Unit 6 Lab 6.2

1. What are the available Password Policy options that could be enforced to improve security in a Group Policy? * Enforce password history: * Maximum password age * Minimum password age * Minimum password length * Passwords should always meet complexity requirements
2. How could you se security permissions and user access rights on a home computer using Windows XP Professional or similar that is not a member of the domain? Security permissions and user access can still be managed locally on the computer with local groups and applying the proper permissions to local users on the computer. Local group policies can also be managed.
3. Why is the use of different password policy options available and why is it important to implement complexity and length requirements? There are different policy options to have different options for companies to use, if it were all the same then hackers would know exactly what to look for, in this case it can be vary. It is important implement complexity and length requirements to secure and assure the company that proper passwords are being used to prevent easy hacking access for hackers.
4. Microsoft defines user rights in two types of categories: Logon rights and privileges. Explain the difference of the two from an access control perspective. Log on rights manage and control who can log in to a specific computer. Privileges determine what the user can access one they log in, they go hand and hand.
5. Name at least 5 logon rights and 5 privileges available in Microsoft GPOs. 5 Logon rights are Terminal, Batch, Network, Locally, and Service. 5 permissions set on an object are Act as Part of the Operating System, Back Up Files and Directories, Create a Pagefile, Create a Token Object, Generate Security Audits.
6. Which privileges in a GPO can override permissions set on an object? Take Ownership of Files or Other Object
Manage Auditing and Security Log
Back Up Files and Directories
Restore Files and Directories
Debug Programs
Bypass Traverse Checking
7. What are the benefits of User Rights Assignments in your own words used as security controls and deployed across a domain of servers and workstation? It is a huge benefit because it provides control and centralizes a way to manage all sensitive and important data in a secure manner.
8. Explain why you would have to create a service for applications and assign them elevated privileges with a GPO. Explain the danger, from the security perspective, in creating service accounts for applications and what can be done to mitigate the risk. You would have to create a service application and assign them privileges with a GPO in a scenario when lets say teachers in a school need to install applications you can setup the applications service with elevation so that they can teach the class without having to always ask for assistance, it can be dangerous because any one can access this and install on any computer. To mitigate this you can create a group so that it can apply to a group, and then manage who is in the group.
9. Provide at least 3 examples of either Rights or Privileges typically required by a service account in the User Rights Assignment section of a GPO. Log on as batch job, Log on as service, Restore files and directories.
10. Provide an explanation of why restricting access based on time zones or international users helps organizations achieve C-I-A as required by the Senate Chairs Group Policy Object definition? Assume Senate Chairs provides 24 x 7 x365 customer service support in different time zones. Restricting access based on time zones achieve C-I-A because it restrict open availability for hackers to try and take advantage of vulnerabilities, in this case you standardize one time for the entire organization and by doing so allows a smoother process in managing who has access and eye on suspicious actions.