MCSE Exam Cram Windows XP 70-270

233 Mhz Processor
64 MB RAM
1.5 GB HD with 650MB free space
Super VGA (800 x 600)
Keyboard
Mouse
CDROM drive

[The Advanced Configuration and Power Interface (ACPI)]. Defines platform-independent interfaces for hardware discovery, configuration, power management and monitoring.

Windows 98
Windows ME
Windows 2000
Windows NT SP6

Using the chkupgrd.exe tool found on the installation CD or via direct download from Microsoft or by running the Winnt32/Checkupgradeonly switch directly from the CDROM.

RAID and SCSI controllers

These two tools allow the migration of software for use in the windows XP OS. Software vendors may supply and update pack also called migration dynamic link libraries that you can use during the upgrade process. They are basically installation wizards.

Keep FAT32 for a while. Check that everything works properly then migrate to NTFS using the convert command.

The uninstall option is present only when migrating from Windows ME and Windows 98 ONLY IF you kept the FAT filesystem.

Control Panel > Add remove programs > select XP click remove

Bootable CDROM's

winnt32.exe (32 bit OS) & winnt.exe (16bit)

It answers the installation prompts and saves answers results in an answer file called unattend.txt. Windows uses this fie during installation to configure the screen resolution and other typical hardware settings.

You must rename the unattend.txt to winnt.sif and store it in the i386 directory.

You extract the deploy.cab files located at the Support\Tools folder and initialize setup manager by double clicking setupmgr.exe

You typically use the Sysprep tool in conjunction with a non-Microsoft disk imaging tool or Microsoft Windows Server 2003 Automated Deployment Services (ADS) to perform image-based installations. Image-based installation is a method of copying or cloning preconfigured operating systems (and, optionally, software applications) onto destination computers.

1. Create a folder called sysprep in %systemdrive%

2. Extract sysprep.exe, setupcl.exe from the deploy.cab file located at support\tools (on winXP CDROM) to the sysprep folder.

3. Prepare the computer to be ghosted by installing all necessary software and running sysprep.exe when finished.

When you run sysprep a Mini-Setup wizard starts to run and prompts you to enter parameters such as computer name, user name, etc. You can skip this tedious procedure by using the setup manager and create an answer file named sysprep.inf. The Sysprep.exe, Setupcl.exe and Sysprep.inf files must be located in the Sysprep folder for this setup to work.

http://support.microsoft.com/kb/298491

DHCP server, DNS, Active Directory and a Nonsystem partition.

2GB

The reason for the partition in the Single Instance Storage (SIS) groveler service, which will create a pointer to existing duplicate files, thereby saving disk space. The service won't use system files that are active.

The reseal button/parameter will prepare your reference computer to the final image. After choosing this option the computer will restart and a Mini setup wizard will welcome you. Use this when the reference computer is done and no other change to the image is required.

The audit boot button will restart the reference computer as is, with no wizards, just for examination and test on the reference computer. Use this option if you want to test the reference computer after booting but without resealing it.

The factory button/parameter will boot the reference computer, but to "Network–Enabled state" without starting Windows Welcome or Mini Setup wizard. In this state the reference computer will process a file named Winbom.ini which contains information about device drivers, time zones, network etc. the Winbom.ini can be created using the OPK (OEM pre-installation kit). Use this option when your duplicate computers need different settings, provided by different winbom.ini files. This parameter is perfect for OEM installation with different configurations.

It allows for a customized pre-installation on the factory floor using a Bill of Materials file to automate software installations.

1. Log on the server as Administrator
2. Control Panel > Add/Remove Programs > Add / Remove Windows Cmponents
3. Click the Remote Installation Services Checkbox
4. Allow the server to copy files from the CDROM drive

Run the command risetup.exe to copy the CD-based image of Windows XP on the RIS server and configure the RIS server to respond to client's requests.

A computer can connect to a RIS server in two ways: by installing a NIC with a PXE enabled boot ROM or by creating / downloading a PXE boot disk.

On the first case the computer tries to boot from the network adapter to find an IP address. The user is prompted to press the F12 key to access the server. On the second case to create a PXE boot disk using MS tools you must locate and run the file rbfg.exe on RemoteInstall\Admin\i386\rbfg.exe on the server.

Fonts, network attached printers, mapped drives, folder and taskbar options, regional settings, MS office settings, stored mail and contacts, my documents, my pictures, my desktop, favorites and other file types e.g. mp3, ch3, csv, etc.

It's designed to accommodate the transfer settings from a single computer or an upgrade to the system. After the user data has been saved to a UNC file can be backed up by burning or storing the file.

From the CDROM the file fastwiz.exe is located in the \Support\Tools folder. You can access the fastwiz.exe also by inserting the XP installation CDROM and select "Perform Additional Tasks" button then click the Transfer files and settings.

You can also access the wizard once XP is installed by going to START > All Programs > Accesories > System Tools

Creating a Wizard floppy disk or use the XP installation CDROM

Direct cable (using serial ports), Via network, floppy drives or removable media and other (same hard drive or any disk drive on your computer).

Phase I is preparing the server by creating folder that will house the scanning and loading phases of the process. On the scanning folder you copy files: scanstate.exe, *.dll and *.inf on the loading folder you copy the loadstate.exe, *.dll and miguser.inf from the VALUEADD\MSFT\USMT folder in the Windows XP CDROM

First log on as the user that you want to migrate. Then scan the OLD system by mapping the network share and running this command:
scanstate /I .\migapp.inf .\migsys.inf /I .\migfiles.inf /I .\sysfiles.inf \\server\USMT_DATA

Members of a domain

You first need to obtain the hotfixes from the Microsoft side. The easiest way to do this is by downloading Windows Updates Downloader (WUD).

Follow the SVCPACK.INF creation method by renaming the hotfixes in a 8.3 format and moving them to the C:\XPCD\i386\SVCPACK\ folder . Save this as svcpack.inf in C:\XPCD\I386\. You must delete svcpack.in_ in the I386 directory otherwise Windows XP Setup will not use the svcpack.inf file.

And Open up DOSNET.inf in the i386 directory with Notepad and add the following text into the blank space you see in Notepad, (this can be put anywhere really):
[OptionalSrcDirs]
SVCPACK

Copy your original Windows XP install CD onto the hard drive. Copy the entire contents of the CD into C:\WinXP-CD folder. Make a note of the volume label of the original WinXP CD. This will be used later during the CD creation process.

Download and extract Windows XP Service Pack 3. Navigate to “Windows XP Service Pack 3 Network Installation Package for IT Professionals and Developers” page on Microsoft Download Center. Click on the “Download” button and save the file into C:\WinXP-SP3

Click Start->Run
Type the following command C:\WinXP-SP3\WindowsXP-KB936929-SP3-x86-ENU.exe -x:C:\WinXP-SP3

Slipstream SP3 into XP
Click on Start->Run
Type the following command C:\WinXP-SP3\i386\update\update.exe -s:C:\WinXP-CD

This starts the slipstream process and Software Update Installation Wizard will appear. When complete “Integrated install has completed successfully” message will appear. Click “OK”

When using the unattended method of installing multiple hotfixes with a single reboot, it is possible to get the wrong version of a file installed. If a file is locked or in use, it is placed in the Pending File Rename queue, so it can be installed during a restart. If file X exists in multiple hotfixes, at differing versions, it is possible that the wrong one gets installed.

NOTE: See Qfecheck.exe.

Microsoft has released QChain.exe, which has the following benefits:

1. It version checks / clears duplicate entries in the Pending File Rename queue, so only the latest file version is installed.

2. It works on both Windows NT 4.0 and Windows 2000.

3. It is now the only supported method for installing multiple hotfixes with a single reboot.

It points to the location of the installation files on a 16 bit OS.

The installation command from a 16 bit OS indicating the source files (/s), that is an unattended install (/u) and to load special settings for computer1 located in the udb file. Overwritting some parameter on the unattended.txt file, such as name.

Copies the contents of the installation CDROM to the local hard drive for future reference.

Prepares the folder for the distribution of Windows update files and drivers.

RIS and Sysprep

sysprep.exe and setupcl.exe

sysprep.inf

You can either store it on a floppy disk or directly in the Sysprep folder.

RIS

It can only make images of the C partitions (no other partitions are ghosted) any existing partitions are deleted and the entire partition is formated as a single drive and formatted with NTFS.

Add Child Objects to the Domain

Slipstreaming

The system properties > automatic updates tab

Dynamic Update will function during the setup process downloading critical fixes and drivers needed during the setup process. In contrast Automatic Updates routinely checks for the latest High-priority updates for your PC and then downloads and installs them for you automatically.

The Automatic Updates feature will only check for High-priority updates. Automatic Updates will not download and install Optional updates. For additional enhancements you will need to return to the Windows Update site regularly to select and install Optional updates.

While Windows Update provides you with updates specifically for Windows, Microsoft Update expands the service to download and install updates for other Microsoft software, such as Microsoft Office and Windows Live. Automatic updating is a feature that allows you to set your PC to automatically download and install updates using either service, making it easy and convenient for you to keep your Windows PC current.

Right after installing the network components on the GUI portion of setup it will try to reach the Microsoft website.

DUDisable=yes on the unattended.txt or winnt.sif file.

When a service fails to start causing other services dependent on that first one to fail.

ValueADD\MSFT\USMT and you copy scanstate.exe along with all the dll files and inf files and for the Loading portion loadstate.exe along with MigUser.inf and dll's

\SUPPORT\TOOLS folder from the Windows XP CDROM

ACPI

c:\windows\compat.txt

You have created an answer file in advance.

winnt32 /cmdcons

To install the Microsoft Loopback Adapter, follow these steps:

1. Go to Start | Control Panel | Add Hardware.
2. In the introductory dialog box, click Next.
3. Select Yes, I Have Already Connected The Hardware, and click Next.
4. Scroll to the bottom of the Installed Hardware list box, select Add A New Hardware Device, and click Next.
5. Select the Install The Hardware That I Manually Select From A List (Advanced) option, and click Next.
6. Under Hardware Types, select Network Adapters, and click Next.
7. Under Manufacturer, select Microsoft.
8. Under Network Adapter, select Microsoft Loopback Adapter.
9. Click Next twice, and click Finish.

Administrators & Power users groups

When XP works in stand alone mode or joins a workgroup.

Are two more folders called Shared Music and Shared Pictures

Are two more called Shared Music and Shared Pictures

Guest

NTFS Permissions and Share permissions

1. Open a window in either My Computer or Explorer

2. Tools> Folder Options > View Tab

3. Clear Simple File Sharing box

Security tab

Shared Folders Snap In

Remote network users and local users

1. C$, D$, E$ - One share for each available hard drive volume on the system.

2. Admin$ - Shares the %systemroot% folder (c:\Windows)

3. IPC$ - Supports communications between objects on different computers over a network by manipulating low-level details of network transport protocols.

4. print$ - holds printer drivers for printers installed on local machine.

Yes you can. Click on Shared Folders > Shares

1. Use net use E.g. net use
X:\\dc\shared to map the letter X to the folder residing in computer \\dc\ folder name \\shared

2. To view current shared folders you use the net share command alone.

To share a computer's C:\\Data directory with the share name DataShare and include a remark, type:

net share DataShare=c:\\Data /remark:"For department 123."

To remove the previously shared To stop sharing the DataShare folder you created in the previous example, type:

net share DataShare /delete

Means that a user can cache share data files on their local workstations. It's also called Offline Files

%systemroot%\CSC for Windows XP

Yes, you can use the cachemov.exe tool from the Windows 2000 Server Resource Kit to relocate the CSC folder to a different drive volume.

**CACHEMOV.EXE never returns the folder to its original default location***

1. Automatic Caching of Documents- makes a copy of opened files from the shared folder.

2. Automatic Caching of Programs and Documents- Recommended for read only data or application programs (that can run on a network)

3. Manual Caching of Documents- The default caching setting. The user must specify any files that they want available offline. Used for documents.

10% of available HD space. You can change it by Tools > Folder Options > Offline files

Network users and local access.

Full control, Change and Read. And the default permission is Full Control for the Everyone group.

Only use NTFS permissions. If you use a mixture of Folder permissions and NTFS managing access control becomes a burden.

Administrator, Help Assistant, Support_XXXXXXXX and Guest

Administrators, backup operators, Guests, Help Services Group, Network Configuration Operators, Power Users, Remote Desktop Users, Replicator, Users.

Administrator

Backup operators

Guests

Local Guests Group

HelpServicesGroup

Network Configuration Operators

Power Users

Remote Desktop Users

Replicator

Users

Everyone, Authenticated users, creator owner, creator group, network, interactive, anonymous logon, dialup, remote interactive logon, terminal server user.

A security principal is an entity that can be positively identified and verified via a technique known as authentication. They apply to any user that happens to be using Windows XP in a particular manner.

Everyone

Authenticated users

Creator Owner

Creator Group

Network security principal

Interactive

Anonymous logon

Dial up security principal

Remote Interactive Logon

Terminal Server User

Access Control Lists and Access Control Entries

Read, read and execute, list folder contents, write, modify and full control.

Predefined advanced NTFS permissions and are applied per user and per group.

Full control, modify, read and execute, read, write

Full control, modify, read and execute, list folder contents, read, write

Full control

Modify

Read and execute

List folder contents

Read

Write

view a folders permissions.

Read & Execute

Owner or users who are granted Full Control on a folder

Deny

Root, do not inherit this behavior

Administrators, System and Creator Owner

All existing users become members of the Local Power Users group of XP to run noncertified applications because XP is more restrictive than under NT.

System, Administrators, Creator Owner, Everyone, Users

System, Administrators, Creator owner

Everyone, users

Advanced Security Settings

It's a feature of NTFS that allows recoverability of files in case hard drive failure. It's the database that stores the exact location of a file.

change

explicit permissions

/O to retain the object's NTFS permissions in addition to inheriting the destination folder's permissions

scopy.exe or robocopy.exe (from the Windows 2000 Professional/Server resource kit)

Use the Effective permissions tool:

1. Right click > Sharing and security
2. Click security tab > advanced
3. Click effective permissions > select user

Files and folders that are moved RETAIN their permissions from the source folder.

Files and folders that are moved INHERIT their permissions from the destination folder.

Files and folders that are copied INHERIT their permissions from the destination folder.

Files and folders that are copied INHERIT their permissions from destination folder.

1. Log on as the system administrator
2. Right click the folder >Properties
3. Security > Advanced > Owner
4. Click the name of the person in the Change Owner To section to change the folder's ownership

5. Click Ok

*If you want to do the same for subfolders mark Replace Owner on Subcontainers and Objects checkbox**

It does not affect. All security is intact.

They have Simple File Sharing security enabled by default. Folders that have passwords are removed.

No, through the Simple File Sharing UI you can configure both share and NTFS file system permissions at the folder level.

With the Event viewer snap in in MMC.

File and folder access, logons and logoffs, system shutdowns and restarts, changes to user and group accounts, changes to Active Directory

1. Launch the local security policy MMC

2. Expand Local Policies folder and click Audit policy

3. Select the policy that you want to enable >select success /failure or both

4. Close the Local Security Settings Console

1. Right click the object > Properties
2. Security tab > Advanced
3. Advanced Security Settings > Add
4. Type the user or group that you want to track and click OK

5. Select the events that you want to track >OK

1. Using Manage > Event viewer (located beneath the System Tools folder)

2. Open the MMC containing the Event Viewer snap-in.
In the console tree, click Event Viewer.

IIS v5.1

Control Panel> Add / Remove Programs > Add / Remove Windows components

DNS

NetBios

%systemroot%\system32\drivers\etc

%systemroot%\\system32\\drivers\\etc

Start > Programs >Administrative tools > Internet Information Services

Using the Help file using IE using the address: http://localhost/

Right click the computer name > All tasks > Backup/Restore Configuration.

The file is stored with the .md0 extension.

%systemroot%\system32\inetsrv\metaback

Right click the site name > Properties

Settings for home directory, directory security, HTTP, ISAPI filters and other configurations.

ISAPI filters are DLL files that can be used to modify and enhance the functionality provided by IIS. ISAPI filters always run on an IIS server, filtering every request until they find one they need to process. The ability to examine and modify both incoming and outgoing streams of data makes ISAPI filters powerful and flexible. For example:

Change request data (URLs or headers) sent by the client

Control which physical file gets mapped to the URL

Control the user name and password used with anonymous or basic authentication

Modify or analyze a request after authentication is complete

Modify a response going back to the client

Run custom processing on "access denied" responses

Run processing when a request is complete

Run processing when a connection with the client is closed

Perform special logging or traffic analysis.

Perform custom authentication.

Handle encryption and compression.

HTTP Headers form the core of an HTTP request, and are very important in an HTTP response. They define various characteristics of the data that is requested or the data that has been provided. The headers are separated from the request or response body by a blank line. (Caching, cookies, etc)

ftp://computername/virtualdir

1. Properties > Web Sharing > Add
2. Enter an alias for the web folder and specify permissions.

Web Distributing Authoring and Versioning acts as a redirector that enables users to open and save documents via HTTP.

Internet
-Check HTML files in drive c:\inetpub\wwwroot

-Attempt to connect to the web

Intranet
Check network connections
-Check WINS, DNS

One of IIS’s best features is its ability to create and configure virtual directories. A virtual directory is a useful, easy-to-learn feature. A virtual directory isn’t an actual folder on the hard disk such as you would create with Windows Explorer; instead, a virtual directory is a name mapped to a local folder or network share. Thus, you can use the virtual directory name rather than the actual directory name to access the contents of the virtual directory. It's also called URL mapping.

1. Control Panel > Add Remove Windows Components

2. Click IIS > Details > Select FTP Service

A SOFTWARE interface between the operating system and a print device. It defines ports through which print jobs get routed.

The actual equipment (hardware) that produces the printed documents.

A software interface through which print jobs get directed to either a locally attached print device or network device.

A computer that serves as the host for printers that are associated with print devices.

Software specific to each print device that translates printing commands into printer language codes for each print device. PCL5 and PostScript are examples of two types of printer languages.

The service that runs on the backround of Windows that initiates, processes and distributes print jobs. THe spooler saves print jobs into a temporary physical file on disk. Print jobs are then despooled and transfered to the appropriate print device.

The UNC, short for Universal Naming Convention or Uniform Naming Convention, specifies a common syntax to describe the location of a network resource, such as a shared file, directory, or printer.

\\ComputerName\SharedFolder\Resource

net use lptx: \\print_server\print_share_name

Administrators and Power users group

Because of the Creator Owner principal applied

They can either be members of the following groups: Administrators, Power users, Print Operators and Server Operators. They can also accomplish it by having the Allow Manage Documents permission.

Comment, location, printing preferences (portrait, landscape), paper source, paper type, quality and print a test page

Share printer option (on/off), install additional drivers for client computers that use a different Windows OS and platforms

Add, configure, delete ports, enable bidirectional printing support (for printer status and current job information), enable printer pooling

Printer Pooling is a standard feature of Windows NT, 2000 and XP which in theory lets you spread your printed output across a pool of several printers. When multiple documents are concurrently sent to the printer pool, the first document to arrive will begin printing on the first printer, the second document to arrive will begin printing on the second printer, and so on.

Time availability, print priority, change the print driver or add a new driver, spool print jobs, hold mismatch documents, print spooled documents first, retain documents after they have been printed, enable advanced printing features.

multiple printers can exist for a single print device. This is typically done to allow different priorities for specific security groups. For example, in a small company with a Sales and Marketing department, two printers could be created for one high-capacity network print device. One printer would be configured with a priority of 50, and assigned Print permissions for the Sales group. Another printer would be created and configured with a priority of 1, and assigned Print permissions for the Marketing group. This configuration would prevent members from the Sales group from having to wait on their utmost important reports because of a large graphical brochure is printed by the Marketing department. The lowest priority that can be configured for a printer is 1, the highest is 99.

Selecting this option tells the spooler to check a document’s properties against the printer properties and to hold the document in the queue if the properties don’t match. For example, a mismatched document can occur when an application specifies a form that’s not currently assigned to a printer tray. Correctly matched documents continue to print normally, bypassing any mismatched documents in the queue.

When this option is selected, the spooler doesn’t delete documents from the queue after they print. You can then reprint a document from the queue rather than from the program that created it, or you can delete the document manually.

Selecting this option turns on metafile spooling for print jobs from Windows XP and Windows 2000 clients using Windows-based applications. Of more interest to most users, selecting this option enables new options in the common Print dialog box for some printers and some applications, such as Booklet Printing and Pages Per Sheet. The only reason to clear this option is if you have problems printing.

EMF spool files are used to greatly reduce the amount of time that elapses between a request to print (initiated by an application) and the return of control to the application by the operating system.

In computers, a printer driver or a print processor is a piece of software that converts the data to be printed to the form specific to a printer. The purpose of printer drivers is to allow applications to do printing without being aware of the technical details of each printer model.

On Microsoft Windows systems, printer drivers make use of GDI (Unidrv or PScript-based) or XPS (XPSDrv). Programs then use the same standard APIs to draw text and pictures both on screen and on paper. Printers which use GDI natively are commonly referred to as Winprinters and are considered incompatible with other operating systems.
Win32 APIs also allow applications to send data directly to the spooler, bypassing the printer driver; however, few applications actually use this option.

The Graphics Device Interface (GDI) is a Microsoft Windows application programming interface and core operating system component that is responsible for representing graphical objects and transmitting them to output devices such as monitors and printers.

Set permissions, set printer auditing (Advanced button), take ownership of the printer (Advanced button), view effective permissions (Advanced button)

Enables you to configure printer specific settings. The available settings on this tab vary depending on the manufacturer and model. E.g. paper tray assignments, font cartridge settings, printer memory settings, etc.

Administrators: Allow print, allow manage, allow manage documents.

Allow Manage Documents

Allow Print

Allow Print, Allow manage printers, allow manage documents,

IIS 5+ running on the print server computer. You enter the URL into the browser in the following format:

http://print_server/printers

http:/print_server/printer_sharename

Like all IP-based protocols, IPP can be used locally or over the Internet to printers hundreds or thousands of miles away. Unlike other printing protocols, IPP also supports access control, authentication, and encryption, making it a much more capable and secure printing solution than older ones.

The IPP accommodates these four functions:

Allow a user to find out about a printer's capabilities.

Allow a user to submit print jobs to a printer.

Allow a user to find out the status of a printer or a print job.

Allow a user to cancel a previously submitted job.

All options are correct

Manual Caching of documents

a. Network Configuration Operators
b. Replicator
d. HelpServicesGroup
e. Remote Desktop Users

*Authenticates Users and Creator Group are built in security Principals

1

99

Administrator

Guest

HelpAssitant

Administrator, Guest, HelpAssistant

They are the same

Name must be unique, names are recognized up to the 20th character, cannot contain /\ [];:=+*?<>, are NOT case sensitive

They are case sensitive, can be 127 characters long, should be a minimum of seven to eight characters, should be difficult to guess and should mix uppercase and lowercase letters, numerals and non alphanumeric characters.

The domain can contain Windows 2000 domain controllers and no legacy backup domain controllers

SID Security Identifier

Renaming the built-in Administrator and Guest Accounts

No, a group is a membership list not a container.

The user accounts tool in Control Panel > User accounts tool

Change passwords, change account picture, set up .NET passport, access programs, change background, request remote assistance.

Fast User Switching

into a machine where you are physically sitting

The CTRL+ALT+DEL box at startup

User Principal Name is an attribute of Active Directory user object and by default is of the form username@domain.name

The Windows XP security dialog box appears where you can log off, lock the system, shut down, change your password, access task manager.

Control Panel> Administrative Tools >Active Directory Users and computers

1.Local Group Policy MMC> Group Policy Snap in

2.Local Security Policy Administrative Tools > Local Security Policy

GPO's (Group Policy Objects)

It's an Active Directory object that represents a portion of your network topology with good connectivity. E.g. a LAN

To access Group Policy for a site you must go to the properties of a site, domain or OU and click the Group Policy tab.

When working with sites you use the Active Directory Sites and Services Console, to work with group policy for a domain or OU you use Active Directory Users and Computers.

One/multiple

Computer and User

Startup / 90 minutes

Logon

1.Local Group Policies
2.SDOU (then Site, Domain and OU)

The policies that are closest to the computer take precedence. For example OU

A user may be denied permission to read a folder on a disk volume, If the user has been given the privilege to back up files and folders, a backup of the folder succeeds, even though the user cannot actually read the folder.

-Clear Virtual Memory Page file when system shuts down

-Do not display the last username in logon screen

-Number of previous logons to cache (to force access to DC)

Account

Maximum password age, minimum password length, complexity requirements, enforce password history, minimum password age, account lockout, reset account lockout after, account lockout duration.

Account duration lockout

If the counter is reset after five minutes and the account lockout threshold is 3 a user can log on twice with the incorrect password. After five minutes, the counter is reset , so the user can log on twice more. A third invalid logon during a five minute period locks the account.

Account lockout threshold.

Minimum password age

Enforce password history

Maximum password age

Passwords must meet complexity requirements

logon events, account management, object access, privilege use

Logon Events

Account management

Object Access

Privileges

Resultant Set of Policies (gpresult and gpupdate)

Gpudate /target: (computer | user)

Gpupdate /force

Gpupdate /logoff /boot

MMC > Resulting Set of Policy snap in

Security Configuration and Analysis tool snap in (secedit in cmd)

Basicwk.inf

Securews.inf

Hisecws.inf

Compatws.inf

-Software restriction policies MMC > Software Restriction Policy snap in

-Unrestricted

-Disallowed

You need an MS-Exchange account. Users can use their AD credentials to open a Windows messenger session and talk to other users on the network who also have an Exchange 2000 Windows Messenger Account.

1.Hash rule
2.Path rule

3.Certificate rule (Issued by Microsoft or IT organization)

4.Zone rule (Trusted sites, intranet, restricted site zones)

Local Group / Active Directory

Gpresult /scope computer /z

The /scope switch specifies whether the user or computer settings need to be displayed.
The /z switch specifies that the super verbose information is to be displayed which enables you to see whether a setting was set in multiple places.

Secedit, Local Group Policy and Active Directory Group Policy Object

User profile

%systemroot%\Documents and Settings\user_logon_name

%systemroot%\Profiles\user_logon_name

1.Place the logon script in %SystemRoot%\sysvol\domain\scripts
2.Run the Active Directory User and Computers MMC > Select user > Select properties >select the script in the logon script box.

1.Run the Active directory users and computers MMC > Right click the name of user > Properties > Profile tab and click the connect radio button.
2.Click the drop down arrow and choose an available drive letter
3.Type the UNC path to the network folder

1.Create a shared folder on a server for the profiles

2.On the XP machine > Control Panel > Performance and Maintenance > System

3.Click Advanced tab > from the User Profiles > Settings

4.Select the user's profile you want to use and select Copy to > type UNC path to the server's shared folder

5.In Active Directory Users and Computers MMC > Select account properties > Select Profile Tab and enter UNC path to the profile server in the profile path field.

NTUSER.DAT

By renaming NTUSER.DAT to NTUSER.MAN

Configuration>Administrative templates>System > User Profiles

1.Delete cached copies of roaming profiles
2.Log Users Off when roaming profile fails
3.Prevent Roaming Profile Changes from Propagating to the server

Control panel> User accounts > Change the way users log on or off

Fast User Switching

1.Share the folders that you want to make available offline
2.From Sharing select Caching button
3.Select the Allow Caching of Files in This Shared Folder Option
4.Select (a) Manual Caching (b) Automatic Caching © Automatic Caching for programs >OK

Sync network files or folders by running a simple wizard that will remind you that you are not connected to a network and that offline files are available. To locate this files browse as you would normally do to the network folder and locate files.

Windows Explorer > Tools > Synchronize. This option will open the settings to schedule when you should synchronize. I.E when I'm using a LAN connection.

XP removes the file from the network file server during synchronization

XP presents a dialog box of this state and gives you the option to remove the file from the local computer during synchronization or keep local version.

XP will ask you to (a) Keep the network version (b) keep local version © Keep both and rename local version

XP will let you work with the local cached copy.

%systemroot%\CSC , cachemov.exe tool , Windows XP resource kit or Windows 2000 resource kit

10%

Adjust cursor blink rate, the speed at which a character repeats when you hold down a key, the time lapse before a character repeats and input for different language groups.

Change themes, modify desktop (background, icons displayed, modify graphic for each icon, schedule Desktop Cleaning Wizard to move unused desktop items to a folder you select), modify screen saver, adjust appearance (for high customization of buttons, menus and fonts), change settings such as screen resolution, color quality, display adapter, refresh rate, hardware acceleration and color management.

Adjust mice for left handed or right handed use, adjusts the double click speed and rate at which the cursor moves across the screen.

Open taskbar and start menu properties > Select Start Menu tab > Click Customize > Select Display System Administrative tools on the Programs menu

URL address, links, desktop icons, quick launch, new toolbar

Show desktop, Internet explorer and Windows Media player

It controls infrared, image transfer and wireless hardware settings for your computer's infrared port.

Driver.cab

%systemroot%\Driver Cache\i386

HKLM\Software\Microsoft\Windows\CurrentVersion\Setup\DriverCachePath

My Computer > Properties > Automatic Updates > Turn Off automatic updating

Driver Verifier (verifier.exe)

Verifies all drivers installed on the system

By using a browser http://windowsupdate.microsoft.com or
Start > All Programs > Windows Update

Device Manager > right click the device > Properties > Roll Back driver

Driver Details, update driver, roll back driver, uninstall the driver

%systemroot%\system32

The signature verification tool found at Run > Sigverif.exe

Drivers are software that has been tested by Microsoft for compatibility with Windows XP

My Computer > Properties > Hardware > Driver signing

Ignore, warn, block

Sigverif.txt stored at c:\windows

-If my device needs a driver, go to Windows Update without asking me
-Ask me to search Windows Update every time I connect a new device
-Never search Windows Update for drivers

1.Administrative Tools > Group Policy Management > Create a new policy > Right click > Edit

2.Click on Windows settings > Security Settings > Local Policies > Security Options

3.Click devices: Unsigned driver installation behavior

4.Choose silently succeed (allows unsigned drivers), warn but allow installation and do not allow installation.

1.Open Scanners and Cameras in Control Panel
2.Right click the scanner or camera you want to test > Properties
3.Click Test Scanner or Camera

To install unrecognized optic devices and troubleshoot them

Allows you to combine two or more modems or ISDN adapters into one logical link with increased bandwidth. The Network and Dial up connections feature performs PPP multilink dialing over multiple ISDN, X.25, or modem lines.

1.Control Panel > Network Connections > Right click the connection on which you want to enable Multilink > Properties
2.ON the general tab > Click the checkbox next to each device that you want to use with this connection > Click OK

NOTE: To dial multiple devices both your connection and your remote access server must have Multilink enabled.

ISO 9660, Joliet Standard (extension of ISO 9660)

Supports Unicode characters and folder hierarchy extending deeper than eight levels of subfolders.

Play movie

Universal Disk format. Based on the ISO 13346 for reading removable media such as DVD, CDROM, CDR, CDRW, WORM (Write Once Read Many), Magneto Optical Disks.

A usb device that draws it's electrical power from the motherboard

127, 7, 5 meters, 5

Device Manager > USB > Root hub > Properties > Power tab
It will list the power consumed by each device attached an the total power available.

500 mA (Milliamps)

Wireless Link

Right click a selection on the desktop and click send to Infrared recipient or use drag and drop to move files onto the wireless link icon on the desktop.

Open Wireless link app in control panel > ON infrared tab clear the “Allow other to send files to you computer using infrared communications”

Safe mode, enable VGA Mode, Last Known Good configuration

10

Control Panel > Display > Settings > Select the Use this device as the primary Monitor checkbox
The monitor designated as the primary monitor displays the logon dialog box at startup.

-Displaying the same image on bot and extending the desktop

2, 1

1.Computer > Properties > Hardware tab > Device manager

2.Expand Processors node > Note the type of support you currently have

3.Right click the icon for the currently installed processor and select update driver to launch the Update hardware Wizard to upgrade single processor HAL to multiple processor HAL.

4.Restart the computer for change to take effect.

1.2

ACPI

The Power Option applet in Control Panel

Control Panel > System > Device Manager > Device usage

1.Device Manager > Hardware > Hardware Profiles

2.You rename the Profile 1 (Current) > OK

3.You are prompted at startup to select a profile.

Configure power schemes such as Home/Office Desk where you configure power saving options like turning off monitor after x minutes, turn off hard disks or system standby, configure what to do when the power option is pressed and configure a UPS.

Hibernation

ACPI

PCIMCIA

Smart Cards

Cryptographic Service Provider (CSP)

5 meters

3, the ISA video adapter is not supported by the multiple monitor feature (only AGP and PCI)

By reinstalling Windows

False

False

False

3, 1

Home

Are disks managed as a collection. All dynamic disks on a computer are members of the same disk group. Each disk in a disk group stores replicas of the same configuration data. This configuration is stores in a 1 MB region at the end of each dynamic disk.

Unlimited

True

Remotely by a shared folder over the network.

Yes, if it's converted from a basic disk, but you can't extend the system or the boot partition.

True

Volume and unallocated space

Simple volume

RAID5 Volume

System and boot volumes

Spanned volumes

1.Disk management tool > Right click the basic disk you want to change to a dynamic disk and then click Convert to dynamic disk

No

1.Open cmd type > diskpart
2.Type select disk 0 to select the first hard disk press enter
3.Convert Dynamic and press enter

Manage disk quotas, mount points and other advanced options

No, (you actually can in servers) because you cannot change the dynamic volumes back to partitions. Instead, you must delete all dynamic volumes on the disk and then use the Convert to Basic Disk command

Yes, you'll need to save your data and convert the disk to basic.

Not needed

No, it's either basic or dynamic

1.Remember to back up your data. Information will be lost!
2.Open Disk management > Delete All volumes (right click> delete volume)
3.Right Click Disk > Convert to basic disk
1.Remember to back up your data. Information will be lost!

2.Open Disk management > Delete All volumes (right click> delete volume)

3.Right Click Disk > Convert to basic disk

1.Open disk management check if the status of the disks is healthy otherwise repair the disk before moving.
2.Turn computer off and remove disks and install in other computer's
3.Open disk management > Action > Rescan Disks
4.Right click the disk marked foreign and click Import Foreign Disks and follow the wizard

The Diskpart.exe command

1.Disk management > Right Click the disk marked missing or damaged > Reactivate disk
2.The disk should be marked Online

No, only server operating systems support fault tolerant features such as mirrored volumes and RAID 5 volumes. Win2000 Server and later OS require fault tolerant volumes to be stored on dynamic disks.

4, 3

1.Right click an unallocated region of a basic disk and click delete partition.
All data on that partition is lost.

No, the OS uses one or more paging files on disks as virtual memory that can be swapped into and out of real system memory as the system's load and volume of data dictate.

Simple, spanned, mirrored, striped and RAID5

Simple volume.

Neither DOS or older Windows OS's

Spanned

1.Disk management > Right click unallocated space > click New Volume
2.Click Spanned and follow wizard on your screen

2

32

Cannot

1.Right click the simple or spanned volume you want to extend > click extend volume and follow the screen instructions on your screen

It contains no file system or if its formated using NTFS.

No

No

No

1.You need two physical, dynamic disks to create a stripped volume
2.You can create a striped volume onto a max of 32 disks
3.Striped volumes are not fault tolerant and cannot be extended or mirrored.

1.On disk management > right click unallocated space on one of the dynamic disks where you want to create the striped volume and click New Volume
2.Select striped and follow instructions on the screen

Computers running Windows 2000 server or .NET server. XP cannot host SOFTWARE based fault tolerant disk configurations such as mirrored volumes and stripe sets with parity volumes.

System monitor and Performance logs and alerts

System monitor

Performance logs and alerts

Properties > Tools > Error Checking > Check now

Master File Table (MFT)

Disk cleanup wizard at System tools > Disk cleanup icon

True

32GB

4GB, 2GB

4GB

There are two answers to this question. In widespread usage:
A "boot" volume is the disc volume from which an operating system is bootstrapped. It is the volume whose bootstrap code is loaded and invoked by the machine's firmware.A "system" volume is the disc volume that contains the remainder of an operating system, including all of the system utility programs, DLLs, configuration files, and data files.
However, Microsoft, in its operating system documentation, gets this exactly backwards. In Microsoft's documentation, the "system" volume is the volume containing the bootstrap code, and the "boot" volume is the volume containing the operating system. As William Boswell puts it, in Inside Windows 2000 Server: "You may find [the Microsoft documentation's] definitions to be a little cross-eyed. […] In a nutshell, the boot files in the system partition load the system files from the boot partition. Confusing? You bet it is."

System and Boot volumes can be different volumes, for example, computer boots from volume C:\\ and then loads Windows system files from volume D:\\ (i.e. path to Windows system folder is D:\\WINDOWS). System and Boot volume can also be a single volume, as it is often happens for notebook computers: C:\\ is the volume where from computer boots and Windows system folder is C:\\WINDOWS.

Convert d: /fs:ntfs

Not possible

1.Right click a partition > Change drive letter and paths
2.Click ADD select the drive letter you want to use > Click Ok

NOTE: You cannot change the letter of the system volume or boot volume

Mount points or mounted volumes

You could create a mount point to drive E: as C:\CompanyData, thus seeming to increase the size available on the C: partition, which would specifically allow you to store more data in in the CompanyData folder than you could otherwise do.

1.Right click the partition or volume you want to mount and then click change drive letter and paths
2.Select Add > Click mount in the following Empty NTFS folder and type path or browse

Yes

1.Log on as admin

2.Open My Computer and right-click the hard drive you wish to enable the feature on.Select Properties.

3.Now Click on the Quota tab.Check the Enable quota management checkbox. Check the Deny disk space to users exceeding their quota limit checkbox. This will cause the user to receive an insufficient disk space error their space limit is exceeded. Select the Limit disk space to radio button. Set the amount of disk space to be allocated to the user. Enter value for the Set warning level to option. Click OK.

4.Click both checkboxes log event when a user exceeds their quota limit / warning level

5.On Quota entries > Create a new quota entry and select a user > limit the space to your needs and set a warning level > Click Ok

NTFS compression and Zipped compressed folders

Right click a folder > send to > click compressed (zipped) folder

Properties > Advanced > Check the Compress Contents tot save Disk Space checkbox

Right click an NTFS drive volume in My Computer > Select Properties > Mark the checkbox Compress drive to save disk space > OK

When you move a compressed or uncompressed file/folder from one location to another within the same NTFS volume, the original compression attribute is retained. This is all you need to remember, in all other scenarios the compression attribute is inherited from the new or target location.

You get an error indicating there is inadequate disk space to copy the file to the target.

Encrypting File System

Yes you are allowed, you cannot convert back to a basic disk without deleting all existing volumes (and therefore data on those volumes).

False

True, they are too small

Diskpart.exe you must restart the computer for the conversion process to take effect.

Convert.exe is a command line to convert FAT volumes to NTFS and diskpart.exe converts basic to dynamic disks.

Simple, stripped and spanned

True

Back up your data, use diskpart.exe or Disk management console to delete the volume create a new volume, format the volume as FAT32 and then restore the backed up data.

No, disk quotas on NTFS drive volumes only for individual users not for groups. Therefore you would have to create a quota entry for each member of the group.

Compressed file will become uncompressed when it is moved.

TRUE

True

Domain controllers, print servers, and printers.

SLIP – Serial Line Internet Protocol

PPP – Point to point protocol

PPTP- Point to Point Tunneling Protocol

L2TP – Layer 2 Tunneling Protocol

IPSEC

WWW publishing service

FTP

Network broadcasts

192.168.x.y, 172.16.0.0 to 173.31.255.255 and 10.0.x.y

Finger

LPR

RCP

REXEC

RSH

Telnet

LPQ

NETSTAT

ROUTE

1.Run ipconfig /all
2.ping yourself 127.0.0.1
3.ping a local computer
4.ping the gateway
5.ping a foreign computer (internet)

The initial TCP/IP configuration is set to obtain an IP address automatically. It allows Alternate configuration to create profiles for the home and office. For example DHCP assign IP for the office and static for home.

NWLink

Client Service for Netware (CSNW)

Gateway Service for Netware (GSNW)

CSNW and GSNW

a. Use the setpass.exe command for the Windows XP
b. Change the NetWare password from the Change Password option available when you press CTRL + ALT + DEL

Print Services for Unix

Services for Unix (SFU)

Data Link Control (DLC)

Apple Talk

NetBEUI

1.After the network interface cards (NIC) are installed and connected, go to the bridging computer and open Control Panel, click Network and Internet Connections, and then click Network Connections.
2.Next click both network connections (if you have several segments, hold down the Ctrl key and click all the connections that correspond to all the LAN segments you want to bridge), right-click one, and then click Bridge Connections.

In Windows XP, a Network Bridge is a feature that is used to combine two or more local area networks (such as wired and wireless) into one logical network. Computers on each network can communicate with computers on all of the other networks, sharing files, printers and even an Internet connection.

The network bridge is the only connection and that it now has the IP address and TCP/IP configurations needed to communicate with both networks.

1.Add Remove Programs
2.Select Add/Remove windows components
3.Select IIS > Details
4.Select WWW > Details
5.Select > Remote Desktop Web Connection option and click OK
6.To connect open a browser and type http://<computername>/tsweb

Not acceptable

1.Windows Messenger
2.Email (requires MS Outlook or Outlook express)
3.File (to attach or send by other means)

3398

helpctr.exe

Classless Interdomain Routing

.msrincident

1.Start > Programs > accessories > System Tools > Backup
2.CMD> Ntbackup.exe

Local Administrator and Local Backup Operator

Yes, if he has at least one permission to Read, Read and execute, modify or Full Control.

Administrators

True

Change Journal Attribute

Normal Backup

Differential backup

Incremental backup

Imagine recovering a machine that had a normal backup one year ago, and an incremental backup every week since. To recover that system you would have to restore the normal backup plus the 51 incremental backups.

True

1.Backup wizard > Select Let me Choose what to back up
2.Mark System State and follow instructions

Advanced mode and Wizard mode

Yes

Safe Mode

Safe mode with networking

Safe Mode with command prompt.

Enable boot logging

Last Known Good Configuration

Directory Services Restore Mode

Debugging mode

System Properties > Advanced > Startup and recovery > Settings

None, small memory dump, kernel memory dump, complete memory dump

1.Open services snap in in MMC
2.Right click the service > properties
3.On the recovery tab select the computers response if this service fails (first, second and subsequent failures)

Recovery Console

1.You can run it directly from the CDROM or install it on a partition.

To run from a CDROM:
2.Insert Windows CDROM > Boot to the CDROM > Choose the option to repair “R”

To install (requires 7MB space)
3.CMD> from the i386 folder on the XP CDROM enter the command: winnt32.exe /cmdcons
Then if yo wish to start the machine press F8 to display the startup options.

1.Run gpedit.msc > Computer Configuration | Windows Setting | Security Settings | Local Policies
2.Double click :Recovery Console: Allow Floppy Copy and Access to All drives and All Folders and click the enabled button. Exit from the Group Policy Snap In.
3.Boot into Recovery Console type Set AllowRemovableMedia = TRUE
You now have access to all local hard drive volumes and folders.

System Properties > System restore tab and drag the slider bar

ASR

XP CDROM, the most recent ASR backup floppy disk ad your systems most recent ASR backup media set.

1.Insert the XP CDROM and restart the PC > boot from CD
2.Press F2 to start ASR
3.Insert floppy when prompted and backup media
4.Follow instructions

No, it must be stored locally.

Counter logs

Trace logs

Baseline

Monitor counters Pages/sec and Available bytes

Memory: pages/sec, pages reads/sec, page writes/sec, pages faults/sec, etc

Memory: available bytes, threshold 4MB

PhysicalDisk/LogicalDisk:%DiskTime, threshold close to 100%

PhysicalDisk/LogicalDisk:Disk Queue length, threshold 2

Processor:Interrupts/sec, threshold varies

System: Processor Queue length, threshold 2

/realtime

1.Install the Network Monitor Driver
2.From the Network Connections folder right click a connection > Properties > Installation
3.Select Protocol Component and click ADD > Select Network Monitor Driver and click OK

1.On task manger > Processes tab > right click a process
2.Select set priority > set to desired level

1. On task manger > Processes tab > right click a process
2. Select set affinity option > select processor

Eventtriggers.exe

24 hours, 24 hours

The optimal paging file configuration is to split it evenly over multiple hard disks without placing it on the system or boot volumes. The recommended paging file size is 1.5 times the installed memory. For a system with 256 MB RAM installed, that would be 384MB split over two drives (192MB each).

RAS , Remote Access Services

MSCHAP and MSCHAPv2

MD5-Chap (encrypts usernames and passwords) and TLS Transport Level Security (works with smart cards and other security certificates).

IPSEC

MMC > IPSEC

L2TP

L2TP exploits IPSEC for encryption services, PPTP uses the encryption functions of PPP.

L2TP offers support for tunnel authentication, PPTP does not support tunnel authentication. If you implement IPSEC tunneling in conjunction with L2TP or PPTP, L2TP tunnel auth isn't needed, because this will be handled by the IPSEC tunnel.

RADIUS – Remote Authentication Dial in User Service

Internet Authentication Services (IAS)

Bandwidth Allocation Protocol (BAP) and Bandwidth Allocation Control Protocol (BACP)

Network Connections > Create new connection

Networking Tab

1.Right click a connection icon > Properties > Advanced > Settings > Advanced
2.On network connection settings click > settings for for each service you want to enable > Click OK

192.168.0.1 / 24 so it acts like a router and starts assigning client IP's starting from 2 and so on.

PAP, SPAP, MSCHAP, MSCHAPv2, CHAP

Clear the checkbox “Use Default Gateway on Remote Network” on the general tab of the TCP/IP dialog box.
The checkbox applies when you are connected to a local network and dial up network simultaneously. When checked, data that cannot be sent on the local network is forwarded to the dial up network.

When you make L2TP with IPSEC an IPSEC policy is automatically created that the Internet Key Exchange (IKE) will use certificate based authentication during the negotiation of security settings for L2TP. This means that both the L2TP client and L2TP server must have a computer certificate (also known as machine certificate) installed before a successful L2TP over IPSEC connection to be established.

Edit the registry and change the STOP value to 192. 168.0.200. You would assign the printers static IP addresses from the range above 200.

%systemroot%\windows\pchealth\helpctr\binaries

No

-work with startup settings, expand setup files from compressed cab files, launch system restore

Enables to edit the system.ini file

Enables you to edit the Win.ini file directly

System configuration utility

MIGDB.inf, NTCompat.inf, Sysmain.sdb, AppHelp.sdb

Supports migration from Win9x. Contains matching info and flags applications that are incompatible.

Supports NT4 and 2000. Supports migration from Win9x. Contains matching info and flags applications that are incompatible.

Contains both matching info and compatibility fixes. %Windir \AppPatch

Stores help messages that prompts users for patches, provides URL from which to download patched.

Programs> accessories > Program Compatibility Wizard

All end user modes, plus other options that other software vendors use, limited user account used when an application must operate under a limited security context. It allows the legacy application to interact with the XP user profiles.

QFIXApp or CompactAdminTool downloadable form MS website

Yes, using the CompactAdminTool

1.Installs, removes and updates software providing step by step instructions
2.Used to create, remove , modify applications (with an API)
3.Checks applications for repairs solve DLL conflicts, change DLL default location
4.Protects key ports of an application by “tagging” them. E.g. .exe files are listed as critical files if you delete them the Windows Installer service would attempt to locate it from a network server
5.Keeps track of location of installed files

Windows Installer Packages

All the information necessary to interact with the Windows Installer Service

Using the WinInstallLE (from 2000 CDROM) the full featured software is published by Veritas software.

Window Install Transform File is used to modify and customize a Windows installer package (MSI)

For deploying bug fixes, service releases

Used if you cannot repackage a file to an MSI. Contains instructions about how to install a program and the application properties

Add/Remove programs icon because it is not mandatory that they have the particular application installed.

Both, an assigned application gets installed the first time the user opens the assigned application or a file with a file extension.

1.On Active Directory Users and Computers > Select the domain to deploy the software or OU > Right click >Properties > Group Policy tab
2.Click NEW and create a new Group Policy > Edit > Expand software settings > right click Software Installation > New > Package
3.Type the UNC path to the .MSI package on the networking
4.Select either published or assigned from the Deploy software dialog box and click OK

From the Add/Remove and additionally from the Start> Programs

Repairs an application in the event files are corrupted.

Multilingual User Interface, lets administrators and users specify the language for the user interfaces for 33 languages. Only available for corp users and as an add-on to the English version of XP

Different regions same language contains info on number, currency, time, calendar settings, character code page conversion table etc.

Control Panel > Regional Language Options > Regional Tab

Change regional options ,configure input languages, configure advanced language settings.

Configuration settings, folders, Outlook express, stored dial up connections, phone and modem accessibility, folder options, taskbar settings, mouse and keyboard settings, sound settings, regional options, office settings, network drives, my docs, my pics, favorites

RS232, LPT, Floppy, network

On the old PC:

1.XPCDROM > \Support\Tools\Fastwizard.exe
2.Select transfer method

On new PC:
1.Accessories>System Tools>File and Settings Transfer Wiz
2.Select location of files > Finish

Control Panel > Accessibility options app Enables user to press multiple keys by using one key at the time

Delays keyboard repeat rate

Sound played when num lock, caps lock and scroll lock are pressed

Displays visual warning when windows generates an alert.

Displays captions when sounds are played

Use num keypad to control mouse pointer

Allow automatic reset of accessibility options after idle time, allows you to emit a message when an accessibility feature is turned on/off, allows you to configure alternative access to keyboard and mouse and Administrative Options for applying Accessibility options to desktop and to new users.

Windows key + U

Accessibility option to access magnifier, narrator and on screen keyboard from one central location

Control Panel> Display> Settings> Extend my windows Desktop onto another monitoring

Control Panel > Scheduled Tasks

1.Open printers and faxes folder from the Start menu and select set up faxing
You can also select Add/Remove windows components and mark the Fax services checkboxes
2.To configure: Start> Programs > accessories > Communications > Fax > Fax Console > Follow wizard

XP / 2000

How do I unencrypted an EFS file?
Its automatically done , transparent to the user

No, they are mutually exclusive

Not as long as the reside on an NTFS formatted volume

Folders do not become encrypted,they get tagged with the encryption attribute. The files contained without an encryption folder actually become encrypted.

The server must be trusted for delegation. E.g. domain controller or member server trusted with delegation

1.Right click folder > Properties > General > Advanced > Click the Encrypt contents

%systemroot%

Data recovery Agents -
Users who are designated as recovery agents for encrypted files. Only these users have the ability to decrypt any encrypted file no mater who has encrypted it.

Administrators on the local and domain level

Access Denied Message

Access Denied Message

File is moved

TRUE

Properties> Advanced> Details> Add > Select User? Click OK to close the Advanced Attributes