MCSA/MCSE Self-Paced Training Kit (Exam 70-270): Installing ...

27-2 Chapter 27 Configuring, Managing, and Troubleshooting Security
❑ Practice 2: Use the command-line tool CIPHER.EXE to view the encryption
settings on some files encrypted in Practice 1. Use CIPHER.EXE to encrypt
and decrypt additional files and folders. Type cipher /? at a command
prompt to view all the command-line switches for this tool.
❑ Practice 3: Use the command-line tool EFSINFO.EXE from the Windows XP
Professional Resource Kit to view the encryption settings on some of the files
and folders used in Practices 1 and 2. Type efsinfo /? at a command prompt
to view all the command-line switches for this tool.
❑ Practice 4: Recover encrypted files from a Windows XP Professional computer
in a workgroup. If you have a domain available, perform an EFS recovery by
using the domain administrator account.
■ Configure, manage, and troubleshoot a security configuration and local security
policy.
❑ Practice 1: Open the Local Security Policy console and expand the Local Policies
folder. Select the Audit Policy folder and review each of the settings
available. Select the Security Options folder and examine all the settings.
❑ Practice 2: Open the Local Security Policy console and expand the Account
Policies folder. Select and configure settings available under both the Password
Policy and Account Lockout Policy folders.
❑ Practice 3: Open the Local Security Policy console snap-in and expand the
Software Restriction Policies folder. Right-click the Software Restriction Policies
folder and click Create New Policies from the context menu. Configure a
new policy so that Notepad.exe is restricted from execution. Verify that you
can no longer launch Notepad from the Start menu. Carefully review all the
other options available under the Software Restriction Policies folder.
■ Configure, manage, and troubleshoot local user and group accounts.
❑ Practice 1: Open the Computer Management console and expand the Local
Users and Groups node. Create several test accounts and groups, and then
make some of the accounts members of some of the groups.
❑ Practice 2: Use the Local Security Policy console to enable success and failure
auditing for the Audit Logon Events policy.
❑ Practice 3: Log off Windows XP, and then attempt to log on with an incorrect
password. Afterwards, log back onto Windows XP, and open Event Viewer.
Click the Security node, and examine the events that were generated during
your successful and unsuccessful logon attempts.
■ Configure, manage, and troubleshoot Internet Explorer security settings.
❑ Practice 1: Launch Internet Explorer and visit some Web sites that include
active content. Open the Internet Options dialog box from the Tools menu in