Windows User Account Control & MMC Overview
37 Questions
0 Views

Choose a study mode

Play Quiz
Study Flashcards
Spaced Repetition
Chat to lesson

Podcast

Play an AI-generated podcast conversation about this lesson

Questions and Answers

What is the primary purpose of the Microsoft Management Console (MMC)?

  • To customize the Windows operating system settings.
  • To manage applications directly installed on the computer.
  • To optimize hardware performance without user intervention.
  • To provide a unified interface for various management tools. (correct)
  • Which of the following Snap-ins should you add to create a custom MMC for this lab?

  • Windows Firewall
  • Task Scheduler
  • Network and Sharing Center
  • Group Policy Object Editor (correct)
  • What is the default User Account Control (UAC) setting as mentioned in the lab?

  • Never notify me about any changes.
  • Notify me when I make changes to Windows settings.
  • Notify me only when apps try to make changes to my computer. (correct)
  • Always notify me when changes are made.
  • Where can UAC configuration be accessed in the system?

    <p>Via Gpedit.msc under Local Policies.</p> Signup and view all the answers

    What is the function of the RunAs command in context with UAC?

    <p>To run applications with different user permissions.</p> Signup and view all the answers

    What happens to the behavior of the elevation prompt for administrators when the UAC setting is changed to Never Notify?

    <p>It elevates without prompting.</p> Signup and view all the answers

    What is the function of running all administrators in Admin Approval Mode?

    <p>It requires approval for administrative tasks.</p> Signup and view all the answers

    What will be the outcome when User215 tries to access the C:\SECURE APP\calc.exe file?

    <p>User215 will receive a permission denied error.</p> Signup and view all the answers

    Which security setting is associated with the Switch to the secure desktop when prompting for elevation in the Group Policy default settings?

    <p>Enabled</p> Signup and view all the answers

    If you need the student administrator account to enter credentials every time the UAC is presented, what policy must be set in Group Policy?

    <p>Prompt for credentials</p> Signup and view all the answers

    What command can be used to run calc.exe with Student User Account permissions while logged in as User215?

    <p>RUNAS /USER:PLOY STUDENT C:\SECURE APP\calc.exe</p> Signup and view all the answers

    What effect does changing the UAC setting to Never Notify have on the secure desktop during prompt elevation?

    <p>It is disabled.</p> Signup and view all the answers

    Why is the Interactive Logon message not present in Users Configuration?

    <p>It is a computer policy that applies to all users.</p> Signup and view all the answers

    Which of these is true regarding the virtualization of file and registry write failures?

    <p>It is enabled in both UAC settings.</p> Signup and view all the answers

    Which command is used to speed up the application of Group Policy settings?

    <p>GPUPDATE /FORCE</p> Signup and view all the answers

    What is the primary function of Group Policy within a network?

    <p>To manage the computers and users in a secure network.</p> Signup and view all the answers

    What does enabling the detection of application installations and prompting for elevation do?

    <p>It prompts for credentials before every installation.</p> Signup and view all the answers

    What does the Interactive Logon message imply for users who log on?

    <p>It serves as a legal agreement regarding acceptable use of company resources.</p> Signup and view all the answers

    Which behavior is expected for standard users in Admin Approval Mode?

    <p>Prompt for credentials.</p> Signup and view all the answers

    In what folder path will calc.exe be stored after the copy operation?

    <p>C:\SECURE APP\</p> Signup and view all the answers

    What action is taken to deny User215 access to the calc.exe file?

    <p>Denying all permissions for User215 in file properties.</p> Signup and view all the answers

    What policy must be applied to restrict access to the command prompt for users?

    <p>Prevent access to the command prompt</p> Signup and view all the answers

    What happens to a standard user after the command prompt has been disabled?

    <p>The command prompt has been disabled</p> Signup and view all the answers

    How can a custom MMC be created to target a specific user?

    <p>Use the Microsoft Management Console and browse to the users tab</p> Signup and view all the answers

    What is the outcome of prohibiting access to the Control Panel for the KIOSK user?

    <p>Access to Control Panel is blocked for the KIOSK user</p> Signup and view all the answers

    What program is set to run at user logon for KIOSK user?

    <p>Remote Desktop program (MSTSC.EXE)</p> Signup and view all the answers

    What should be done to prevent the installation or removal of programs for the KIOSK user?

    <p>Hide the Programs Control Panel</p> Signup and view all the answers

    Why does the custom MMC only display USER CONFIGURATION?

    <p>It is a MMC targeted at a user</p> Signup and view all the answers

    What is the impact of applying a Group Policy targeted at users when operating on a single workstation?

    <p>It applies to all users on the computer</p> Signup and view all the answers

    What is a key security benefit of enabling the policy to not display the username at sign-in?

    <p>It prevents unauthorized access to the last user’s login information.</p> Signup and view all the answers

    Which user groups are allowed to shut down the system by default according to the policy?

    <p>Administrators, Backup Operators, and Users.</p> Signup and view all the answers

    What happens to standard user accounts when USERS are removed from the system shutdown policy?

    <p>They will only have sign-out as an option.</p> Signup and view all the answers

    What effect does disabling the 'Show first sign-in animation' policy have on new users?

    <p>New users will not see the new user sign-in animation.</p> Signup and view all the answers

    What is a reason for utilizing the Filtering Tools in Administrative Templates?

    <p>To search for and apply settings more effectively.</p> Signup and view all the answers

    In which location can the policy to disable the Display Control Panel be found?

    <p>USER → ADMIN TEMPLATES → CONTROL PANEL → DISPLAY</p> Signup and view all the answers

    After altering security settings, what command is needed to make the policy changes take effect?

    <p>GPUPDATE/FORCE + LOG OFF</p> Signup and view all the answers

    What is the primary function of Administrative Templates within Group Policy?

    <p>To govern other settings that may change with software versions or manual imports.</p> Signup and view all the answers

    Study Notes

    Microsoft Management Console (MMC)

    • MMC is a “toolkit” that gives access to existing management tools.
    • Open tools from the command line or MMC.
    • Create a custom MMC with the most used tools.

    User Account Control (UAC)

    • UAC sets how much prompting you get from Windows when changes are made to the system.
    • UAC settings can be different for Administrators and Standard Users.
    • Default UAC setting is "Notify me only when apps try to make changes to my computer."
    • UAC settings can be changed using Group Policy.

    UAC Settings in Group Policy

    • Admin Approval Mode for the Built-In Administrator account - NOT DEFINED by default
    • Behavior of the elevation prompt for administrators in Admin Approval - PROMPT FOR CONSENT by default
    • Behavior of the elevation prompt for standard users - PROMPT FOR CREDENTIALS by default
    • Detect application installations and prompt for elevation - ENABLED by default
    • Run all administrators in Admin Approval Mode - ENABLED by default
    • Switch to the secure desktop when prompting for elevation - ENABLED by default
    • Virtualize file and registry write failures to per-user locations - ENABLED by default

    RunAs

    • Allows running an application with permissions from another user.
    • Useful for testing Standard User Account permissions or making changes for a Standard User Account with Administrator permissions.
    • RunAs Command: / USER: username application

    Group Policy

    • Used to manage computers and users in a Domain.
    • Apply policies by using gpedit.msc or GPUPDATE /FORCE
    • Group Policy categorized into Software Settings and Windows Settings.

    Software Settings

    • Used for software installation and removal.
    • Targets Computers or Users.
    • Not searchable.

    Windows Settings

    • Used for security settings.
    • Targets Computers or Users.
    • Not searchable.

    Adminstrative Templates

    • Used for controlling all other settings.
    • Target Computers or Users.
    • Searchable.

    Policy Examples

    • Interactive Logon: Message title for users attempting to log on - sets a customized message for users when logging on.
    • Interactive Logon: Message test for users attempting to log on - displays a legal notice when users log in to the computer.
    • Interactive Logon: Don't display username at sign-in - hides the username of the previous user at login.
    • Shut down the system - determines who is allowed to shut down the system.
    • Show first sign-in animation - controls the display of the initial sign-in animation for new users.

    Adminstrative Template Search Filters

    • Managed - Setting is removed, Setting is not removed.
    • Configured - Policy is enabled or disabled, not configured.
    • Commented - Administrator comments, no comments.
    • Filter for word(s) - Target specific technologies.
    • Enable Requirements Filters

    Custom MMC for Single User Policy

    • Create a custom MMC with the Group Policy tool pointed at a single user to apply policies to that user.
    • Use the MMC to manage user specific settings, especially to apply policies specific to a KIOSK user or other public user accounts.

    KIOSK User Policies

    • Prohibit access to the Control Panel and PC Settings - Disables access to the Control Panel for the KIOSK user.
    • Run these programs at user logon - Automatically launches the Remote Desktop program when the KIOSK user logs in.
    • Hide the Programs Control Panel - Blocks KIOSK user from installing or removing programs.

    Studying That Suits You

    Use AI to generate personalized quizzes and flashcards to suit your learning preferences.

    Quiz Team

    Related Documents

    Description

    Explore the functionalities of Microsoft Management Console (MMC) and the User Account Control (UAC) in Windows. Understand how to customize MMC with essential tools and configure UAC settings for different users. This quiz will test your knowledge on these crucial Windows features.

    More Like This

    Use Quizgecko on...
    Browser
    Browser