Course: IS3230
Lab 1

1. Discretionary Access Control Lists form the primary means by which authorization is determined. An ACL is conceptually a list of <account, access-rights> pairs.
2. Sometimes an entire group needs access or permissions, and by giving the group permission any new person will automatically be given the permissions needed, with no need to add each person individually.
3. Modify, Read & Execute, Read, Write, List contents.
4. Read only, sometimes users need to be able to get information from the network, but without them being able to modify anything.
5. Some password policies are, password length, character diversity, time required to change password.
6. The only time it’s a good idea is when an application needs to read stored passwords. Normally they are encrypted, so storing passwords using reversible encryption should be done on a per-user basis.
7. Local group policies govern smaller groups on the network such as a hand full of machines or users. A domain group policy affects every workstation or user on the domain.
8. Local GPO, GPO linked to sites, GPO linked to domains, and GPO linked to organizational units.
9. Administrative Templates are a large repository of registry-based changes (in fact, over 1300 individual settings) that can be found in any GPO on Windows 2000, Windows XP, and Windows Server 2003. The Administrative Templates are Unicode-formatted text files with the extension .ADM and are used to create the Administrative Templates portion of the user interface for the GPO Editor.
10. The Group Policy Management Console (GPMC) is a new and comprehensive administrative tool for Group Policy management. GPMC integrates the existing Group Policy functionality of the property pages on the Active Directory administrative tools into a single, unified console dedicated to Group Policy management tasks; GPMC also