are having problems with this device chck Troubleshost to 00 Modem 56 tat the toubleshooter MCP Exam 70270 Preparation doc 263 Monitoring Disk Performance The Windows XP performance monitoring tool is composed of two parts System Monitor and Performance Logs and Alerts The MMC snap in is simply named Performance With System Monitor you can collect and view real time data about disk performance and activity in graph histogram or report form Performance Logs and Alerts enables you to configure logs to record performance data and to set system alerts to notify you when a specified counter s value is above or below a defined threshold To open Performance perform the following steps 1 Click Start Control Panel 2 Inthe Control Panel double click Administrative Tools and then double
406. s Assigning an application is very similar to publishing one When an application has been assigned you can install it from Add or Remove Programs Additionally a shortcut for the application that has been assigned is placed on the Start All Programs menu when users log on to their computer The software does not get installed until users select the shortcut for the first time Software that has been published or assigned is also installed if users double click a file with the extension supported by the published or assigned application MCP Exam 70270 Preparation doc 182 Repairing Applications Windows Installer Service maintains configuration information on each application installed via the Windows Installer The MSIEXEC exe program can repair an application in the event that one or more of an application s files become damaged or deleted MSIEXEC exe offers several command line switches The default options if no switches are specified on the command line are fpecms For more details on using MSIEXEC exe go to the Windows XP Professional Help and Support Center the Windows XP help system and search on MSIEXEC The syntax for the repair options for MSIEXEC exe is MSIEXEC f p o e d c a u m s v filename msi ProductCode The commands in brackets are optional The syntax for advertising an MSI application is MSIEXEC j MSIEXEC ju to advertise to the current user or MSIEXEC jm to advertise to all users of the
407. s Set the maxdmurn amount of tne mrvitations can remain open 30 v Days Cancel MCP Exam 70270 Preparation doc 315 This interface shown in Figure 7 also allows for advanced options to be configured for the Remote Assistance session The first advanced option configuration is the ability to allow the computer to be controlled remotely If this option is selected it indicates that the support person not only is able to see the desktop but also can take control of it with their mouse and keyboard The second option controls the amount of time that the invitation is valid It would not be wise to have an invitation sitting untouched for too long due to security concerns To create an invitation the user selects Get Help From A Friend By Using Remote Assistance from the Start Help And Support menu option The invitation has many steps that need to be well understood The first step is to determine how you will contact your support person or assistant as they are referred to in the interface You have three options e Windows Messenger This requires that you have an existing MSN Messenger account or have configured a NET Passport e Email This requires that you have Microsoft Outlook or Outlook Express configured Both you and the assistant must have Windows Messenger or a MAPI compliant email tool such as Outlook or Outlook Express e File This is the advanced option but allows the most freedom in getting the invitation out
408. s NT Workstation and Windows 95 or Windows 98 A solid understanding of each system s architecture installation configuration maintenance and troubleshooting is also essential Knowledge of the various methods for installing Windows 2000 including manual and unattended installations A thorough understanding of key networking protocols addressing and name resolution including TCP IP IPX SPX and NetBEUI A thorough understanding of NetBIOS naming browsing and file and print services Familiarity with key Windows 2000 XP based TCP IP based services including HTTP Web servers DHCP WINS and DNS plus familiarity with one or more of the following Internet Information Server IIS Index Server and Proxy Server An understanding of how to implement security for key network data in a Windows 2000 XP environment Working knowledge of NetWare 3 x and 4 x including IPX SPX frame for mats NetWare file print and directory services and both Novell and Microsoft client software Working knowledge of Microsoft s Client Service For NetWare CSNW Gateway Service For NetWare GSNW the MCP Exam 70270 Preparation doc 5 NetWare Migration Tool NWCONV and the NetWare Client For Windows NT 95 and 98 is essential e A good working understanding of Active Directory The more you work with Windows 2000 the more you ll realize that this new operating system is quite different than Windows NT New technologies like Active Director
409. s System and set the Devices Unsigned Driver Installation Behavior policy to Do Not Allow Installation D Brandy can go to Computer Configuration Windows Settings Security Settings Local Policies Security Options and set the Devices Unsigned Driver Installation Behavior policy to Do Not Allow Installation A2 Answer d is correct The policy setting for Devices Unsigned Driver Installation Behavior is a global computer related GPO and the setting Do Not Allow Installation blocks unsigned drivers from being installed on the system Answer a is incorrect because the policy setting for Devices Unsigned Driver Installation Behavior is a global computer related GPO it is not user specific and the setting Silently Succeed allows both signed and unsigned drivers to be installed Answer b is incorrect because the setting Silently Succeed allows both signed and unsigned drivers to be installed Answer c is incorrect because the GPO is not located in the User Configuration container and the policy is not under Administrative Templates MCP Exam 70270 Preparation doc 243 3 Alexis has several USB devices plugged into several different USB hubs that are all connected to a USB port on her Windows XP computer She buys a new USB mouse and plugs it into one of the daisy chained USB hubs using a USB cable that is 12 feet in length The computer does not detect the new mouse Even when she tries to install it using the Add Hardware Wizard the system
410. s XP Professional computer without logging on After joining your computer to the domain you attempt to shut down your computer without logging on but the option is not available Why is the option not available A The Shutdown Without Logging On option is not available to computers that have joined a domain B The option in the Local Group Policy no longer applies because the computer is in the domain C The user needs to be placed in the Local Administrators group for the Local Group Policy to apply D The Domain Group Policy to Shutdown Without Logging On option is set to disabled Answer d is correct Local Group Policies are the first to apply of all policies and are overridden by conflicting policy settings that are located at the Active Directory levels Answer a is incorrect because the option is available at all GPO levels Answer b is incorrect because Local Group Policies still apply when computers join domains although they have lower priority Answer c is incorrect because users don t need to be placed in the Local Administrators group to apply policies after a computer has joined the domain You have enabled auditing on your company s laptops You want to configure your remote users laptops to shut down if they are unable to log security events and log all attempts to change Local Group Policies How should you configure the systems Check all correct answers A Use Security Options in the Local Security settings to
411. s XP installation map Displays the drive letter mappings mkdir md Creates a folder more Displays a text file net Maps a network share to a drive letter rename Renames a single file ren rmdir rd Deletes a folder set Specifies environment variables for the Recovery Console session systemroot Sets the current folder to the systemroot folder for the system that you are currently logged on to Displays a text file System Restore The System Restore feature enables you to restore a Windows XP MCP Exam 70270 Preparation doc 342 Professional system back to a prior operational state and configuration This feature can be quite helpful if you ever want to go back to a previous configuration because the system is encountering a problem with a new setting or a new driver or even if the system is having compatibility problems with a new application program that you installed You must be a member of the Administrators group to work with System Restore System Restore monitors several critical operating system files and application program files that are listed in a file named FileList xml located in the systemroot system32 restore folder The main function of System Restore is the ability to get a Windows XP computer back up and running properly again its job is not to act as a backup and restore agent for user data files Several data folders and files are not tracked by the System Restore fe
412. s from the Internet local intranet trusted sites or restricted sites zones Integration with Microsoft Passport via the Internet A NET Passport also referred to as a Microsoft Passport provides you with personalized access to Passport enabled services and Web sites by using your email address Passport implements a single sign in service that enables you to create a single username and password You can obtain a NET Passport through the NET Passport Wizard in User Accounts shown in Figure 7 The NET Passport Wizard helps you to obtain a NET Passport or sign in with a Passport you already have You will be required to configure a NET Passport when you attempt to use the Windows Messenger application Figure 7 Microsoft NET Passp NET Passport Wizard ort Wizard Add a NET Passport to your Windows XP user account With a Passport you can gt e Have online conversations with Friends and Family Create your own personal Web pages Sign in instantly to all NET Passport enabled sites and services and more al with just one sign in name and password MCP Exam 70270 Preparation doc 146 Those companies that don t have access to the Internet or don t allow users to use a Microsoft Passport for Windows Messenger but still want users to take advantage of the Windows Messenger capabilities can take advantage of the Windows Messenger functionality that is built into Exchange 2000 With Exchange 2000 users can u
413. s has been presented in which case the test taker is almost certain to fail Microsoft also introduced a short form test for its most popular tests This test delivers 25 to 30 questions to its takers giving them exactly 60 minutes to complete the exam This type of exam is similar to a fixed length test in that it allows readers to jump ahead or return to earlier questions and to cycle through the questions until the test is done Microsoft does not use adaptive logic in this test but claims that statistical analysis of the question pool is such that the 25 to 30 questions delivered during a short form exam conclusively measure a test taker s knowledge of the subject matter in much the same way as an adaptive test You can think of the short form test as a kind of greatest hits exam that is the most important questions are covered version of an adaptive exam on the same topic Note Some of the Microsoft exams can contain a combination of adaptive and fixed length questions Microsoft tests can come in any one of these forms Whatever you encounter you must take the test in whichever form it appears you can t choose one form over another If anything it pays more to prepare thoroughly for an adaptive exam than for a fixed length or a short form exam The penalties for answering MCP Exam 70270 Preparation doc 22 incorrectly are built into the test itself on an adaptive exam whereas the layout remains the same for a fixed leng
414. s keeping the processor busy A faster processor may improve performance of such a system MCP Exam 70270 Preparation doc 356 However if Processor Queue Length is high a second processor would be a better solution or you might consider moving processes to underutilized systems Task Manager Task Manager enables you to view applications and processes and a number of other common performance counters To open Task Manager right click the taskbar and choose Task Manager or press Ctrl Shift Esc The Applications tab enumerates active applications The Processes tab can display a number of process related counters With the Processes tab displayed click View Select Columns from the menu bar to specify which counters you wish to view The Performance tab displays useful performance metrics such as CPU usage and paging file usage these statistics start running whenever Task Manager is opened The Networking tab is new to Windows XP it displays the network utilization percentage for the system Managing Application Performance Windows XP preemptively multitasks active processes ensuring that all threads gain access to the processor Processes do run at different priorities however Priority levels of 0 to 31 are assigned to a process and higher level processes are executed before lower level processes As a user you can specify process priority using Task Manager Right clicking a process on the Processes tab enables you to set a pr
415. s much improved in Windows XP and adds more options and greater flexibility than its predecessor Setup Manager can now do the following e Agree to the EULA e Input the Product ID for installation e Create a distribution share point e Create a listing of unique computer names for a Uniqueness Database File UDF e Add third party Plug and Play drivers and other resources e Add printers scripts batch files and other commands to the distribution share MCP Exam 70270 Preparation doc 38 You must extract Setup Manager from a CAB file on the Windows XP Professional CD ROM to create Unattend txt To extract Setup Manager perform the following steps 1 Insert the Windows XP Professional CD ROM into the computer and select the Deploy cab file located in the Support Tools folder Double click the Deploy cab file to view the contents Right click Setupmgr exe and select Extract Choose a location from the Explorer menu to extract the file You can now create the answer file Double click the Setupmgr exe icon to launch the wizard The Setupmgr exe utility is a multipurpose tool because you can use it to create answer files for several types of unattended installations We will concentrate on a Windows XP unattended installation Perform the following steps to create an answer file 1 2 3 10 11 12 Double click the Setupmgr exe icon to start the utility Click Next to pass the welcome page Select the Create A New Answer
416. s who are members of the local Administrators group for Windows XP Professional nondomain member computers e Users who are members of the local Administrators group for Windows 2000 Server and Windows NET Server nondomain member servers e Users who are members of the Domain Administrators group for Windows 2000 Server or Windows NET Server domain controllers Windows domain member servers and Windows XP Professional domain member computers DRAs can log on to a system and decrypt files and folders so that they are once again accessible to other users Nondomain member Windows XP Professional computers issue a default self signed certificate that designates the default Administrator user as the DRA If you remove any and all DRAs from a stand alone Windows XP computer or from a Windows Active Directory domain no Data Recovery policy is in place and therefore EFS will prohibit users from encrypting files and folders You can manage the EFS recovery policy for the local Windows XP computer via the Group Policy snap in for the Microsoft Management Console MMC Expand the Group Policy snap in node for Computer Configuration Windows Settings Security Settings Public Key Policies Select the Encrypting File System subnode Right click the Encrypting File System subnode and select Add Data Recovery Agent or you can select Properties when you right click the Encrypting File System subnode to enable or disable EFS on the computer as shown in Figure 9
417. se clients cannot have static IP addresses due to the limited number of IP addresses that are available What protocols or services will these Windows XP clients need to run Check all correct answers A TCP IP that is dynamically configured B IPX SPX that uses frame type 802 2 C TCP IP that is manually configured D GSNW E IPX SPX that uses frame type 802 3 F CSNW Answers a e and f are correct To have the client automatically receive an IP address it must be configured to dynamically receive an IP address Another term for this is to be DHCP enabled Because the version of NetWare that is being used is 3 x the frame type must be 802 3 The use of IPX SPX is also a requirement because the NetWare server cannot communicate with the XP Pro client without it The Windows XP client must also have CSNW installed to allow communication to the file and print services running on the NetWare server Answer b is incorrect because the 802 2 frame type would not be correct for the NetWare 3 11 server that is being used Answer c is incorrect because the question clearly states that static or manual IP addresses are not allowed Answer d is incorrect because the GSNW service is for servers not for Professional computers You are attempting to connect to your Windows XP Professional computer at work named XPPROWORK This computer has an IP address of 24 15 199 1 You are attempting to connect from your Windows 98 computer at home named HOME
418. se their Active Directory credentials to open a Windows Messenger session and talk to other users on the network who also have an Exchange 2000 Windows Messenger account MCP Exam 70270 Preparation doc 147 Practice Questions di A1 A2 You are the administrator for a large company You have a group of Windows XP Professional computers in a workgroup and want to enable your users to create user and group accounts without giving them excessive rights How should you configure the users accounts A Assign your users to the Local Administrators group on the local machine B Assign your users to the Server Operators group on the local machine C Assign your users to the Domain Administrators group in the domain D Assign your users to the Power Users group on the local machine Answer d is correct Power Users have the right to create user and group accounts but they do not have total control over the computer as an administrator does Answer a is incorrect because making the users administrators would give them excessive rights Answer b is incorrect because the Server Operators group does not exist on a Windows XP Professional machine nor is this group given any privileges on the local system after joining the domain Answer c is incorrect because like answer a it would give the users excessive rights also because the machines are in a workgroup putting them in the Domain Administrators group would have no effect on thei
419. select Typical Microsoft Client File and Print Sharing as well as the Transmission Control Protocol Internet Protocol TCP IP are installed Additionally the client will be configured as a Dynamic Host Configuration Protocol DHCP client If you need to enter a static IP address or add or subtract network services use the Custom option Select Typical or Custom and click Next The Workgroup or a Domain page appears next If the computer is to join a domain during the installation you must type in the name of the domain as well as enter a username and password of a user who has the right to add workstations to a domain Fill in the appropriate fields and click Next You ve reached the end of creating a basic answer file If you need to add other drivers or scripts select the Yes Edit The Additional Settings radio button For the purposes of this discussion select No Do Not Edit The Additional Settings and click Next The files are copied to the distribution share the last page displayed is a summary page of the files that you created Click Finish MCP Exam 70270 Preparation doc 40 Piecing Together an Unattended Network Install Now that you have created the answer file and the distribution share let s put it all together to see how to launch an unattended installation of Windows XP Professional To master this task you must understand a few switches that are involved The winnt exe command has multiple switches to control its fun
420. ses to computer host names and vice versa DNS employs a hierarchical system of domains and subdomains that helps to make this name resolution service very scalable DNS servers mitigate the need for a manually maintained HOSTS file to be stored on each computer Windows 2000 DNS servers offer added functionality such as Active Directory MCP Exam 70270 Preparation doc 295 Integrated Zones Incremental Zone Transfers and Secure Dynamic Updates DNS is a requirement for implementing Active Directory e Windows Internet Naming Service WINS This service is Microsoft s implementation of a name resolution mechanism to match IP addresses to NetBIOS computer names and vice versa WINS servers can greatly reduce NetBIOS traffic on networks by decreasing the amount of broadcast traffic that occurs when computers attempt to resolve unknown NetBIOS computer names to IP addresses For an Active Directory based network in Windows 2000 native mode with no applications that require NetBIOS nor any legacy Windows clients WINS becomes unnecessary e Automatic Private IP Addressing APIPA Microsoft first introduced this feature in Windows 98 For computers that are configured to obtain an IP address automatically APIPA kicks in if no DHCP server is available on the network to lease out an IP address APIPA automatically queries the other computers on the network to ensure it does not duplicate an IP address and then assigns a unique IP address to
421. set the option to shut down the system if it s unable to log security audits B Configure the Audit Policy Change setting to monitor failed changes C Configure the Audit Policy Change setting to monitor successful changes D Configure the Audit Object Access setting to monitor successful changes Answers a b and c are correct You will need to set the option in the Local Security settings to shut down the system if the computer is unable to log security audits as well as set the Audit Policy Change policy for both success and failure Answer d is incorrect because auditing object access logs users access to resources but not changes to policies MCP Exam 70270 Preparation doc 149 5 You have 250 Windows XP Professional computers in various OUs in your domain You want to find out which computer GPOs are being applied to your computers specifically policies that have been applied in multiple places with a precedence of 1 or higher What would be the correct syntax to determine this A gpresult scope user z B gpresult scope computer z C gpresult scope user v D gpresult scope computer v A5 Answer b is correct The Group Policy Result tool will display the Resultant Set of Policy RSoP for a target user and computer The Scope switch specifies whether the user or the computer settings need to be displayed The z switch specifies that the super verbose information is to be displayed which enables you to see whether a
422. sic Disk which is similar to the disk configuration used under earlier versions of Windows is a physical disk with primary and extended partitions As long as you use the file allocation table FAT file system discussed in detail later in this chapter Windows XP Professional and Home editions Windows 2000 Windows NT Windows 9x and MS DOS operating systems can access basic disks You can create up to three primary partitions and one extended partition on a basic disk or just four primary partitions You can create a single extended partition with logical drives on a basic disk however you cannot extend a basic disk Extending a disk enables you to use a second hard disk volume for storage while the operating system makes the extra volume appear to be part of the same volume on the first disk You gain more disk storage while maintaining the same drive volume letter Basic disks store their configuration information in the master boot record MBR which is stored on the first sector of the hard drive The configuration of a basic disk consists of the partition information on the disk Basic fault tolerant sets inherited from Windows NT Server 4 are based on these simple partitions but they extend the configuration with some extra partition relationship information which is stored on the first track of the disk Basic disks may contain spanned volumes volume sets mirrored volumes mirror sets striped volumes stripe sets and Redundan
423. sical links into a logical bundle and the resulting aggregate link increases your connection bandwidth For example you could use MCP Exam 70270 Preparation doc 221 Multilink to combine the power of two 33 6Kops modems to achieve approximately a 67 2Kbps dial up connection Detailed information on Multilink support under Windows XP can be found in the Microsoft Knowledge Base article Q307849 Configuring Multilink To configure Multilink perform the following steps 1 Open the Control Panel and double click the Network Connections icon 2 Right click the connection on which you want to enable Multilink and then select Properties 3 On the General tab mark the checkbox next to each device that you want to use with this connection and click OK Multilink Tips If you use multiple devices to dial a server that requires callback only one of your Multilinked devices is called back because only one phone number is stored in a user account Therefore only one device connects all other devices fail to complete the connection and your connection loses Multilink functionality You can avoid this problem if the Multilinked phonebook entry is to an ISDN line or modem with two channels that have the same phone number To dial multiple devices both your connection and your remote access server must have Multilink enabled Troubleshooting Modems You can verify that your modem is working properly by clicking the Query Modem button f
424. sks running on Windows 2000 Server or Windows NET Server computers Note Mirrored and RAID 5 volumes are available only on computers that are running Windows 2000 Server or Windows NET Server Windows XP Professional computers can use basic and dynamic disks but they cannot host software based fault tolerant disk configurations such as mirrored volumes and stripe sets with parity RAID 5 volumes You can however use a computer running Windows XP Professional to create mirrored and RAID 5 volumes on a remote computer running a Windows 2000 Server or Windows NET Server network operating system The Disk Management MMC snap in can administer both local and remote disk storage MCP Exam 70270 Preparation doc 260 Limitations of Dynamic Disks and Dynamic Volumes You can use dynamic disks and dynamic volumes in specific circumstances you need to understand when you can and cannot use them When You Are Installing Windows XP If you create a dynamic volume from unallocated space on a dynamic disk you cannot install Windows XP on that volume The setup limitation occurs because Windows XP Setup recognizes only dynamic volumes that contain partition tables Partition tables appear in basic volumes and in dynamic volumes only when they have been upgraded from basic to dynamic If you create a new dynamic volume on a dynamic disk that new dynamic volume does not contain a partition table When You Are Extending a Volume If you upgrade
425. soft Networks and click OK Answer B is correct Simple File Sharing is enabled by default for stand alone and workgroup member computers Simple File Sharing is disabled by default for domain member computers The Folder Options menu is the only way to enable or disable Simple File Sharing Answer a is incorrect because the policy for Network Access Sharing And Security Model For Local Accounts does not deal with Simple File Sharing Answer c is incorrect because the Workstation service is enabled by default Answer d is incorrect because File And Printer Sharing For Microsoft Networks is enabled by default MCP Exam 70270 Preparation doc 118 A2 A3 Which of the following methods enable you to create shared network folders Check all correct answers A Right click a folder in either My Computer or Windows Explorer select Sharing And Security click the option button Share This Folder and click OK B Right click a folder in either My Computer or Windows Explorer select Properties click the Sharing tab click the option button Share This Folder and click OK C Open the Computer Management Console expand Shared Folders right click the Shares node and click New File Share Follow the on screen instructions for the Create Shared Folder Wizard D Open a command prompt window Type Net Share share_name x folder_name where share_name represents the name you want to assign to the shared folder x represents the drive lett
426. soon as you add an additional input language besides the default language an icon appears on the taskbar next to the system tray it indicates the input language that is currently being used A quick way to select input languages besides assigning hot keys is to click the Language icon on the taskbar and then select the specific input language that you need as shown in Figure 16 By clicking the Key Settings button on the Text Services and Input Languages dialog box you can assign keystroke combinations for easy switching between different installed input languages MCP Exam 70270 Preparation doc 187 Figure 16 Input language selections from clicking the Language icon on the taskbar v EN English United States Russian EN English New Zealand French Canada EN English United Kingdom Finnish Show the Language bar EN E T ft 8 50 Note Additional input locales are available for each new language that is installed For example if a user needs an input locale for Estonian install the Baltic language setting Configuring Advanced Language Settings Use the Advanced tab of the Regional and Language Options dialog box to specify the language to use for displaying menus and dialog boxes for non Unicode applications Use the Code Page Conversion Tables section to add or remove Code Page Conversion Tables on your Windows XP Professional computer Click the Apply All Settings To The Current User Account And To The D
427. sor priority settings for specific processes are managed on the Processes tab Available system memory is shown on the Performance tab and you can expand the list of processes to include all users on the machine by marking the Show Processes From All Users checkbox at the bottom of the Processes tab MCP Exam 70270 Preparation doc 364 Chapter 10 Installing Administering and Troubleshooting Remote Access Services Terms you ll need to understand e Authentication protocol Internet Protocol Security IPSec Point to Point Tunneling Protocol PPTP Layer 2 Tunneling Protocol L2TP Extensible Authentication Protocol EAP Smart Card Encryption Dial up connection Virtual Private Network VPN Internet Connection Firewall ICF Internet Connection Sharing ICS Techniques you ll need to master e Configuring the proper authentication for a remote access client e Determining when it is best to use PPTP or L2TP for your VPN connections e Establishing the requirements and configurations to use a Smart Card e Knowing what the default encryption levels are for your remote access connections e Configuring ICF to secure your computer on the Internet e Knowing when to configure ICS to allow multiple computers on your network access to the Internet Dial up connectivity still maintains an important role for connecting remote computers In Microsoft terms dial up connections generally refer to client computers dialing out to serve
428. space on the same physical disk and it can be extended only onto unallocated space that resides on the same physical disk You should create basic volumes such as partitions or logical drives on basic disks if you want computers running earlier versions of Microsoft operating systems to be able to access those volumes MCP Exam 70270 Preparation doc 256 Creating or Deleting a Partition or Logical Drive To create or delete a partition or logical drive you may use the Diskpart exe command line tool or use the GUI and perform the following steps 1 Open the Disk Management console 2 Right click an unallocated region of a basic disk and then click New Partition Alternatively you can right click an area of free space in an extended partition and then click New Logical Drive To remove the partition select Delete Partition from the right click menu 3 Using the Create Partition Wizard click Next Click Primary Partition Extended Partition or Logical Drive and follow the instructions presented by the wizard If you choose to delete a partition all data on the deleted partition or logical drive is lost You cannot recover deleted partitions or logical drives You cannot delete the system partition boot partition or any partition that contains an active paging file The operating system uses one or more paging files on disk as virtual memory that can be swapped into and out of real system memory as the system s load and volume o
429. spreads written pages evenly across all available Pagefile sys files e Configure the paging file to reside on fast less active drives If you have drives of various speeds put the paging file on the fastest one If you have drives that are less active put the paging file on those so that the paging system doesn t have to compete as often with other read or write operations e Before moving the paging file defragment the volumes on which you will put the paging file This practice helps to prevent a fragmented paging file e Set the Initial Size to be sufficient for the system s paging requirements and then set the Maximum Size to the same size When the Maximum Size is greater than the Initial Size and the system must expand the paging file the expansion puts an additional burden on both the processor and disk subsystems In addition the paging file is likely to become fragmented further hitting the performance of paging The ideal paging file configuration is to split it evenly over multiple physical disks except for the disk s containing the system and boot partitions Managing Disk Performance The PhysicalDisk and LogicalDisk performance objects collect metrics related to individual disk drives and logical disk volumes MCP Exam 70270 Preparation doc 354 respectively PhysicalDisk counters focus on a storage device so you should use them to analyze hardware performance Use LogicalDisk counters which focus on a specific
430. ss application custom drivers and business files Configuring Clients The client computer can connect to a RIS server in two ways The first method is to install a peripheral connection interface PCI network adapter that contains a Preboot Execution Environment PXE boot ROM You then have to configure the computer s BIOS to boot from the PXE network adapter When the computer boots from the PXE network adapter it attempts to get an IP address from a DHCP server After the network adapter has an IP address the user is prompted to press the F12 key to locate a RIS server The second method is when the network adapter does not have the PXE boot ROM on board In this case you can use a RIS boot disk which supports multiple network adapter manufacturers NICs such as 3Com and Intel Use the rbfg exe utility to create a RIS boot disk After you have installed RIS you can find the utility in Remotelnstall Admin i386 rbfg exe Downloading an Image After you have configured a RIS server with several images users can boot their computers from the network adapter and press F12 to find a RIS server The server then displays a welcome screen simply press Enter to bypass this screen Next users must log on to the domain The person installing the system must have the ability to add computers to the domain Within Windows 2000 and XP this is done by giving the user the permission to add child objects to the domain typically at the OU level
431. ssions If access permissions to shared folders are too lenient shared data may become compromised On the other hand if access permissions are set too stringently the users who need to access and manipulate the data may not be able to do their jobs Managing access control for shared resources can be quite challenging MCP Exam 70270 Preparation doc 75 Shared Folder Properties Configuring Client Side Caching Offline Files By right clicking a shared folder and selecting Sharing you can modify some of the shared folder s properties You can specify whether network users can cache shared data files on their local workstations To configure offline access settings for the shared folder click the Caching button to display the Cache Settings dialog box The default is to allow caching of files whenever you create a new shared folder To disable this feature you must clear the Allow Caching Of Files In This Shared Folder checkbox in the Cache Settings dialog box If you allow caching of files for a shared folder you must choose from three options in the Caching Settings dialog box Automatic Caching Of Documents This option relies on the workstation and server computers to automatically download and make available offline any opened files from the shared folder Older copies of files are automatically deleted to make room for newer and more recently accessed files To ensure proper file sharing the server version of the file is always op
432. stallation automated Answer b is incorrect because the uniqueness database file is used for network installations not for Sysprep installations Answers c and d are incorrect because they are referring to the use of RIS RIS is not used with third party cloning tools 3 As the administrator for the CertCore consulting group you are responsible for 50 consultants and 100 office personnel CertCore has four offices within the major metropolitan area that the consultants work out of Domain controllers are in each of the four locations At this time the budget is insufficient to have a quality lab so the consultants are using their own desktop systems to troubleshoot client issues You need to enable a technology that will enable the consultants in the company to quickly reinstall their Windows XP Professional desktop in case they corrupt their system while troubleshooting client issues The consultants need to have the ability to boot their system without any floppy disk After the installation the computer account needs to be located in the same OU that it was before to obtain the correct Group Policies Finally the installation needs to include a core set of applications that can then be controlled after the OS is installed via Group Policy How should you proceed a Save the contents of the i386 folder from the Windows XP Professional CD to the network giving the consultants permissions to the winnt32 command b Install a RIS server whic
433. stallation of the initial OS You want to use the new Dynamic Update feature to install these updates as well as some of the other updates that you have tested to be safe and stable for your environment However you do not want the client to access the Internet during the installation to receive these updates What should you do Check all correct answers a Create a Group Policy to point the client to the share that contains the hotfixes and updates b Create a share on the network and download the hotfixes and updates to it c When installing the client be sure to use the dushare switch with the installation command d When installing the client be sure to use the duprepare switch with the installation command Answer Answers b and c are correct First you need to create a share that contains the hotfixes and updates You need to connect to the corporate site located on the Windows Update site to select which files you want to include in your share Then the client needs to be redirected to the correct share by using the dushare switch during the installation Answer a is incorrect because GPOs can t be used to install from the Dynamic Update share this is available at installation only Answer d is incorrect because the duprepare switch prepares the Dynamic Update share not used on the client portion of the installation 7 You are in charge of the Web developers in your company Your company creates e commerce Web sites and
434. stem MCP Exam 70270 Preparation doc 195 Advanced Video Display Options Windows XP Professional offers support for enhanced video display features not found under previous operating systems such as Windows 2000 One of the advanced video display options is ClearType a font smoothing technology for mobile computers and flat screen monitors that use LCD technology Another advanced display feature is called Dualview which extends the Windows XP desktop over two computer displays using a mobile PC s built in LCD screen plus an external monitor Each of these advanced features enhances your computing experience when working with Windows XP ClearType Display Support ClearType makes reading LCD screens easier by smoothing the display of fonts for mobile computer displays and flat screen monitors On ordinary non LCD desktop monitors ClearType may make the display appear blurry ClearType is not compatible with the Magnifier utility When you select either Standard or ClearType from the Use The Following Method To Smooth Edges Of Screen Fonts drop down list the computer s video adapter and monitor must support at least 256 colors High Color 24 bit or Highest Color 32 bit are recommended settings to use with ClearType To enable ClearType technology 1 Open the Display applet in the Control Panel 2 Go to the Appearance tab and click the Effects button 3 Mark the checkbox labeled Use The Following Method To Smooth Edges Of
435. stering the Inner Game In the final analysis knowledge breeds confidence and confidence breeds success If you study the materials in this book carefully and review all the practice questions at the end of each chapter you should become aware of those areas where additional learning and study are required After you ve worked your way through the E Book take the practice exam in the back of the book Taking this test will provide a reality check and help you identify areas to study further Make sure you follow up and review materials related to the questions you miss on the practice exam before scheduling a real exam Only when you ve covered that ground and feel comfortable with the whole scope of the practice exam should you set an exam appointment Only if you score 80 percent or better should you proceed to the real thing otherwise obtain some additional practice tests so you can keep trying until you hit this magic number If you take a practice exam and don t score at least 80 to 85 percent correct you ll want to practice further Microsoft provides links to practice exam providers and also offers self assessment exams at www microsoft com trainingandservices Armed with the information in this book and with the determination to augment your knowledge you should be able to pass the certification exam However you need to work at it or you ll spend the exam fee more than once before you finally MCP Exam 70270 Preparation doc 2
436. t company Your company develops high end Web sites and Web applets for e commerce companies You have more than 1 000 developers in the company who code in many different languages including C ASP VB and XML Each developer computer is running Windows XP Professional and the user is not a Power User or Administrator on their local system The current infrastructure is a Windows 2000 domain running Active Directory You had to implement Active Directory to control each type of developer through Group Policy and to delegate control to the head developer in each discipline Each type of developer user account and computer account is located in a separate OU You have had issues with some service packs overwriting critical system files that were needed to develop and test certain applications that were developed You need to develop a strategy to roll out future service packs to each discipline only after the service pack has been tested and shown that it does not cause any damage to the developer computer What should you do a Create a logon script that runs a batch file to install the service pack when the computer is rebooted b Save the service pack to a network share and allow the developer access to the share to install the service pack at their own leisure c Use the QCHAIN command to install the service pack through a logon script based on the group that the developer is a member of d Configure a Group Policy at each developer
437. t Array of Independent or Inexpensive Disks RAID level 5 volumes stripe sets with parity that were created using Windows NT 4 or earlier These kinds of volumes are covered later in this chapter Mirrored and RAID 5 volumes are fault tolerant volumes that are only available under the Windows 2000 Server or Windows NET Server family of server operating systems These types of volumes cannot be created on basic or dynamic disks using Windows XP Professional Fault tolerant volumes are designed to withstand a single disk failure within a set of disks and to continue functioning until the failed disk is replaced A mirror set duplicates data to a MCP Exam 70270 Preparation doc 249 second physical disk a RAID 5 set writes data across several disks between 3 and 32 physical disks and stores parity information across all the drives to be able to retrieve data in the event of a single failed disk Dynamic Disks A Windows XP dynamic disk is a physical disk that does not use partitions or logical drives Instead a single partition is created that includes the entire disk which can then be divided into separate volumes Also dynamic disks do not have the same constraints of basic disks For example a dynamic disk can be resized on the fly without requiring a reboot Dynamic disks are associated with disk groups which are disks managed as a collection which helps to organize dynamic disks All dynamic disks in a computer are members of the s
438. t because a TCP IP profile is designed to allow a single computer multiple IP configuration options at boot time You have just been promoted to the sales manager for the Braincore net corporation As part of your job responsibilities you are required to access a database to monitor the sales trends You discover that the database is not updated until well after you get home in the evenings but your report is due early in the morning You do not want to make the drive into work to generate the report from the database information What do you do instead A Configure your system at work to allow Remote Assistance B Configure your system at work to receive dial up access C Configure your system at work to allow Remote Desktop access D Configure your system at work to allow a Virtual Private Network connection Answer c is correct Remote Desktop allows someone to access a session that is running on one computer while sitting at another computer This is an excellent solution for someone who works at home and needs to gain access to their computer at work Answer a is incorrect because Remote Assistance allows for another person to access your computer to help you with an issue Answers b and d are incorrect because the Remote Desktop option is preferred due to security and access permissions If you were to configure your computer at work to accept dial up or VPN access then there would MCP Exam 70270 Preparation doc 318 A3 A4
439. t delay in number of seconds If for example a user presses the L key and holds the key down the letter L will repeat every x seconds x represents the number of seconds for the repeat key delay When you have enabled FilterKeys an icon in the shape of a stopwatch appears in the system tray You can also enable FilterKeys by holding down the right Shift key for eight seconds If a user has enabled FilterKeys but finds that the keystrokes repeat with no delay either someone has selected the No Keyboard Repeat setting or the repeat time delay has been configured to its lowest setting ToggleKeys When enabled this option causes a high pitched sound to be played when the Num Lock Caps Lock or Scroll Lock key is pressed This feature is enabled via the Accessibility Options applet or by holding down the Num Lock key for five seconds MCP Exam 70270 Preparation doc 192 Sound Tab On the Sound tab you can enable the following two sound features to help notify users of warnings and other events SoundSentry When enabled this option displays visual warnings when Windows XP generates audible alerts This feature is helpful for users with a hearing impairment A user can specify which part of the screen actually flashes when a sound is generated The options are Flash Active Window Flash Active Caption Bar or Flash Desktop To enable this feature simply select the SoundSentry checkbox No shortcut is available for this feature Show
440. t feels that the hardware that is required to run Windows XP Professional needs to be bigger and better than the hardware required by any previous OS With newer hardware you will get all of the great new features such as Plug and Play ACPI bootable CD ROMs and so on Because of these robust features Microsoft has removed the need or ability to create or use the setup disk sets that were available with Windows NT and 2000 Professional MCP Exam 70270 Preparation doc 32 Upgrading to Windows XP Professional Windows NT 4 supported upgrades only from previous Windows NT operating systems whereas Windows 2000 would upgrade from almost anything Windows XP on the other hand allows for many upgrade paths but does have some limitations The following is a list of Windows operating systems that you can directly upgrade to Windows XP Professional e Windows 2000 e Windows NT 4 Service Pack 6 e Windows 98 all editions e Windows ME All other OS versions must first get to one of these levels before an upgrade to XP can be performed The easiest operating system to upgrade from is Windows 2000 This operating system shares a lot of features with Windows XP including its Registry You can upgrade Windows 98 and NT quite smoothly as well but you need to take some precautions which are detailed in the next section Preupgrade Checklist Before you upgrade to Windows XP Professional you need to check the current operating system conf
441. t help you determine when you should synchronize offline files Logon Logoff On Idle and Scheduled However you can also select over what network connection synchronization takes place For example to have synchronization occur only when you are connected to the network versus when you have a slow dial up connection select LAN Connection in the When Am Using This Network Connection drop down list Synchronization Details Now that you have configured synchronization you are probably wondering what actually happens during this process Well that depends The following are several synchronization scenarios e An offline file has been deleted and the original network version of the file has not changed f this happens Windows XP Professional removes the file from the network file server during synchronization e A network file has been deleted and the offline version of the file has not changed If this happens Windows XP Professional presents a dialog box of this state and gives you the option to either remove the file from the local computer during synchronization or keep the local version e The offline file has changed and the network version has changed lf this happens you are presented with a dialog box during the synchronization it asks you what should be done The options are keep the network version keep the local version and keep both and rename the local version e Only files that have changed are synchronized f no ch
442. target folder as on the backup media You cannot perform an ASR restore from an ASR backup residing on a network share The ASR backup must be stored on a locally attached device such as a tape drive a Zip or Jaz drive a CD drive other removable media or other hard disks Performance Optimizing and Troubleshooting Although Windows XP Professional performs extremely well as a MCP Exam 70270 Preparation doc 346 general workstation platform with the right tools techniques and knowledge you can further optimize the operating system for particular roles and you can more easily troubleshoot performance challenges This section looks at System Monitor Performance Logs and Alerts Task Manager and other tools that you can use to improve Windows XP s performance System Monitor The System Monitor MMC snap in is a node of the Performance Console accessed by selecting Start All Programs Administrative Tools Performance and is available for inclusion in custom MMC consoles This tool enables you to visually inspect the activity of system components such as the memory processor disk subsystem network cards paging file and applications The plethora of performance metrics or counters available for monitoring can make the task a daunting one indeed We will examine the most useful counters after a tour of the Performance Console s major components Configuring System Monitor System Monitor like all MMC snap ins is best controll
443. te a new shared folder you simply type Net Share share_name x folder_name where share_name represents the name you want to assign to the shared folder x represents the drive letter where the folder resides and folder_name represents the actual name of the folder For help with the various options and syntax of the Net Share command type Net Share at the command prompt You also have the option of connecting to network shares via the Net Use command For help with the various options and syntax of the Net Use command type net use at the command prompt To connect to a remote resource from the command line follow these steps 1 Open a command prompt window click Start All Programs Accessories Command Prompt or click Start Run type CMD and click OK 2 At the command prompt type net use X servername sharename and press Enter where X is a drive letter that you designate for example net use M sales7 samples If you possess the appropriate permissions for that network share you should see the message The Command Completed Successfully displayed in your command prompt window Controlling Access to Shared Folders When you as a network administrator grant access to shared resources over the network the shared data files become very vulnerable to unintentional as well as intentional destruction or deletion by others This is why network administrators must be vigilant in controlling data access security permi
444. ted in the systemdrive sysprep folder to utilize the factory switch e Nosidgen Runs Sysprep without generating a new SID for the computer This is an excellent option if you are preinstalling domain controllers e Reseal This option is run after the OEM has run Sysprep in factory mode and configured the system to be delivered to the customer MCP Exam 70270 Preparation doc 44 Deploying Windows XP Professional by Using Remote Installation Services RIS You can use RIS to deploy Windows XP Professional over a network from a remote installation server RIS integrates a few of the installation methods discussed thus far into one tight bundle You can use it to install Windows XP Professional to a computer with a blank hard drive or to reinstall Windows XP Professional to repair a corrupted system The main goal of RIS is to reduce total cost of ownership TCO by having one central location for either the end users or administrators to install Windows XP Professional To install Windows XP Professional using RIS a user presses the F12 key during the boot process to find a RIS server and start the installation Three steps are involved in making RIS work 1 Configure the client 2 Configure network servers for RIS 3 Create a Windows XP Professional image The next few sections uncover the details of these areas Configuring Network Services and Hard Drive Space Requirements Before you can install and configure RIS several
445. ted just for Joe This type of profile is known as a ocal profile and is stored on the computer on which it was created If Joe logged on to a different computer his profile would not follow him to the computer he just logged on to However you can have a user s profile follow the user around the network if you so choose This type of profile is called a roaming user profile These profiles are stored on a network server A local copy of the roaming profile is also found on the client computer User Profiles User profiles in Windows XP employ a similar folder structure as introduced under Windows 2000 This structure is different than the one used with Windows NT 4 One of the folders found within a user s profile is called Local Settings The Local Settings folder is local to the machine it resides on and does not roam from workstation to workstation Also a folder called My Documents is contained within a profile This folder resides in the default location where users files are saved to disk The My Documents folder does have the capability to follow users around the network roam as they log on to different workstations Local Profiles Windows XP Professional and Windows 2000 Professional local profiles are found in a different location than those in Windows NT 4 Workstation possibly If you perform a clean install of Windows XP Professional a user profile is stored in the root of the system volume in a folder called Documents and
446. ter_share_name into a Web browser Answer a is incorrect because a print server computer must be running IIS 5 or later to support IPP Answer c is incorrect because IPP displays only print devices not fax devices However the URL is correct MCP Exam 70270 Preparation doc 122 Chapter 4 Setting Up Managing and Troubleshooting Security Accounts and Policies Terms you ll need to understand e Local user account Local group Complex password Domain user account Global Universal and Domain Local groups Security Identifier SID Authentication Local Group Policy Group Policy Object GPO Resulting Set of Policies RSoP Software Restriction Policy Microsoft Passport Techniques you ll need to master e Adding and configuring new local user accounts e Adding users and groups from a Domain to a Local group e Properly renaming user accounts to maintain resource access e Configuring the Local Security Policy and the Local Group Policy e Understanding the order in which Group Policies apply to a user and computer when the computer is a member of the domain e Analyzing and configuring computers with the security templates e Using and configuring a Microsoft Passport The Local Users and Groups snap in enables you to manage local users and groups You can get to the snap in by choosing Start Control Panel Performance And Maintenance Category Administrative Tools Computer Management and then by expanding the tree pa
447. teractive logon to a Windows XP system You can access the Security dialog box shortly after a system has started and at any time after logon by pressing Ctrl Alt Delete If you are not currently logged on you can enter a username and password If the system belongs to a domain you need to be certain that the domain in which your account exists is selected in the Log On To text box You can either select the domain from the drop down list or enter your User Principal Name UPN The UPN is an attribute of an Active MCP Exam 70270 Preparation doc 132 Directory user object and by default is of the form username domain name where domain name is the Windows 2000 domain for which your user account resides for example braincore net The suffix following the symbol indicates the domain against which to authenticate the user If you are currently logged on to a system pressing Ctrl Alt Delete takes you to the Windows XP Security dialog at which point you can do the following e Log off the system which closes all programs and ends the instance of the session e Lock the system which allows programs to continue running but prevents access to the system When a system is locked you may unlock it by pressing Ctrl Alt Delete and entering the username and password of the user who locked the system or an administrator s username and password e Shut down the system e Change your password e Access Task Manager MCP Exam 70270 Prepar
448. ters and scanners may require more power than bus powered hubs can provide Connect these kinds of USB devices to self powered hubs USB supports up to a maximum of 127 devices connected to one USB host controller root hub with no more than seven tiers seven layers of USB hubs daisy chained together No more than five external hubs may be used in one physical chain of hubs Each device can be no more than five meters away from the port of the hub that it is connected to USB devices that install and function properly under Windows 98 Windows Me or Windows 2000 are not guaranteed to work flawlessly under Windows XP Be sure to check for upgraded drivers before you upgrade a computer to Windows XP Verify that USB peripherals are on the Windows XP HCL or check with the USB device vendor regarding compatibility with Windows XP Viewing Power Allocations for USB Hubs To view power allocations for USB hubs perform the following steps 1 Open Device Manager 2 Expand the entry for Universal Serial Bus Controller 3 Right click USB Root Hub and then click Properties 4 On the Power tab view the power consumed by each device in the Attached Devices list As mentioned previously hubs for USB devices are either self powered or bus powered Self powered hubs hubs plugged into an electrical outlet provide maximum power to the device whereas bus powered hubs hubs plugged only into another USB port provide minimum power Devices that
449. th or short form test no matter how many questions you answer incorrectly The biggest difference between an adaptive test and a fixed length or short form test is that on a fixed length or short form test you can revisit questions after you ve read them over one or more times On an adaptive test you must answer the question when it s presented and will have no opportunities to revisit that question thereafter Strategies for Different Testing Formats Before you choose a test taking strategy you must know if your test is case study based fixed length short form or adaptive When you begin your exam you ll know right away if the test is based on case studies The interface will consist of a tabbed window that allows you to easily navigate through the sections of the case If you are taking a test that is not based on case studies the software will tell you that the test is adaptive if in fact the version you re taking is an adaptive test If your introductory materials fail to mention this you re probably taking a fixed length test 50 to 70 questions If the total number of questions involved is 25 to 30 you re taking a short form test Some tests announce themselves by indicating that they will start with a set of adaptive questions followed by fixed length questions You ll be able to tell for sure if you are taking an adaptive fixed length or short form test by the first question If it includes a checkbox that lets you m
450. that the mouse pointer is hovering over The nonmagnified area selects what needs to be magnified You can increase or decrease the magnification level and the size of the magnification MCP Exam 70270 Preparation doc 194 e On Screen Keyboard This tool displays a virtual keyboard on the Windows XP desktop Users use the mouse pointer to press the virtual keys They can also use a joystick with the on screen keyboard to select keys Utility Manager Utility Manager enables users to access these three accessibility tools from one central location You can also use Utility Manager to check the status and start or stop the tools An administrator can configure these tools to start when Windows XP starts Users who have administrator privileges can configure one two or all three of these accessibility tools to start whenever Utility Manager launches Users can also start these accessibility utilities before logging on to the computer by pressing the Windows key U at the Welcome screen Narrator the built in text to speech program starts when Utility Manager opens so that users who have impaired vision can obtain immediate access to Utility Manager Using Utility Manager you can tell Windows to automatically start accessibility programs each time you log on to your computer when you lock your computer desktop or when Utility Manager starts For example you can specify that Magnifier launches automatically every time that you log on to your sy
451. the data 2 Under Windows 2000 use the Disk Management console to convert the basic disks to dynamic disks 3 Upgrade the operating system to Windows XP Professional MCP Exam 70270 Preparation doc 262 Troubleshooting Disks and Volumes If a disk or volume fails naturally you want to repair it as soon as possible to avoid losing data The Disk Management snap in makes it easy to locate problems quickly In the Status column of the list view you can view the status of a disk or volume The status also appears in the graphical view of each disk or volume Diagnosing Problems To diagnose disk and or volume problems perform the following steps 1 Open Add Hardware in the Control Panel Click Next Windows XP tries to detect new Plug and Play devices 2 Click Yes Have Already Connected The Hardware and then click Next 3 Choose the device you want to diagnose and fix and then click Next 4 The wizard will inform you of the device s current status Click Finish to invoke the Hardware Troubleshooter as part of the Help and Support Center or click Cancel to exit the Add Hardware Wizard Another way to troubleshoot hardware problems is with Device Manager Right click the My Computer icon from the Start menu and select Properties Click the Hardware tab and then click the Device Manager button Expand the hardware category that you need to troubleshoot and right click the device that you want to inquire about Select Prope
452. the local computer using the IP address scheme of 169 254 x y with the subnet mask of 255 255 0 0 The Internet Assigned Numbers Authority IANA has reserved the IP address range of 169 254 0 0 through 169 254 255 255 for APIPA This ensures that any IP address that APIPA generates does not conflict with any public routable addresses This feature is turned on by default in Windows XP Professional e Serial Line Internet Protocol SLIP This specification is an older Unix standard for serial communications Windows XP supports SLIP for backward compatibility purposes You can use SLIP only for outbound connections on Windows XP Professional e Point to Point Protocol PPP PPP has effectively replaced SLIP PPP is a remote access dial up protocol that supports industry standard network protocols such as TCP IP NWLink NetBEUI and AppleTalk PPP is optimized for low bandwidth connections so it is the preferred remote access protocol for dial up modem connections e Point to Point Tunneling Protocol PPTP The only Virtual Private Network VPN protocol that shipped with Windows NT 4 PPTP encapsulates TCP IP Internet Protocol Exchange IPX or NetBEUI data packets and encrypts the data being transmitted as it is tunneled through the Internet PPTP clients can connect to any Microsoft compatible PPTP servers via the Internet with proper security credentials This service shipped with Windows XP Professional allows users to connect t
453. the wizard after it notifies you that your files and settings were transferred successfully 7 Click Yes to log off Log back on to have the new settings take effect MCP Exam 70270 Preparation doc 191 Accessibility Options Windows XP provides several options to make navigating and using the operating system easier You can enhance the interface and keyboard settings for users who have limited vision hearing or manual dexterity Accessibility Options Applet The Accessibility Options applet in the Control Panel contains several useful tabs Keyboard Sound Display General and Mouse Keyboard Tab Several options are available on the Keyboard tab to control repeat rate and key combinations StickyKeys Enables a user to press multiple keystrokes such as Ctrl Alt Delete by using one key at a time To enable this feature select the StickyKeys option in the Accessibility Options applet You can also enable it by pressing the Shift key five times At that point a dialog box appears it asks the user if this feature should be turned on Click OK to enable and close the dialog box In addition a StickyKeys icon appears in the system tray Double clicking this icon opens the Accessibility Options applet FilterKeys Enables you to control the keyboard repeat rate ignore repeated keystrokes and control the rate at which a key repeats the keystroke if a user holds it down You can apply granular settings to configure the repea
454. ther extension is valid but you will manually have to connect the file to the correct application when accessing it Answers b c and d are incorrect because these are not the correct extensions for the Remote Assistance files MCP Exam 70270 Preparation doc 322 Chapter 9 System Monitoring Performance Optimization and Recovery Features Terms you ll need to understand Windows XP Backup Normal Backup Differential Backup Incremental Backup System State Volume Shadow Copy Technology Advanced startup options Safe Mode Last Known Good Configuration Recovery Console System Restore Automated System Recovery ASR Counters Objects Sample or Update interval Baselining Paging file Techniques you ll need to master Backing up and restoring data Starting a Windows XP system in the appropriate Safe Mode Using the Last Known Good Configuration Installing and using the Recovery Console Using and configuring System Restore Using the Automated System Recovery ASR tool Creating restore points Using System Monitor Creating a log with Performance Logs and Alerts Setting performance alerts Viewing performance with Task Manager After a Windows XP system has been successfully installed configured and secured one of the major goals of a system administrator is to MCP Exam 70270 Preparation doc 323 ensure stable reliable and optimal performance Windows XP Professional offers more system troubleshooting
455. thin the Files and folders that are moved retain their same NTFS volume _ permissions from the source folder Moving to a different Files and folders that are moved inherit their NTFS volume permissions from the destination folder Copying within the Files and folders that are copied inherit their same NTFS volume permissions from the destination folder Copying to a different Files and folders that are copied inherit their NTFS volume permissions from the destination folder 3 From the Advanced Security Settings dialog box click the Effective Permissions tab 4 Click the Select button to choose a user or a group for which you want to display effective permissions Type in the user group or security principal name and click OK 5 View the effective permissions for the user group or security principal that you selected as shown in Figure 11 MCP Exam 70270 Preparation doc 97 Figure 11 The Effective Permissions tab displays effective NTFS security permissions for users and groups for specific folders and files Advanced Security Settings for WINDOWS Permissions Auditing Owner Effective Permissions The following Est displays the permissions that would be granted to the selected group or user based on all relevant permissions Group or user name Effective permissions E Full Control Traverse Folder Execute File List Folder Read Data E Read Attributes Read Extended Attrib
456. ticular crisis situation To select an advanced startup option press the F8 key during the Windows XP startup process The startup options definitely provide extra troubleshooting capabilities for your Windows XP machines The following sections describe the Windows Advanced Options Menu items that are available when you press the F8 key during startup for Windows XP Professional Safe Mode As previously mentioned this option loads only a minimal set of drivers and system services so that Windows XP can run in a very basic state User startup programs do not load automatically Safe Mode with Networking This option starts Windows XP using only Safe Mode drivers services and drivers required to enable network connections Logon scripts run security settings get applied and Group Policy settings get applied If you are confident that network issues are not the cause of your problem it can be useful to boot to this mode which enables you to connect to a remote system access installation files install service packs or back up data Safe Mode with Command Prompt This option uses the Safe Mode configuration but displays the command prompt instead of the Windows graphical user interface GUI after you log on successfully This is useful if you believe that a process spawned by the Explorer shell may be causing your problem Enable Boot Logging This option starts Windows XP and creates a log file that details all drivers and servi
457. ties the most from your IT investment Microsoft Training and B Worldwide Sites Site Map Services can provide you with the knowledge skills services B Contact Us and support to gain a competitive advantage From tramwng courses for becoming a Microsoft Cer rtified Professional MCP tc frameworks and custam tailored service angagements to help you plan prepare build and manage IT solutions Microsoft rerource rules aon Training and Services has the resources you need for persona and organizational success Gat the Latest ode sampin The MSON Tech Community offert there and many ether seluable lirimet Note This page might not be there by the time you read this or may be replaced by something new and different because things change regularly on the Microsoft site Should this happen please read the sidebar titled Coping with Change on the Web MCP Exam 70270 Preparation doc 28 Coping with Change on the Web Sooner or later all the information we ve shared with you about the Microsoft Certified Professional pages and the other Web based resources mentioned throughout the rest of this book will go stale or be replaced by newer information In some cases the URLs you find here might lead you to their replacements in other cases the URLs will go nowhere leaving you with the dreaded 404 File not found error message When that happens don t give up There s always a way to find what you want on the Web if you
458. ting to change its configuration to delete it or to stop or start scanning Figure 6 The General tab of an alert s Properties dialog box enables you to set counters and thresholds while the Action tab enables you to specify what actions should be taken when the alert conditions are met MCP Exam 70270 Preparation doc 349 General Action Schedule General Action Schedle This aiet scan begins immediately after you apply changes When an alert is triggered Cogmert 7 Log an entry in the application evert log Low Otek Space Aled Notification 2 Seqd a network message to Dan rfc Technology Patrers com F Sat performance data log System Overmew Ban this pogam _ Command Line Arguments Example command line arguments Yost 2001 12 19 13 18 45 265 eject Courter 20 O ower 10 0 Configuring Logs Logs collect and store performance counters data You can view logs by using System Monitor retrieve them in a spreadsheet such as Excel or import them into a database The following are the two types of logs e Counter logs Record data captured over a span of time and are useful for detecting trends setting baselines of performance and spotting performance bottlenecks Baselines are discussed later in this chapter e Trace logs Collect performance data when an event such as a process creation disk input output I O or page fault occurs Trace logs are useful for troubleshooting and debugging To creat
459. tings on share permissions Everyone Allow Full Control unless a share resides on a file allocation table FAT or FAT32 drive volume which provides no file system security In most circumstances you should store all data and applications on NT File System NTFS drive volumes In fact as a general rule you should format or convert all system drive volumes as NTFS With the availability of third party tools as well as the native Windows XP Recovery Console which permit command line access to NTFS drives even if the system won t boot it s difficult to argue against NTFS for all drives in Windows XP Microsoft has positioned the NTFS file system as the preferred file system for Windows XP by making features such as security permissions auditing data compression data encryption reparse points multiple named data streams and Volume Shadow Copy Technology available only on NTFS drive volumes Network share permissions have their roots back in the days of Windows for Workgroups 3 11 before Windows NT and NTFS Share permissions provided a way for administrators to control access to files for network users Only three permissions are available Full Control Change and Read These three permissions can be explicitly allowed or denied The default is Allow Full Control for the Everyone group For shared folders that reside on FAT or FAT32 drives share permissions do offer some degree of access control for network users However they provi
460. tion and select Properties 3 Click the Advanced tab 4 Click the Allow Other Network Users To Connect Through This Computer s Internet Connection checkbox After you have marked this checkbox the other settings for ICS become available 5 Select the Establish A Dial Up Connection Whenever A Computer On My Network Attempts To Access The Internet checkbox if you want this Internet connection to automatically dial and establish a connection to the Internet when another computer on the LAN attempts to access Internet resources through this computer 6 Click the Settings button On the Services tab you can mark the checkboxes for each Internet related service you want to enable for this shared connection You can also add services that are not currently listed by clicking the Add button 7 Click OK to close the Internet Connection Sharing Settings dialog box After you have set up ICS you should verify that the computer s IP address is now set to 192 168 0 1 with a subnet mask of 255 255 255 0 Test the local Internet connection to verify that the computer can connect to the Internet successfully For each Windows XP Professional computer on the LAN that wants to take advantage of the shared Internet connection perform the following steps 1 Click Start Control Panel Network Connections 2 Right click the LAN connection and select Properties 3 Click Internet Protocol and then click Properties 4 Configure TCP IP to obtain an I
461. tion log System log Security log DNS Server log and Directory log You must be a member of the Administrators group to use Eventriggers exe To view a current list of event triggers type eventtriggers without any parameters at a command prompt For more details on this tool search on the keyword eventtriggers in the Windows XP Professional Help and Support Center or type eventtriggers at a command prompt Practice Questions ae If your Windows XP system gets a stop error blue screen after you have installed an updated video driver MCP Exam 70270 Preparation doc 358 what is the best and most efficient course of action to take to get your system back up and running so that you can fix the problem a Restart the system using the Last Known Good Configuration advanced startup option b Restart the system using the Recovery Console c Perform a restore operation using the Automated System Recovery feature d Restart the system using the Enable VGA Mode advanced startup option A1 Answer d is correct Restarting the system under VGA mode would be the fastest and most efficient way to get back into the system and either roll back or uninstall the poorly behaving video driver Answer a is incorrect because the Last Known Good Configuration would also erase any other configuration changes that you might have made just prior to updating the video driver Answer b is incorrect because you do not need to boot into the R
462. tion to using backup media to store the operating system files settings and the System State data To create an ASR backup perform the following steps 1 Launch the Windows XP Backup program and use Advanced Mode 2 Click the Automated System Recovery Wizard button and click Next at the welcome screen 3 Select a backup media type and name and click Next 4 Click Finish to complete the wizard and begin the backup process and then follow the instructions on the screen Performing an ASR Restore The ASR restore process requires three critical components the bootable Windows XP Professional CD ROM your most recent ASR backup floppy disk and your system s most recent ASR backup media set usually stored on tape or other removable media To perform an ASR restore perform the following steps 1 Insert the Windows XP Professional CD ROM and restart the computer 2 Press a key when prompted to Press Any Key To Boot From CD as the computer starts 3 When prompted to invoke Automated System Recovery press the F2 key as the Windows Setup program loads 4 Insert your ASR floppy disk when prompted by Windows Setup MCP Exam 70270 Preparation doc 345 5 Insert your ASR backup media when prompted by Windows Setup 6 Specify a location for the systemroot folder for example C Windows 7 Follow the instructions on the screen to complete the process You should specify the same folder name for the systemroot
463. to Migrate User Settings and Files If you have decided to perform a fresh installation of Windows XP Professional you have made a good choice However you have also decided that the settings that were on the computer OS before will be lost or have you Windows 2000 launched with a tool that allowed administrators to copy user settings before the old OS was removed These settings were then reapplied to the new OS after installation The tool was the User State Migration Tool USMT Microsoft has included this tool with XP directly so that user settings can be gracefully migrated from one system to another The idea is to allow for fresh installations but also to achieve a lower TCO The following is a sampling of the different settings folders and file types that are transferred by default the settings are for both the OS and certain Microsoft applications Accessibility options e Fonts e Network printers and mapped network driver Browser and mail settings e Folder and taskbar options Mouse and keyboard options e Regional settings e Microsoft Office Outlook Word Excel PowerPoint settings e Stored mail and contacts Folders e My Documents My Pictures e Desktop e Favorites File types e CH3 CSV DIF DOC DOT DQY lQY MEW OQY POT PPA PPS PPT PRE RQY RTF SCD SH3 TXT WPD WPS WQ1 WRI XLS Files and Settings Transfer FAST Wizard The FAST Wizard is designed to accommodate the transfer of settings from a sin
464. to Windows XP The OS uses a set of legacy application database files both to alert users about compatibility issues when a legacy program is being installed and to support the proper functionality of legacy applications when they are used The Windows XP compatibility database files are as follows e MigDB inf Used to support migration from Windows 95 Windows 98 and Windows Me based systems This file contains matching information and flags applications that are incompatible or require user intervention prior to system upgrade e NTCompat inf Contains the same kinds of information as MigDB but is used to support upgrades from Windows NT 4 and Windows 2000 systems see Figure 12 Figure 12 The Program Compatibility Wizard 9 Help and Support Center DOR E gt A E index Favortes E2 History TH Support Qptions Search O 5 Help and Support Center Windows XP Professional Program Compatibility Wizard Select a compatibility mode for the program Choose the operating system that is recommended for this program or that previously supported the program correctly Microsoft Windows 9S Microsoft Windows NI 4 0 Service Pack 5 Microsoft Windows 98 Windows Me Microsoft Windows 2000 Qo not apply a compatiblity mode lt Back Next gt Cancel MCP Exam 70270 Preparation doc 176 SysMain sdb Contains both matching information and compatibility fixes It can be found in the Windir
465. to apply permissions and select Properties 2 Click the Security tab 3 If permissions are being inherited for the user and or group that you want to work with click the Advanced button and clear the checkbox labeled Inherit From Parent The Permission Entries That Apply To Child Objects Include These With Entries Explicitly Defined Here Click Copy or Remove for the inherited permission entries and click OK for the Advanced Security Settings dialog box 4 Ifthe user s or group s to which you want to assign permissions do not currently appear click the Add button 5 Type in the group s or user s that you want to assign permissions to from the Select Users Or Groups dialog box 6 Click OK 7 Click the Deny checkbox for each permission entry that you wish to explicitly disallow 8 Click OK to accept your settings If you deny the Read permission for a group on a particular folder any member of that group is denied the ability to read the contents of that folder When you assign Deny permissions for a user or a group on a file or folder as soon as you click OK in the Properties dialog box a Security message box shown in Figure 9 appears It reminds you that Deny permissions take precedence over Allow permissions Figure 9 A Security message box requests confirmation that you want to set a Deny permissions entry You are setting a deny permissions entry Deny entries take precedence over allow entries This means that f a
466. to successfully move the encrypted file to the PUBLIC DOCS unencrypted NTFS folder where it will lose its encryption attribute D Kim will successfully copy the encrypted file to a floppy disk where it will remain encrypted and he will successfully be able to move the encrypted file to the PUBLIC DOCS unencrypted NTFS folder Answer a is correct Only the user who originally encrypted the file or any users given shared access to the encrypted file may copy the file to a non NTFS drive volume or to any type of removable media In addition only the user who originally encrypted the file or any users given shared access to the encrypted file may copy the file or move it to a folder located on a different NTFS volume A user without shared access to an encrypted file is only permitted to move the file to another folder located on the same NTFS volume where the file remains encrypted Answer b is incorrect because although Kim will receive an error message when he attempts to copy the file to a floppy disk he will not receive an error message when he attempts to move the encrypted file to an unencrypted NTFS folder located on the same NTFS volume Answer c is incorrect because although Kim will receive an error message when he attempts to copy the file to a floppy disk he will be allowed to move the encrypted file to an unencrypted NTFS folder located on the same NTFS volume but the file will not lose its encryption attribute Answer d is inc
467. to the system both as an Interactive user and an Anonymous Logon User at the same time Dialup Any user accounts that are currently connected via dial up networking Remote Any user who logs on to the computer using a Remote Desktop Interactive Terminal Services client connection Logon Terminal Any user who accesses the computer using a Remote Desktop Server User Terminal Services client connection MCP Exam 70270 Preparation doc 82 NTFS Security Basic and Advanced Permissions NTFS security permissions can be assigned to both users and groups and are applied to resources such as folders files printers and other objects NTFS permissions are broken down into access control list ACL settings and access control entries ACEs The ACL details who user or group is granted access to an object ACEs detail the specific permission entries read write and so on for each specific object folder or file for example NTFS permissions for Windows XP can be very complex and granular when you use advanced permissions Basic permissions are much more simple they enable you to allow or deny access to resources based on six fundamental levels Read Read and Execute List Folder Contents applies to folders only Write Modify and Full Control Advanced or special permissions enable you to fine tune permission settings for allowing or denying such activities as reading or writing extended object attributes Basic NTFS P
468. together all disks that are part of a volume set or a stripe set If you move only some of the disks that are members of a volume set or stripe set you render the set unusable You may even damage the set and lose the data stored on the set if you do not move all the disks that make up the set You can also use the Diskpart exe command line tool to import disks Reactivating a Missing or Offline Disk A dynamic disk may become missing when it is corrupted powered down or disconnected Only dynamic disks can be reactivated not basic disks Sorry To reactivate a missing or offline disk perform the following steps 1 Open Disk Management 2 Right click the disk marked Missing or Offline and then click Reactivate Disk 3 The disk should be marked Online after the disk is reactivated MCP Exam 70270 Preparation doc 255 Basic Volumes Basic volumes include partitions and logical drives as well as volumes created using Windows NT 4 or earlier operating systems Before Windows 2000 basic disks contained all volume types basic volumes volume sets stripe sets mirror sets and stripe sets with parity also Known as RAID level 5 sets For Windows 2000 and Windows XP these volumes have been renamed to spanned volumes striped volumes mirrored volumes and RAID 5 volumes Under Windows XP you can create basic volumes on basic disks only In addition fault tolerant volumes mirrored volumes and RAID 5 volumes can only be created on dy
469. tructions may result in an unstable or unusable computer If you choose not to install one or more updates that have been downloaded to your PC Windows XP deletes those update files from your computer If you later decide that you want to install any of the updates that you have previously declined click the Restore Declined Updates button on the Automatic Updates tab If any of the previously declined updates still apply to your system Windows XP will display them the next time that the system notifies you of newly available updates MCP Exam 70270 Preparation doc 214 Manually Updating Drivers To update individual drivers perform the following steps 1 2 Right click My Computer from the Start menu or open the System icon from the Control Panel From the System Properties window click the Hardware tab and click the Device Manager button Perform one of these steps e Right click the device that you want to update select Update Driver from the pop up list and follow the on screen instructions e Right click the device that you want to update and select Properties from the pop up list Click the Update Driver button and follow the on screen instructions You can use the Driver Verifier utility to troubleshoot and isolate driver problems It is not enabled by default To use it you must enable it by running the Driver Verifier Manager part of Verifier exe by executing it from the GUI first or by changing a Registry settin
470. u need to reconfigure a service that is preventing your computer from starting properly You should try this option if the Last Known Good Configuration option is unsuccessful and you cannot start the system in Safe Mode Running the Recovery Console on a System that Will Not Start To run the Recovery Console on a system that will not start perform the following steps 1 Be sure that your computer is configured to boot from the CD ROM drive by selecting the proper options in the BIOS settings insert the Windows XP Professional Setup CD ROM into your CD ROM or DVD ROM drive 2 Restart your computer 3 Follow the directions on the screen you may need to press a key to boot from the CD It may take several minutes to load the files Choose the option to repair your Windows XP installation press R to start the Recovery Console If you have other installations of Windows XP or Windows 2000 on your computer the Recovery Console will prompt you to select which installation you want to work with 4 Type the Administrator password and press the Enter key when prompted MCP Exam 70270 Preparation doc 339 Before you encounter a system failure open a command prompt window in Windows XP and from the i386 folder on the Windows XP CD ROM or from a shared network installation folder enter the command winnt32 exe emdcons Doing so installs the Recovery Console on the local hard drive this requires 7MB of disk space and configures it
471. ult which will have the installation attempt to connect to the Internet or shared folder If Dynamic Updates need to be disabled for an unattended installation the DUDisable yes switch must be used This will typically be located in the answer file that is generated Creating a Network Share for Dynamic Updates Many compelling reasons exist to not want users accessing the Internet to download Windows Updates during the installation of the OS or even after the OS is installed One method to eliminate this access is to create a network share that contains the files and drivers that the administrator feels are important for the company environment MCP Exam 70270 Preparation doc 59 To create the shared folder the administrator first needs to access the corporate site for the Windows Update and download the essential files for the computers in the enterprise including updates and device drivers This establishes a controlled environment for these updates and device drivers ensuring that users cannot simply connect and download files that could cause compatibility issues After the files have been downloaded to the correct share point on the server the DUPrepare pathname switch needs to be used against the path to prepare it for delivery to the clients To point the installation either attended or unattended to this new share point add the DUShare pathname switch to the installation command or the answer file MCP Exam 70270 Preparation doc
472. unt lockout threshold is three a user can log on twice with the incorrect password After five minutes the counter is reset so the user can log on twice more A third invalid logon during a five minute period locks out the account Account lockout duration Specifies how long logon attempts are denied after a lockout During this period a logon with the locked out username is not authenticated MCP Exam 70270 Preparation doc 138 Audit Policies Audit policies specify what types of events are entered into the Security Log The most important policies to understand include those in the following list Logon events Authentication of users logging on or off locally and making connections to the computer from remote systems Account management Any change to account properties including password changes and additions deletions or modifications to users or groups Object access Access to objects on which auditing has been specified Auditing object access for example enables auditing of files and folders on an NT File System NTFS volume but you must also configure auditing on those files and folders Refer to Chapter Two for a detailed discussion of auditing Privilege use Use of any user rights now called privileges For example this policy audits a user who changes the system time because changing the system time is a privilege For each policy you can specify to audit successes failures or both As events are lo
473. ure Input Locales MCP Exam 70270 Preparation doc 168 Display Applet The Display applet has changed a bit from Windows 2000 You can now choose from five tabs to affect various aspects of the display Themes Enables the user to choose from various Windows XP desktop themes to customize the graphical user experience Themes comprise a background for the desktop plus a set of sounds icons and associated other elements that serve to personalize a Windows XP computer Desktop Enables the user to select a background wallpaper or a background color for the Windows XP desktop By clicking the Customize Desktop button you can choose which icons are displayed on the desktop the default is Recycle Bin only modify the graphic for each icon and run or schedule the Desktop Cleanup Wizard to move unused desktop items to a folder that you select Screen Saver Selects a screen saver but is also a shortcut to the Power Options applet The Power button on the Screen Saver tab enables you to adjust power schemes and configure Standby and Hibernate modes Appearance Adjusts the window and button styles along with the color and font schemes that are displayed in all dialog boxes and windows The Effects button gives the user the ability to turn on or off various effects such as menu and tooltip transitions menu shadowing and showing window contents while dragging The Advanced button enables you to highly customize the color and fonts for the
474. use Windows XP never prompts the user as to whether a folder or file should remain compressed or uncompressed Answer d is incorrect because Windows XP does not generate error messages for moving compressed files to an uncompressed folder MCP Exam 70270 Preparation doc 290 AQ Terry encrypts an NTFS folder named SECRET DOCS on the hard drive of a Windows XP Professional computer Terry is the only user with access to all the encrypted files in the SECRET DOCS folder except for the DRA Terry shares the computer with her associate Kim Kim is not the DRA Later Kim logs on to the same computer and attempts to copy one of the files stored inside of the SECRET DOCS folder named Salaries xls to a floppy disk in drive A After that Kim tries to move the same file to an unencrypted folder on the same NTFS drive volume named PUBLIC DOCS What are the results of Kim s file operations A Kim will receive an error message for trying to copy the encrypted file to a floppy disk but he will successfully be able to move the encrypted file to the PUBLIC DOCS unencrypted NTFS folder where the file will remain encrypted B Kim will receive an error message for trying to copy the encrypted file to a floppy disk and he will also receive an error message for attempting to move the encrypted file to the PUBLIC DOCS unencrypted NTFS folder C Kim will receive an error message for trying to copy the encrypted file to a floppy disk but he will be able
475. useful Processor counters are the following e Processor ProcessorTime threshold near 100 A processor being fully utilized 100 percent is not necessarily a sign of a performance bottleneck in fact one would hope that you would be using this expensive system component at its full capacity Therefore although ProcessorTime is a flag that indicates a potential bottleneck it is not in itself enough to prescribe a solution Check Memory Pages sec to examine paging and determine whether low memory is causing excessive paging e Processor Interrupts sec threshold varies A malfunctioning hardware device may send excessive interrupts to the processor Compare this counter to a baseline a significant increase in this counter without a corresponding increase in system activity may indicate a bad device Network cards are particularly notorious for generating bogus interrupts e System Processor Queue Length threshold 2 A queue length that is regularly above 2 indicates that threads are backing up as they wait for processor attention e Process ProcessorTime Instance each service or application This counter enumerates the activity of individual applications and services allowing you to identify processes that are placing demands on the processor If Processor Queue Length is low and ProcessorTime is averaging above 85 percent for extended periods of time these settings indicate that a single threaded application or service i
476. ut using a third party application Installing Configuring and Troubleshooting USB Devices Windows XP offers built in support for many Universal Serial Bus USB devices Because all USB devices fully support Plug and Play USB peripherals can be easily connected to and disconnected from Windows XP computers that have USB ports by using standard USB cables and connectors In theory USB devices can be safely connected and disconnected while the computer is running Windows XP detects USB devices when they are plugged into the PC and attempts to install the proper device driver for each detected USB device If MCP Exam 70270 Preparation doc 223 Windows XP cannot locate an appropriate device driver it will prompt you to insert a driver diskette or CD ROM from the manufacturer of the device Overview USB Controllers USB Hubs and Daisy Chaining USB Devices To support USB a computer needs either a USB host controller to be built into the motherboard or a USB controller add in adapter card to be installed The USB host controller directs all USB traffic and also serves as a hub that USB devices connect to Additional external USB hubs may be connected to enable multiple USB devices to be connected to the host controller also Known as the root hub Hubs are either self powered or bus powered Some devices like mice and keyboards can function fine when plugged into bus powered USB hubs Other devices such as external hard drives prin
477. uter and can work on the file just as if they were connected to the network Any offline files that have been changed on a local computer are synchronized with the network file server when the users reconnect to the network Setting Up Offline Files and Folders In Windows XP the Offline Files feature cannot be turned on if Fast User Switching is enabled as shown in Figure 2 You must go to User Accounts in the Windows XP Control Panel and choose the option Change The Way Users Log On Or Off After Fast User Switching has been disabled two steps are involved in configuring Offline Files The first is to configure the share point for offline usage The second is to cache the files to the client computer Figure 2 The Folder Options dialog box Folder Options General View IZA Use Offline Files to work with files and programs stored on the 4 Y network even when you are not connected Fast User Switching is enabled on this computer Offline Files cannot be enabled while Fast User Switching is enabled To change your Fast User Switching setting open User Accounts in Control Panel and select Change the way users log on or off MCP Exam 70270 Preparation doc 160 Configuring Share Points on a Windows 2000 Server or on a Windows NET Server Use the following steps to configure a network shared folder for Offline Files 1 2 3 Share the folder s that you want to make available offline From the Sharing tab select the
478. utes E Create Files Write Data Create Folders Append Data E Write Attributes Write Extended Attributes E Delete Subfolders and Files Delete Read Permissions E Change Permissions E Take Ownership Taking Ownership of Files and Folders A user who has ownership of a file or folder can transfer ownership of it to a different user or to a group Administrators can grant users the ability to take ownership of specified files and folders In addition administrators have the authority to take ownership of any file or folder for themselves Object ownership cannot be assigned to others a user must have permission to take ownership of an object Changing ownership of files and folders can become necessary when someone who is responsible for certain files and folders leaves an organization without granting any other users permissions to them To take ownership of a folder as an administrator follow these steps 1 Logon to the system as the administrator or an equivalent user 2 Right click the folder from Windows Explorer or My Computer and select Properties 3 Click the Security tab 4 Click the Advanced button MCP Exam 70270 Preparation doc 98 5 Click the Owner tab in the Advanced Security Settings dialog box 6 Click the name of the person in the Change Owner To section to change the folder s ownership 7 If you also want the ownership to change for the subfolders and files mark the Replace Owner On Subcontainers A
479. utton Click Next and then click a boldfaced date on the calendar boldfaced dates contain restore points More than one restore point may exist for a given date select the restore point that you want and then click Next Click Next again to confirm the restore point selected after you close all open applications Your Windows XP system will shut down and then restart using the configuration settings specified by the restore point that you chose Automated System Recovery The new Automated System Recovery ASR process replaces the MCP Exam 70270 Preparation doc 344 Emergency Repair Disk ERD used with Windows 2000 and Windows NT ASR is an advanced feature of the Windows XP Professional Backup tool NTBackup exe The aim of ASR is to get a Windows XP Professional system back up and running when other recovery tools like Safe Mode the Recovery Console or the Last Known Good Configuration won t work due to issues such as physical problems with a hard drive for example ASR is not for backing up or restoring data ASR actually formats the system drive volume the volume denoted by the systemdrive environment variable any data files present on this volume will be lost if an ASR restore is performed You should always attempt to restore the system using the System Restore feature before you decide to use ASR Creating an ASR Backup You use the Windows XP Backup program to create ASR backups One floppy disk is required in addi
480. ver give up The view from the peak is even more awe inspiring than the view from the lake One day you will reach your peak if you follow the right path and have the right self belief Nick Thorne Director of CTF Services MCP Exam 70270 Preparation doc 4 INTRODUCTION SELF ASSESSMENT Self Assessment will help you to evaluate your readiness for this MCSE certification namely Exam 70 270 Installing Configuring and Administering Microsoft Windows XP Professional It will also help you know what you need to master The Ideal Windows 2000 MCSE Candidate Here are some relevant statistics about the background and experience for an ideal MCSE candidate Don t worry if you don t meet these qualifications or don t come that close this is a far from ideal world and where you fall short is simply where you ll have more work to do Academic or professional training in network theory concepts and operations This includes everything from networking media and transmission techniques through network operating systems services and applications Three plus years of professional networking experience including experience with Ethernet Token Ring modems and other networking media This must include installation configuration upgrade and troubleshooting experience Two plus years in a networked environment that includes hands on experience with Windows 2000 Server Windows 2000 XP Professional Windows NT Server Window
481. volume to analyze disk read and write performance For Windows XP systems you no longer need to enable LogicalDisk counters with the Diskperf exe command so that you can monitor their performance with the System Monitor snap in LogicalDisk counters are automatically enabled on demand Diskperf exe is needed only for remote administration of computers running Windows NT and Windows 2000 The following disk counters will help you to monitor and manage disk performance e PhysicalDisk LogicalDisk DiskTime threshold close to 100 This reports the amount of time that a disk is busy servicing read or write requests e PhysicalDisk LogicalDisk Disk Queue Length threshold 2 The Average and Current disk queue length counters reflect the read write requests that are pending and being serviced If the queue Is long processes are being delayed When disk performance is a bottleneck you can add capacity replace disks with faster hardware move applications services or data to underused disks or implement spanned striped or RAID 5 volumes Managing Network Performance Although Windows NET Server and Windows 2000 Server can support Network Monitor for relatively sophisticated network traffic analysis Windows XP Professional has limited network performance tools Counters are available for the number of bytes and packets received and sent over a particular network interface However you cannot analyze the contents or properties
482. wo types of printer languages Print job The actual document to be printed along with the necessary print processing command Print resolution What determines the quality and smoothness of the text or images that the print device will render This specification is expressed in dots per inch dpi Higher dpi numbers generally result in better print quality Print spooler The process service that runs in the background of Windows XP that initiates processes and distributes print jobs The spooler saves print jobs into a temporary physical file on disk Print jobs are then despooled and transferred to the appropriate print device Print queue A logical waiting area where print jobs are temporarily stored until the print device is available and ready to process each job according to the job s priority level and according to its order within the queue MCP Exam 70270 Preparation doc 111 Connecting to Local and Network Printers After you add a local printer to a Windows XP Professional computer you have the option of sharing it with other users on the network To add a local printer to your system perform these steps 1 2 3 10 11 12 13 14 15 16 Log on as an administrator or a member of the Administrators group Click Start Printers And Faxes to open the Printers And Faxes window Click the Add A Printer link from the Printer Tasks pane The Add Printer Wizard appears Click Next to continue Cl
483. word length 8 characters O characters gj Local Pokies Event Log LD Restricted Groups Srem Services E QI Regstry rs 3 File System BM Pesoword must meet complexity re Enabled Dieabled PA Store password using reversible e Disabled Disabled MCP Exam 70270 Preparation doc 143 Security Templates Multiple security templates are available that can be used to analyze your computers security settings Some are related to the security levels of the system and others are related to compatibility of a system with legacy applications Here is a listing of the different types of security templates that are available Basicwk inf This template contains the default settings for a typical installation of Windows XP Professional Securews in This template is designed to boost the security of a Windows XP system with regard to Auditing Account Policy and some well known Registry subkeys Hisecws in The settings in this security template will significantly increase the security of the system You should use this template with caution because the settings might cause the computer to drop communication with the network due to the lack of security on other computers on the network Compatws inf This template is designed to reduce the security settings on your computer basically the Users group so that they can run legacy applications more easily MCP Exam 70270 Preparation doc 144 Software Restriction
484. work Places Yes that is correct Offline files maintain their original location even though the computer is offline Go to My Network Places and select the file server that contains the files You can see only the files that you made available while offline Users don t see the network while they are offline see Figure 5 Figure 5 The Offline Files tab of the Folder Options dialog box from a Windows Terminal Server computer Folder Options Comments Fa Eg General View File Types n EAA Use Offline Files to work with files and programs stored on the 1Y network even when you are not connected Windows Terminal Server is configured to suppport multiple connections Offline Files cannot be enabled with Terminal Server in this configuration Cancel MCP Exam 70270 Preparation doc 164 Under the Windows 2000 Server and Windows NET Server family of network operating systems when used as a workstation the Offline Files feature is not available if the server has Terminal Services installed This holds true whether you are working directly from the console of the Terminal Server or through a Terminal Services session However clients can still connect to any Terminal Server and make the files stored on that server available offline from their local workstations Synchronizing Offline Files and Folders After you have worked on one or more offline files while you have been away or disconnected from your network you can
485. ws 95 98 NT 4 2000 Intemet This connection uses the following items Ta Intemet Protocol TCP IP w QoS Packet Scheduler o B File and Printer Sharing for Microsoft Networks E Client for Microsoft Networks Description Transmission Control Protocol Internet Protocol The default wide area network protocol that provides communication across diverse interconnected networks MCP Exam 70270 Preparation doc 373 Enable software compression C Negotiate multi link for single link connections Setting Up and Configuring VPN Connections Setting up and configuring VPN connections is similar to establishing dial up connections VPN connections enable you to connect to remote computers anywhere in the world by tunneling through the Internet using a VPN protocol such as PPTP or L2TP VPN protocols encapsulate TCP IP NetBEUI or NWLink data packets for transport over TCP IP via the Internet PPTP and L2TP use encryption to secure all the data that they encapsulate as it travels to the destination VPN server When you double click the Virtual Private Connection icon to access a VPN server you are prompted to connect to the Internet using the dial up connection you specified After you have established a connection to the Internet Windows XP Professional attempts to connect to the remote VPN server MCP Exam 70270 Preparation doc 374 Configuring Internet Connection Firewall Internet Connection Firewall ICF is an excel
486. ws XP Recovery Console by booting from the Windows XP Professional CD ROM and selecting the repair option or by first installing the Recovery Console onto your system using the winnt32 exe cmdcons command and then you can restart the system select Recovery Console as an advanced startup option Answer a is incorrect because the Recovery Console is not a default startup option you must manually install it first Answer d is incorrect because there is no Safe Mode Using Recovery Console advanced startup option 5 After making several configuration settings changes Edie wants to restore her Windows XP Professional system to the configuration that it had yesterday before she made any changes Unfortunately she forgot to set any restore points Her computer has been left powered on in her office for the last week Can she restore her system to its previous state and if so using which technology MCP Exam 70270 Preparation doc 361 a Yes she can use the System Restore Wizard to restore her system b No she can t restore her system to its previous state from yesterday but she can restore it to its original state when it was first installed using the System Restore Wizard c Yes she can easily restore her system to its previous state using the Last Known Good Configuration d Yes she can restore her system s configuration using the Windows XP Professional CD ROM an ASR floppy disk and the ASR tape backup that she created from th
487. ws XP print server configuration settings By right clicking one of the available printer icons in the Printers And Faxes folder and choosing Properties you can configure that printer s settings and options The printer Properties dialog box contains six tabs seven tabs for a color printer General Sharing Ports Advanced Security Device Settings and Color Management for a color printer The General Tab From the General tab you can work with the following settings e Add or modify printer location and comment information e Set printing preferences such as portrait or landscape orientation Select paper source and quality Print a test page MCP Exam 70270 Preparation doc 114 The Sharing Tab The Sharing tab displays the following options e Share the printer change the network share name or stop sharing the printer e Install additional printer drivers for client computers that use different operating systems or different Windows NT CPU platforms Windows XP print server computers automatically download the correct printer drivers for client computers running Windows 95 Windows 98 Me Windows NT Windows 2000 and Windows XP that connect to the print server as long as the correct drivers have been installed on the print server The Ports Tab On the Ports tab you have these configuration options e Select a port to print to e Add configure and delete ports e Enable bidirectional printing support e Enable printe
488. ws denies the ability to read write delete modify and read permissions for the folder Read amp Execute Allows denies specified users and groups the ability to traverse the folder execute files within the folder list its contents read its contents read its attributes and extended attributes and read its permissions List Folder Allows denies essentially the same permissions as Read amp Contents Execute Allows denies the ability to display files and subfolders but this permission does not affect a user s ability to run execute an application program as the Read amp Execute permission does Allows denies the same permissions as List Folder Contents except for Traverse Folder and Execute File Allows denies the ability to create files and write data create folders and append data and write attributes and extended attributes The List Folder Contents permission is inherited by folders but not by files and it should appear only when you view folder permissions Read amp Execute is inherited by both files and folders and is always present when you view file or folder permissions By default NTFS security permissions are inherited from an object s parent An administrator can manually override the default inheritance and can explicitly configure permission settings Advanced NTFS Permissions NTFS advanced permissions are the building blocks for basic permissions In Windows XP advanced permissions
489. y have really changed the way that Windows is configured and used We recommend that you find out as much as you can about Active Directory and ac quire as much experience using this technology as possible The time you take learning about Active Directory will be time very well spent Fundamentally this boils down to a bachelor s degree in computer science plus three years experience working in a position involving network design installation configuration and maintenance We believe that well under half of all certification candidates meet these requirements and that in fact most meet less than half of these requirements at least when they begin the certification process But because all the people who already have been certified have survived this ordeal you can survive it too especially if you heed what our Self Assessment can tell you about what you already know and what you need to learn When it comes to assessing your test readiness there is no better way than to take a good quality practice exam and pass with a score of 70 percent or better When we re preparing ourselves we shoot for 80 plus percent just to leave room for the weirdness factor that some times shows up on Microsoft exams Assessing Readiness for Exam 70 270 You can also cruise the Web looking for braindumps recollections of test topics and experiences recorded by others to help you anticipate topics you re likely to encounter on the test The MCSE
490. y access the encrypted file similar to Figure 11 MCP Exam 70270 Preparation doc 283 Figure 11 The Encryption Details dialog box enables you to view add and remove users who can access the encrypted file Encryption Details for C EFS_TestNdp doc Users Who Can Transparently Access This File User Name Certificate Thumbprint Alexis Alexis 7800XP 1 4BE6 2103 5CF6 124F C5EB 91CD 7F7B 732AC Brendan Brendan 7800XP1 A67B EC6F 56F3 0AC9 EB6B F3CC 603D BOF1 Dan Dan 7800XP 1 EBDB 463A EE6A CO0A 6B70 3FD4 8B3E 1879 Data Recovery Agents For This File As Defined By Recovery Policy Recovery Agent Name Certificate Thumbprint 7 Click OK to close the Advanced Attributes dialog box and then click OK again to close the encrypted file s Properties dialog box MCP Exam 70270 Preparation doc 284 Practice Questions 1 Brendan wants to convert one of the hard drives connected to his Windows XP Professional desktop computer from a basic disk to a dynamic disk In the Disk Management console he right clicks the physical disk designated as Disk 1 but the option to Convert To Dynamic Disk is unavailable Why would the option to convert the drive to a dynamic disk be disabled A There are already drive volumes with data stored on that physical disk B The drive is an external drive connected via USB or IEEE 1394 bus connections C The drive is an external Fibre Channel device D The drive has a sector
491. y and analyze material that is not completely relevant When studying a case carefully read the tabbed information It is important to answer each and every question You will be able to toggle back and forth from case to questions and from question to question within a case testlet However once you leave the case and move on you may not be able to return to it You may want to take notes while reading useful information so you can refer to them when you tackle the test questions It s hard to go wrong with this strategy when taking any kind of Microsoft certification test The Fixed Length and Short Form Exam Strategy A well known principle when taking fixed length or short form exams is to first read over the entire exam from start to finish while answering only those questions you feel absolutely sure of On subsequent passes you can dive into more complex questions more deeply knowing how many such questions you have left Fortunately the Microsoft exam software for fixed length and short form tests makes the multiple visit approach easy to implement At the top left corner of each question is a checkbox that permits you to mark that question for a later visit Note Marking questions makes review easier but you can return to any question by clicking the Forward or Back button repeatedly As you read each question if you answer only those you re sure of and mark for review those that you re not sure of you can keep working thr
492. y principal not a Local group How can you determine the actual effective NTFS permissions on a file or a folder for a user or a group with the least amount of administrative effort A Log on as the specific user and test the user s permissions by attempting to read write modify delete change permissions and take ownership of specific files and folders B Log on as an administrative user right click a folder or file in question choose Properties click Security click the Advanced button and click the Effective Permissions tab Select a user or group to view the effective permissions for that user or group on the specific file or folder C Open the Computer Management Console click Shared Folders and then click Effective Permissions D Open the Control Panel and double click Component Services Right click the NTFS Permissions node and select Effective Permissions Answer b is correct The Effective Permissions tab is a new feature in Windows XP Professional Answer a is incorrect because it requires more administrative effort than using the Effective Permissions tab Answer c is incorrect because no Effective Permissions tab exists for the Shared Folders snap in Answer d is incorrect because no Effective Permissions feature exists in the Component Services snap in MCP Exam 70270 Preparation doc 120 6 If you use Windows Explorer to move seven subfolders containing 152 files from e docs to e letters on Server what will
493. y use the Windows Update feature Answer a is incorrect because this option is a manual process Answer c is incorrect because this option is available only during the installation of the product Answer d is incorrect because the dushare switch is used with Dynamic Update and is available only during the installation of the product 8 You are the network administrator in charge of the Windows XP Professional rollout for your company You have been planning for your 1 500 user rollout for the past three months You have a Windows 2000 Active Directory based domain and only two locations You have eight phases to your overall deployment plan which will last for two months You are halfway through the phases when trouble hits You have users complaining that they can no longer access their Windows XP Professional computer What should you do a Have the user restart their computer and press F12 b Activate the Windows XP Professional computers c Boot the computers to the Recovery Console d Boot the computers and press F8 Answer Answer b is correct If you are installing your Windows XP Professional computers from a nonvolume license CD you need to activate your computers This requires that the computer communicate with the clearinghouse located on the Internet or via a phone call to the clearinghouse to activate the installation of XP By default you have 30 days to use the product before it will become inoperable from not hav
494. you Typically the room will be furnished with anywhere from one to six computers and each workstation will be separated from the others by dividers designed to keep you from seeing what s happening on someone else s computer Most test rooms feature a wall with a large picture window This permits the exam coordinator to monitor the room to prevent exam takers from talking to one another and to observe anything out of the ordinary that might go on The exam coordinator will have preloaded the appropriate Microsoft certification exam for this book that s Exam 70 270 and you ll be permitted to start as soon as you re seated in front of the computer All Microsoft certification exams allow a certain maximum amount of time in which to complete your work this time is indicated on the exam by an on screen counter clock so you can check the time remaining whenever you like All Microsoft certification exams are computer generated In addition to multiple choice you ll encounter select and place drag and drop create a tree categorization and prioritization drag and connect and build list and reorder list prioritization on most exams Although this may sound quite simple the questions are constructed not only to check your mastery of basic facts and figures about Windows XP Professional but also to require you to evaluate one or more sets of circumstances or requirements Often you ll be asked to give more than one answer to a question
495. you want to change to a dynamic disk and then click Convert To Dynamic Disk When you upgrade a basic disk to a dynamic disk you do not need to reboot However if you do upgrade your startup disk or upgrade a volume or partition you must restart your computer for the change to take effect The good news is that you do not need to select a special command like Commit Changes Now before restarting your computer or closing the Disk Management tool To change or convert a basic disk to a dynamic disk from the Windows XP command line perform these steps 1 Open a command prompt window type diskpart and press Enter 2 Type commands or help to view a list of available commands 3 Type select disk 0 to select the first hard disk select disk 1 to select the second hard disk and so on and press Enter 4 Type convert dynamic and press Enter 5 Type exit to quit the Diskpart exe tool and then restart the computer to have the new configuration take effect see Figure 1 MCP Exam 70270 Preparation doc 252 Figure 1 Using the Diskpart exe command line utility to convert from a basic disk to a dynamic disk lt F WINDOWS System32 cmd exe cmd cmd cmd diskpart lof x gt diskpart icrosoft DiskPart version 1 6 opyright lt C gt 1999 2801 Microsoft Corporation computer DELLXP ISKPART gt select disk isk O is now the selected disk ISKPART gt convert dynamic ou must reboot you
496. ysprep unattended installation using an answer file Remote Installation Services RIS using a CD image RIS CD image unattended installation using an answer file RIS Riprep image e RIS Riprep image unattended installation using an answer file CD ROM Installation One of the easiest methods for installing Windows XP Professional is simply to put the Windows XP Professional CD ROM in the computer and boot the computer The computer boots from the CD ROM and starts the first phase of the installation copying the installation files to the local hard drive Then the computer reboots and starts the graphical user interface GUI phase of the installation You can install Windows XP Professional in this fashion if your computer s BIOS supports the option to boot from a CD ROM drive and the system has El Torito No Emulation support for bootable CD ROMs The El Torito No Emulation is the standard for bootable CD ROM support This form of installation is an attended installation of Windows XP Professional that requires someone to sit in front of the target computer and answer all the installation prompts such as the End User License Agreement EULA Before you start the installation process you need to ensure that the computer meets the minimum hardware requirements of Windows XP Professional Unlike Windows NT Windows XP supports only Intel based computers MCP Exam 70270 Preparation doc 37 Installing Over a Network Another installat
497. zard enables you to create a Password Reset Disk to help you open your account and create a new password The Password Reset Wizard also enables you to change your password To protect user accounts in the event that the user forgets the password every local user can make a Password Reset Disk and keep it in a safe place Then if the user forgets his or her password the password can be reset using the Password Reset Disk enabling the user to access the local user account again Table 1 Account types Function Limited Administrator Create shares Create printers x Install software X Create other accounts X Change network settings X Change passwords X X Change account picture x x Set up NET Passport X X Access programs X X Change background Ix x Request Remote Assistance IX Ix MCP Exam 70270 Preparation doc 131 If you already made a Password Reset Disk for your local user account through the Forgotten Password Wizard you can use it to access the computer even if you have forgotten your password Fast User Switching Fast User Switching is another new feature of Windows XP Professional Don t be fooled with this option though because it is available only when the computer is in a workgroup not joined to a domain This function makes it possible for users to switch quickly between other users without actually logging off from the computer Multiple users can share a computer and use it simultane

MCP EXAM 70-270 PREPARATION.

Contents

Download Pdf Manuals

Related Search

Related Contents