Review questions.
Question Why is physical security so important, especially for AIDS domain controllers?
Answer.
Adds Domain controllers store all information about all users, computers, groups and any other objects
in the domain.
If someone gains physical access to the server or its hard drive, this person can circumvent security
guards easily and retrieve all of this information.
This person then can use the information to attack your network or could modify your domain controller
and put it back into the network with malicious intent.
Question You need to implement auditing policies for domain authentication and changes to directory
services.
What is the best way to implement these auditing settings?
Answer.
If you want to enable auditing, it is very important that you configure the same auditing settings
for all relevant servers on which the event might occur.
If you want to configure auditing for domain authentication or changes in ads, configure these settings
in the default domain controllers policy or a GPO that is linked to the domain controllers.
Oh, you.
Question.
Your organization requires you to maintain a highly reliable and secure ads infrastructure.
It also requires that users can access corporate email from the Internet by using Outlook Web access.
You are considering implementing account lockout settings.
What must you consider?
Answer.
Account lockout settings are not just a security feature, they also provide attackers an easily accessible
Docx interface.
If Outlook Web access is accessible from the Internet, you must configure additional protocols or services
to ensure that only your domain users are able to enter their logon credentials.
Other users must not be allowed to use the website to enter false passwords and lock out valid user
accounts.
Tools.
The following table lists the tools that this module references tool use for.
Where to find it.
Active Directory users and computers managing objects within ads such as users, groups and computers.
Server manager.
Active Directory Administrative Center managing objects within ads such as users, groups and computers.
Server manager.
Group Policy Management.
Managing Reporting Backup and restoration of GPOs server manager pub decor EMC manually updating the
GPOs of local machines.
Command line.
Common issues and troubleshooting tips.
Common issue.
Troubleshooting tip.
You have configured advanced auditing policy settings, but they do not apply verify that you have set
the audit force audit policy subcategory settings, Windows Vista or later to override audit policy
category settings policy settings under computer configuration backslash policies backslash windows
settings backslash security settings backslash local policies backslash security options you have configured
auditing of account log on or directory services changes.
Now you are testing them, but you cannot find the events in your server's event log.
If you have multiple domain controllers, you need to look at the security log of every domain controller.
Also ensure that you have the auditing policy configured for every domain controller.