Windows User Account Control & MMC Overview

Podcast Beta

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the primary purpose of the Microsoft Management Console (MMC)?

To customize the Windows operating system settings.

To manage applications directly installed on the computer.

To optimize hardware performance without user intervention.

To provide a unified interface for various management tools. (correct)

Which of the following Snap-ins should you add to create a custom MMC for this lab?

Windows Firewall

Task Scheduler

Network and Sharing Center

Group Policy Object Editor (correct)

What is the default User Account Control (UAC) setting as mentioned in the lab?

Never notify me about any changes.

Notify me when I make changes to Windows settings.

Notify me only when apps try to make changes to my computer. (correct)

Always notify me when changes are made.

Where can UAC configuration be accessed in the system?

Via Gpedit.msc under Local Policies. Signup and view all the answers

What is the function of the RunAs command in context with UAC?

To run applications with different user permissions. Signup and view all the answers

What happens to the behavior of the elevation prompt for administrators when the UAC setting is changed to Never Notify?

It elevates without prompting. Signup and view all the answers

What is the function of running all administrators in Admin Approval Mode?

It requires approval for administrative tasks. Signup and view all the answers

What will be the outcome when User215 tries to access the C:\SECURE APP\calc.exe file?

User215 will receive a permission denied error. Signup and view all the answers

Which security setting is associated with the Switch to the secure desktop when prompting for elevation in the Group Policy default settings?

Enabled Signup and view all the answers

If you need the student administrator account to enter credentials every time the UAC is presented, what policy must be set in Group Policy?

Prompt for credentials Signup and view all the answers

What command can be used to run calc.exe with Student User Account permissions while logged in as User215?

RUNAS /USER:PLOY STUDENT C:\SECURE APP\calc.exe Signup and view all the answers

What effect does changing the UAC setting to Never Notify have on the secure desktop during prompt elevation?

It is disabled. Signup and view all the answers

Why is the Interactive Logon message not present in Users Configuration?

It is a computer policy that applies to all users. Signup and view all the answers

Which of these is true regarding the virtualization of file and registry write failures?

It is enabled in both UAC settings. Signup and view all the answers

Which command is used to speed up the application of Group Policy settings?

GPUPDATE /FORCE Signup and view all the answers

What is the primary function of Group Policy within a network?

To manage the computers and users in a secure network. Signup and view all the answers

What does enabling the detection of application installations and prompting for elevation do?

It prompts for credentials before every installation. Signup and view all the answers

What does the Interactive Logon message imply for users who log on?

It serves as a legal agreement regarding acceptable use of company resources. Signup and view all the answers

Which behavior is expected for standard users in Admin Approval Mode?

Prompt for credentials. Signup and view all the answers

In what folder path will calc.exe be stored after the copy operation?

C:\SECURE APP\ Signup and view all the answers

What action is taken to deny User215 access to the calc.exe file?

Denying all permissions for User215 in file properties. Signup and view all the answers

What policy must be applied to restrict access to the command prompt for users?

Prevent access to the command prompt Signup and view all the answers

What happens to a standard user after the command prompt has been disabled?

The command prompt has been disabled Signup and view all the answers

How can a custom MMC be created to target a specific user?

Use the Microsoft Management Console and browse to the users tab Signup and view all the answers

What is the outcome of prohibiting access to the Control Panel for the KIOSK user?

Access to Control Panel is blocked for the KIOSK user Signup and view all the answers

What program is set to run at user logon for KIOSK user?

Remote Desktop program (MSTSC.EXE) Signup and view all the answers

What should be done to prevent the installation or removal of programs for the KIOSK user?

Hide the Programs Control Panel Signup and view all the answers

Why does the custom MMC only display USER CONFIGURATION?

It is a MMC targeted at a user Signup and view all the answers

What is the impact of applying a Group Policy targeted at users when operating on a single workstation?

It applies to all users on the computer Signup and view all the answers

What is a key security benefit of enabling the policy to not display the username at sign-in?

It prevents unauthorized access to the last user’s login information. Signup and view all the answers

Which user groups are allowed to shut down the system by default according to the policy?

Administrators, Backup Operators, and Users. Signup and view all the answers

What happens to standard user accounts when USERS are removed from the system shutdown policy?

They will only have sign-out as an option. Signup and view all the answers

What effect does disabling the 'Show first sign-in animation' policy have on new users?

New users will not see the new user sign-in animation. Signup and view all the answers

What is a reason for utilizing the Filtering Tools in Administrative Templates?

To search for and apply settings more effectively. Signup and view all the answers

In which location can the policy to disable the Display Control Panel be found?

USER → ADMIN TEMPLATES → CONTROL PANEL → DISPLAY Signup and view all the answers

After altering security settings, what command is needed to make the policy changes take effect?

GPUPDATE/FORCE + LOG OFF Signup and view all the answers

What is the primary function of Administrative Templates within Group Policy?

To govern other settings that may change with software versions or manual imports. Signup and view all the answers

Study Notes

Microsoft Management Console (MMC)

MMC is a “toolkit” that gives access to existing management tools.
Open tools from the command line or MMC.
Create a custom MMC with the most used tools.

User Account Control (UAC)

UAC sets how much prompting you get from Windows when changes are made to the system.
UAC settings can be different for Administrators and Standard Users.
Default UAC setting is "Notify me only when apps try to make changes to my computer."
UAC settings can be changed using Group Policy.

UAC Settings in Group Policy

Admin Approval Mode for the Built-In Administrator account - NOT DEFINED by default
Behavior of the elevation prompt for administrators in Admin Approval - PROMPT FOR CONSENT by default
Behavior of the elevation prompt for standard users - PROMPT FOR CREDENTIALS by default
Detect application installations and prompt for elevation - ENABLED by default
Run all administrators in Admin Approval Mode - ENABLED by default
Switch to the secure desktop when prompting for elevation - ENABLED by default
Virtualize file and registry write failures to per-user locations - ENABLED by default

RunAs

Allows running an application with permissions from another user.
Useful for testing Standard User Account permissions or making changes for a Standard User Account with Administrator permissions.
RunAs Command: / USER: username application

Group Policy

Used to manage computers and users in a Domain.
Apply policies by using gpedit.msc or GPUPDATE /FORCE
Group Policy categorized into Software Settings and Windows Settings.

Software Settings

Used for software installation and removal.
Targets Computers or Users.
Not searchable.

Windows Settings

Used for security settings.
Targets Computers or Users.
Not searchable.

Adminstrative Templates

Used for controlling all other settings.
Target Computers or Users.
Searchable.

Policy Examples

Interactive Logon: Message title for users attempting to log on - sets a customized message for users when logging on.
Interactive Logon: Message test for users attempting to log on - displays a legal notice when users log in to the computer.
Interactive Logon: Don't display username at sign-in - hides the username of the previous user at login.
Shut down the system - determines who is allowed to shut down the system.
Show first sign-in animation - controls the display of the initial sign-in animation for new users.

Adminstrative Template Search Filters

Managed - Setting is removed, Setting is not removed.
Configured - Policy is enabled or disabled, not configured.
Commented - Administrator comments, no comments.
Filter for word(s) - Target specific technologies.
Enable Requirements Filters

Custom MMC for Single User Policy

Create a custom MMC with the Group Policy tool pointed at a single user to apply policies to that user.
Use the MMC to manage user specific settings, especially to apply policies specific to a KIOSK user or other public user accounts.

KIOSK User Policies

Prohibit access to the Control Panel and PC Settings - Disables access to the Control Panel for the KIOSK user.
Run these programs at user logon - Automatically launches the Remote Desktop program when the KIOSK user logs in.
Hide the Programs Control Panel - Blocks KIOSK user from installing or removing programs.

Studying That Suits You

Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

Description

Explore the functionalities of Microsoft Management Console (MMC) and the User Account Control (UAC) in Windows. Understand how to customize MMC with essential tools and configure UAC settings for different users. This quiz will test your knowledge on these crucial Windows features.