Exam 70-270:
Installing, Configuring, and Administering Microsoft Windows XP
Professional
Published: February 22, 2008
Language(s): English, French, German, Japanese, Korean, Spanish, Portuguese
(Brazil), Chinese (Simplified)
Audience(s): IT Professionals
Technology: Microsoft Windows XP
Type: Proctored Exam
MCITP Training -
MCSE Training
Special Offer:
Get a discount on this Microsoft Certification Exam from testkingdom.com
Find out how you can save 15 percent off the price of this certification exam,
and help advance your career.
Overview:
Audience Profile
Candidates for this exam operate in medium to very large computing
environments that use Windows XP Professional as a desktop operating system.
They have a minimum of one year of experience implementing and administering any
desktop operating system in a network environment.
Credit Toward CertificationWhen you pass Exam 70-270: Installing, Configuring,
and Administering Microsoft Windows XP Professional, you complete the
requirements for the following certification(s):
* Microsoft Certified Professional (MCP)
Exam 70-270: Installing, Configuring, and Administering Microsoft Windows XP
Professional: counts as credit toward the following certification(s):
Core credit toward Microsoft Certified Systems Engineer on Windows Server 2003
certification
Core credit toward Microsoft Certified Systems Administrator on Windows Server
2003 certification
Core credit toward Microsoft Certified Systems Engineer on Microsoft Windows
2000 certification
Core credit toward Microsoft Certified Systems Administrator on Microsoft
Windows 2000 certification
Note This preparation guide is subject to change at any time without prior
notice and at the sole discretion of Microsoft. Microsoft exams might include
adaptive testing technology and simulation items. Microsoft does not identify
the format in which exams are presented. Please use this preparation guide to
prepare for the exam, regardless of its format.
Skills Being Measured
This exam measures your ability to accomplish the technical tasks listed
below.The percentages indicate the relative weight of each major topic area on
the exam.
Installing Windows XP Professional
Perform and troubleshoot an attended installation of Windows XP Professional.
Perform and troubleshoot an unattended installation of Windows XP
Professional.
o Install Windows XP Professional by using Remote Installation Services (RIS).
o Install Windows XP Professional by using the System Preparation Tool.
o Create unattended answer files by using Setup Manager to automate the
installation of Windows XP Professional.
Upgrade from a previous version of Windows to Windows XP Professional.
o Prepare a computer to meet upgrade requirements.
o Migrate existing user environments to a new installation.
Perform post-installation updates and product activation.
Troubleshoot failed installations.
Implementing and Conducting Administration of Resources
Monitor, manage, and troubleshoot access to files and folders.
o Configure, manage, and troubleshoot file compression.
o Control access to files and folders by using permissions.
o Optimize access to files and folders.
Manage and troubleshoot access to shared folders.
o Create and remove shared folders.
o Control access to shared folders by using permissions.
o Manage and troubleshoot Web server resources.
Connect to local and network print devices.
o Manage printers and print jobs.
o Control access to printers by using permissions.
o Connect to an Internet printer.
o Connect to a local print device.
Configure and manage file systems.
o Convert from one file system to another file system.
o Configure NTFS, FAT32, or FAT file systems.
Manage and troubleshoot access to and synchronization of offline files.
Implementing, Managing, Monitoring, and Troubleshooting Hardware Devices and
Drivers
Implement, manage, and troubleshoot disk devices.
o Install, configure, and manage DVD and CD-ROM devices.
o Monitor and configure disks.
o Monitor, configure, and troubleshoot volumes.
o Monitor and configure removable media, such as tape devices.
Implement, manage, and troubleshoot display devices.
o Configure multiple-display support.
o Install, configure, and troubleshoot a video adapter.
Configure Advanced Configuration Power Interface (ACPI).
Implement, manage, and troubleshoot input and output (I/O) devices.
o Monitor, configure, and troubleshoot I/O devices, such as printers,
scanners, multimedia devices, mouse, keyboard, and smart card reader.
o Monitor, configure, and troubleshoot multimedia hardware, such as cameras.
o Install, configure, and manage modems.
o Install, configure, and manage Infrared Data Association (IrDA) devices.
o Install, configure, and manage wireless devices.
o Install, configure, and manage USB devices.
o Install, configure, and manage hand held devices.
o Install, configure, and manage network adapters.
Manage and troubleshoot drivers and driver signing.
Monitor and configure multiprocessor computers.
Monitoring and Optimizing System Performance and Reliability
Monitor, optimize, and troubleshoot performance of the Windows XP Professional
desktop.
o Optimize and troubleshoot memory performance.
o Optimize and troubleshoot processor utilization.
o Optimize and troubleshoot disk performance.
o Optimize and troubleshoot application performance.
o Configure, manage, and troubleshoot Scheduled Tasks.
Manage, monitor, and optimize system performance for mobile users.
Restore and back up the operating system, System State data, and user data.
o Recover System State data and user data by using Windows Backup.
o Troubleshoot system restoration by starting in safe mode.
o Recover System State data and user data by using the Recovery console.
Configuring and Troubleshooting the Desktop Environment
Configure and manage user profiles and desktop settings.
Configure support for multiple languages or multiple locations.
o Enable multiple-language support.
o Configure multiple-language support for users.
o Configure local settings.
o Configure Windows XP Professional for multiple locations.
Manage applications by using Windows Installer packages.
Implementing, Managing, and Troubleshooting Network Protocols and Services
Configure and troubleshoot the TCP/IP protocol.
Connect to computers by using dial-up networking.
o Connect to computers by using a virtual private network (VPN) connection.
o Create a dial-up connection to connect to a remote access server.
o Connect to the Internet by using dial-up networking.
o Configure and troubleshoot Internet Connection Sharing (ICS).
Connect to resources by using Internet Explorer.
Configure, manage, and implement Internet Information Services (IIS).
Configure, manage, and troubleshoot Remote Desktop and Remote Assistance.
Configure, manage, and troubleshoot an Internet Connection Firewall (ICF).
Configuring, Managing, and Troubleshooting Security
Configure, manage, and troubleshoot Encrypting File System (EFS).
Configure, manage, and troubleshoot a security configuration and local security
policy.
Configure, manage, and troubleshoot local user and group accounts.
o Configure, manage, and troubleshoot auditing.
o Configure, manage, and troubleshoot account settings.
o Configure, manage, and troubleshoot account policy.
o Configure, manage, and troubleshoot user and group rights.
o Troubleshoot cache credentials.
Configure, manage, and troubleshoot Internet Explorer security settings.
Preparation Tools and Resources
To help you prepare for this exam, Microsoft Learning recommends that you
have hands-on experience with the product and that you use the following
training resources. These training resources do not necessarily cover all of the
topics listed in the "Skills Measured" tab.
Classroom Training
* : Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2620B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2619B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2226A: Installing, Administering and Configuring Microsoft Windows XP
Professionnel (2 Days)
* 2223A: Installing, Administering and Configuring Microsoft Windows XP
Professionnel (2 Days)
* 2223B: Installing, Administering, and Configuring Microsoft Windows XP
Professional (2 Days)
* 2618B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2616B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2285A: Installing, Configuring & Administering Microsoft® Windows® XP
Professional
* 2272B: Implementing and Supporting Microsoft® Windows® Vista Professional
* 2617B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2227B: Installing, Administering, and Configuring Microsoft Windows XP
Professional (2 Days)
* 2615B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2225A: Installing, Administering and Configuring Microsoft Windows XP
Professionnel (2 Days)
* 2225B: Installing, Administering, and Configuring Microsoft Windows XP
Professional (2 Days)
* 2285B: Installing, Configuring & Administering Microsoft® Windows® XP
Professional
* 2227A: Installing, Administering and Configuring Microsoft Windows XP
Professionnel (2 Days)
* 2224A: Installing, Administering and Configuring Microsoft Windows XP
Professionnel (2 Days)
* 2621B: Implementing and Supporting Microsoft Windows XP Professional (5 Days)
* 2619A: (5 Days)
* 2224B: Installing, Administering, and Configuring Microsoft Windows XP
Professional (2 Days)
* 2272C: Implementing and Supporting Microsoft® Windows® XP Professional
* 1560C: Updating Support Skills from Microsoft® Windows NT® 4.0 to Microsoft
Windows® 2000
* 2226B: Installing, Administering, and Configuring Microsoft Windows XP
Professional (2 Days)
Microsoft E-Learning
* 2285AE: Installing, Configuring & Administering Microsoft® Windows® XP
Professional
* 1560AE: Updating Support Skills from Microsoft® Windows NT® 4.0 to Microsoft
Windows® 2000
* 2285BE: Installing, Configuring & Administering Microsoft® Windows® XP
Professional
Microsoft Press Books
* MCSE Training Kit (Exam 70-270): Microsoft Windows XP Professional
Practice Tests
* Testkingdom(testkingdom.com)
Microsoft Online Resources
Learning Plan: Get started by creating a step-by-step study guide that is based
on recommended resources for this exam.
Microsoft Learning Community: Join newsgroups and visit community forums to
connect with your peers for suggestions on training resources and advice on your
certification path and studies.
TechNet: Designed for IT professionals, this site includes how-to instructions,
best practices, downloads, technical resources, newsgroups, and chats.
MSDN: Designed for developers, the Microsoft Developer Network (MSDN) features
code samples, technical articles, downloads, newsgroups, and chats.
Have Questions? For advice about training and certification, connect with peers:
* Visit the training and certification forum
For questions about a specific certification, chat with a Microsoft Certified
Professional (MCP):
* Visit our MCP newsgroups
To find out about recommended blogs, Web sites, and upcoming Live Meetings on
popular topics, visit our community site:
* Visit the Microsoft Learning community
This blog provide all info on Microsoft, Cisco, COmptia and more exams training at certkingdom.com
Tuesday, September 1, 2009
Exam-70-270-Training
Thursday, August 27, 2009
Program Benefits and Member Sites – FAQ
asked questions regarding program benefits, member site access, and Windows Live
ID.
Q. What are the benefits of becoming MCP-certified?
A. By becoming a Microsoft Certified Professional (MCP) and earning Microsoft
Certifications, you keep your skills relevant, applicable, and competitive.
* Learn more about certification benefits
MCITP Online Training -
MCITP Online Certification -
MCITP Online Exams
Q. What will I find on the Microsoft Certification member site?
A. You will find:
* A downloadable certificate of achievement for MCPs
* Your Official Microsoft Certification transcript
* A tool to create and download custom credential logos
* Additional information and offers for MCPs
* Access to your contact preferences and profile
* The Microsoft Certified Trainer enrollment tool
Q. Are welcome kits still available for new MCPs?
A. New members of the community are welcomed with a Microsoft Certification ID
(or MCP ID)—the key to all of the benefits on the MCP member site. The
Certificate Manager tool on the MCP member site allows you to create, download,
print, and store your customized Certificate of Achievement as soon as your new
certification appears on your transcript. The most up-to-date versions of the
program agreement and contact sheet are also available online. To accommodate
customer preferences and an environmentally conscious world, we no longer mail
out welcome kits.
* Sign in to the MCP member site
Q. What is Charter Member certification?
A. Charter Members are the pioneering group of individuals who achieve a
certification shortly after the certification becomes available. When a Charter
Member certification is offered, it is available to candidates who achieve the
new certification within six months after the certification exam is released.
Charter Members are recognized by receiving the Charter version of the
certificate.|
MCITP Training -
MCSE Training -
MCTS Training
Q. How much time do I have to order my Charter Member kit?
A. You can order your Charter Member kit up to six months after the exam
availability date.
Q. I have heard that United States veterans receive reimbursement for MCP exams.
What is the benefit?
A. United States veterans who take MCP exams can use their Department of
Veterans Affairs (VA) education benefits to cover examination fees. If you are
eligible for Montgomery G.I. Bill (Chapter 30), VEAP (Chapter 32), and
Dependents Educational Assistance (Chapter 35) benefits, you can receive
reimbursement for exam fees of up to US$2,000 per exam.
Sunday, August 23, 2009
Preparing for and Taking an Exam – FAQ (EXAM SCORING)
Preparing for and Taking an Exam – FAQ ( EXAM SCORING)
Fully prepare for and understand the exam process. On this page, you can find
answers to frequently asked questions about exam registration, preparation,
scoring, testing technologies, question types, formats, policies, and security.
Q. How are exam scores calculated?
A. Here is some general information about exam scoring:
* There is no penalty for guessing. If you choose an incorrect answer, you
simply do not earn credit for that item. No points are deducted for incorrect
answers.
* If a question specifies that you must choose multiple correct answers, you
must choose the exact number of correct answers specified in the question in
order to earn the credit for that item.
* Some questions on the exam might not be included in the calculation of your
score. To gather data to update and improve the quality of Microsoft
Certification exams, we need to present new content to candidates without
counting the results toward their score.
* All Microsoft exams are scaled such that the passing score is 700. The actual
cut score (the number of items you need to answer correctly) is determined by a
group of subject-matter experts. A common misperception is that you must answer
70 percent of the items correctly in order to pass the exam; however, the actual
percentage varies from exam to exam and may be more or less than 70 percent,
depending on the input provided by the subject-matter experts who helped us set
the cut score. After you complete your exam, the points you earned are compared
with the cut score to determine whether the result is pass or fail.
Prometric's
software generates the scaled score and bars shown on your score report from
scoring information provided by Microsoft.
Q. How should I interpret my score report?
A. There are several important pieces of information on the score report:
Your scaled score and pass/fail status: All Microsoft Certified Professional
exams are scaled so that a passing score is 700. Any score of 700 or greater is
a "pass." Any score below 700 is a "fail." Different passing scores do not
reflect different levels of examinee knowledge.
Because of the way Microsoft sets the cut score, we cannot guarantee that an
examinee who scores 900 is more knowledgeable in the exam's topic area than an
examinee who scores 800. We can only say that both examinees are at least
minimally qualified. The same is true for failing scores. An examinee who scores
400 is not necessarily less knowledgeable in the exam's topic area than an
examinee who scores 600. In this case, both examinees fail to meet the minimum
qualifications for the certification. This is why your exam scores do not appear
on your transcript.
Your section scores: The bars on the score report show your relative performance
in the various subject areas covered by the exam--the longer the bar, the
stronger your performance in that areA. The length of the bars does not
correspond to the number of questions you answered correctly on that subject.
Additionally, because the subject areas contain varying numbers of items, the
length of any bar or combination of bars does not correspond directly to your
overall exam score or Pass/Fail status.
Q. What does the score report look like?
A. The score report details the areas in which a candidate demonstrates
technical strength and the areas in which the candidate shows a need for
improvement. The report provides a numeric score for overall exam performance as
well as a bar graph for each subject area of the exam.
MCITP Training -
MCSE Training -
MCTS Training
Q. What does my numeric score mean?
A. Microsoft provides numeric scaled scores on all exams that provide the
candidate with some indication of their level of performance on the exam.
Microsoft has worked with customers and testing industry experts to create an
exam scale that would be consistent across all exams. The scale requires a
minimum passing score of 700 on all exams. If you receive a score of 700 or
above, it means that you are at least minimally qualified; if you receive a
score below 700, it means that you are not minimally qualified. Because of the
way we set our cut scores, no other judgments about the numerical score obtained
can be made.
Q. What do the bars on the score report mean?
A. The bars indicate how strongly an examinee performed on each skills section
of the exam. The closer the bar comes to the strong end of the continuum, the
higher the score on that skills section. The closer the bar is to the "needs
development" end of the continuum, the lower the score in that skills section.
These results will help all examinees determine areas where they have strengths
and where they need improvement. The skills sections listed on the score report
correspond to those listed in the skills matrix provided in the Exam Preparation
guide.
Q. Does the score report show a numerical score for each section?
A. No. The score report provides a numerical score to reflect pass/fail status
only, in order to prevent confusion. Because exam sections often contain a
different number of questions, combining their numerical results would rarely
provide an accurate final exam result. As an alternative to providing a
numerical score for each section, we provide score bars to show an overview of
areas of strength and weakness relative to overall performance.
On upgrade exams, however, candidates must pass all sections in order to pass
the exam because each section represents a feeder exam. As a result, these
candidates receive a numerical score for each component exam.
Q. The bars on the score report show that I have scored more than 70 percent,
but I didn't pass the exam. Why is this?
A. Each section of the exam may contain a different number of questions;
therefore, the relative results on individual exam sections might not reflect
your final exam result. In other words, there is no one-to-one relationship
between the length of the bars and your pass/fail status.
Q. How many points is each item worth?
A. In most cases, each item is worth one point; however, some questions or
question types may be worth more than one point. Microsoft does not provide
information about how many points specific items are worth.
Q. Is there a penalty for guessing? Are points deducted for incorrect answers?
A. No. Points are not deducted for incorrect answers; if you answer incorrectly,
you will simply not earn the credit associated with answering correctly.
Q. Why are some questions unscored?
A. Microsoft is committed to continually updating exam content and utilizing
innovative testing techniques. Our goal is to increase the relevance of our
exams, offer a more comprehensive and valuable certification, and ensure the
security of exam content. To gather the data needed to update and improve the
quality of exams, we need to present new content to candidates without counting
the results toward their score.
Q. I have taken this exam multiple times and have received the same score every
time. Does this indicate an error in the results computation?
A. No, it does not indicate an error. It is not uncommon for candidates to
obtain similar or identical scores on multiple attempts of an exam. Receiving
the same score on multiple attempts does not indicate that the program computing
the results is in error.
Q. I scored zero in one of the sections. How is this possible?
A. The number of questions that appear for each section is determined by subject
matter experts. As a result, some sections have more questions than others. It
is not uncommon to score zero when a section contains relatively few questions.
Q. I experienced significant delays between some of the questions. Did these
delays impact the calculation of my score?
A. In some cases, you may experience a delay of up to a minute while your next
question loads. Prometric's software is designed to accommodate this event. A
delay between questions does not impact the responses you have recorded. Your
exam will be scored correctly regardless of delays between questions.
Q. Can I find out whether I answered a specific question correctly, or whether
this answer affected my pass/fail status?
A. No. By not providing this information, we are better able to maintain exam
security.
Q. Where can I find additional information about my areas of weakness?
A. Although Microsoft Certification exams provide feedback about the areas where
examinees need to develop their skills further, Microsoft Certification exams
are not designed to provide detailed feedback. We encourage you to use practice
tests from Microsoft Certified Practice Test Providers (PTPs) as diagnostic
tools to identify your strengths and weaknesses.
Saturday, May 23, 2009
Upgrading Your MCSA on Windows Server 2003 Certification
Upgrading Your MCSA on Windows Server 2003 Certification
Let us say that you have your MCSA on Windows Server 2003, and you want to upgrade your certification to Windows Server 2008, or you are not certified at
all on Windows Server 2003 and want to earn your MCTS on Windows Server 2008. The first
thing to remember is that this is a series of new certifications and while there is an upgrade path from Server 2003 to Server 2008, you are NOT earning an MCSE
on Windows Server 2008,
rather an MCTS or MCITP on windows
Server 2008. Also remember that the era of the
MCSA/MCSE certifications has ended –
it is now MCTS and MCITP (and others beyond the scope covered here) and have an
entirely different focus.
MCITP Online Training
- MCITP Online Certification -
MCITP Online Exams
The Microsoft Certified Technology Specialist (MCTS) has a different focus then the Microsoft Certified Information Technology Professional (MCITP), and
the former is not a prerequisite for the latter (nor is it a “lesser” certification!). The MCTS certification
is aimed at IT professionals who work with a specific Microsoft product or platform. An IT pro who has earned an MCTS is expected to possess depth and
breadth of knowledge and skills on a particular product or platform. They are expected to manage and maintain the product or platform on a daily basis. They are also more concerned
with the day-to-day operations and short-term planning rather than long-term planning and design and design.
There are three MCTS tracks available on Windows Server 2008:
MCTS: Windows Server 2008 Active Directory Configuration; MCTS: Windows Server 2008 Network Infrastructure Configuration, and MCTS: Windows Server 2008
Applications Infrastructure Configuration. You can take each of the tests individually, or you can take the upgrade path by taking only one test. The
easiest route to upgrade your certification, if you are already an MCSA on Windows Server 2003, is take (and pass, of course) the 70-648 TS: Upgrading your
MCSA on Windows Server 2003 to Windows Server 2008, Technology Specialist exam. Passing this exam will earn you the MCTS: Windows Server 2008 Active Directory,
Configuration (equivalent to the 70-640 exam) and the MCTS: Windows Server 2008 Network Infrastructure Configuration (equivalent to the 70-642 exam). The last
of the three MCTS certifications – MCTS: Window Server 2008 Application Infrastructure Configuration – is earned by passing the 70-643 exam. The other
part to earning your MCTS on any one of the three paths is to pass the 70-646 exam Windows Server 2008, Server Administrator.
Monday, March 9, 2009
Microsoft Certification more info
&
MCSE : Microsoft Certified Systems Engineer.
Both required core knowledge of Microsoft windows server 2003..
For mcsa & mcse training, 1st know the exams required to acquire these certifications
For Mcse Training :
Core exams :
70-290, 70-291, 70-293, 70-294.
core client exams :
70-620 or 70-270
core design exam for mcse:
70-297 or 70-298
one elective exam for mcse:
70-298 or 70-297
or
you can select any different exam from the list mention on Microsoft site
For Mcsa Training :
2 core exams on networking:
- 70-290, 70-291
one client exam:
- 70-620 or 70-270
elective exam:
select anyone from here
after u have decided which course u want to do.. mcsa or mcse???
Decide your mcsa mcse training method.
whether to join any institute or study at home...
which is best option for mcsa mcse training join a course or self study...
click here for more info mcitp training
click here for more info mcst training
Saturday, September 20, 2008
Network+ 2005 Training - Domain 1.0
Network+ certification is to certify
technicians understand the basics of networking, the OSI model, can describe the
features and functions of network components, has the skills necessary to
install and troubleshoot networking hardware.
CompTIA has had the Network+ certification around for several years. It is
updating the certification with the 2005 objectives. This tutorial is based on
the 2005 objectives to give candidates a chance to understand the new
certification requirements.
CompTIA provides this overview of the "Domain Areas" covered by the Network+
2005 objectives:
| Network+ Certification Domain Areas | % of Examination |
| Introduction to Networking | |
| 1.0 Media and Topologies | 20% |
| 2.0 Protocols and Standards COMING SOON! | 20% |
| 3.0 Network Implementation COMING SOON! | 25% |
| 4.0 Network Support COMING SOON! | 35% |
| Total | 100% |
This tutorial covers Domain 1.0, Media and Topologies. Future tutorials will
cover the other three domains.
Before you jump into one of the domain areas above, you may want to refresh
yourself on networking definitions and concepts in our Introduction to
Networking section. This is great for people new to networking or people who
need a refresher on key terms and concepts. This section also provides an
overview for the networking topics you will learn in this course.
In addition, Testkingdom.com has provided several free practice exams to help
you prepare for the Network+ exam.
Testkingdom.com is not affiliated with CompTIA or any
organization whose trademark appears in this tutorial. Testkingdom.com offers
free tutorial for CompTIA certifications
but is not connected to CompTIA in any shape or form. Please do not confuse us
for CompTIA. We are not a non-profit, though at times, we feel like we are.
Windows Server 2003 Group Policy and Security - 70-291 (part 2)
This is by no means a definitive list. We will make some recommendations to you
for your Group Policy settings. This could be considered a starter list. You
should review all of the Group Policy settings to see how they fit in your
business requirements.
There are three categories of group policy settings underneath two broad groups:
Computer Configuration and User Configuration. Inside those are Software
Settings, Windows Settings, and Administrative Templates.
Policies you apply within Computer Configuration apply to the whole computer
(and all of its users) while settings you apply within User Configuration apply
to a the specific user.
We are offering these as recommendations. You should review all group policy
changes prior to implementation.
Computer Configuration: Windows Settings: Security Settings: Account Policies:
Password Policy
Group Policy Objects to Set: Enforce password history; maximum password age;
minimum password age, minimum password length; Password must meet complexity
requirements.
By default, these policy objects are set. In our environment, password history
is set to '6 passwords remembered'; maximum password age is set at 45 days; and
minimum password length is set to 7 characters.
There are frequent questions surrounding the minimum password age of '1 day' and
why it is important to have a minimum password age. If a user is forced to
change their password every 42 days (as in the default policy), the user could
simply change their password the required number of times to get back to their
original password. To prevent this security issue, a minimum password age is set
so the user can only change their passwords once a day.
Computer Configuration: Windows Settings: Security Settings: Account Policies:
Account Lockout Policy
There are three policy settings in this category: account lockout duration;
account lockout threshold; reset account lockout counter after. We recommend
setting the Account lockout threshold to '5 invalid login attempts.' This will
automatically set the other two settings to 30 minutes.
This setting will lock a user account for 30 minutes if there are five invalid
login attempts. This helps stop hackers from using automated password guessing
software on user accounts.
Computer Configuration: Windows Settings: Security Settings: Local Policies:
Audit Policy
There are several security items you can audit under the audit policy. To audit
in Windows means to record the actions in the local logs. We recommend you audit
the successes and failures of: account logon events, account management, logon
events, policy change, and privilege use. We recommend you audit the failures of
the rest of the items.
Computer Configuration: Windows Settings: Security Settings: Local Policies:
Security Options
We recommend you set Accounts: Rename administrator account to enabled and
rename the administrator account to something else. This will help increase
security by not giving a potential hacker the username at the start.
You should also consider setting Interactive logon: Do not display last user
name to Enabled. This will display a blank username field at every boot - the
user will be responsible for remembering their username. If someone gains access
to the workstation physically, they would need to know a username to attempt to
login.
Computer Configuration: Administrative Templates: Windows Components
The Administrative Templates section of Group Policy allows you to set policies
for the Windows operating system and its components.
Computer Configuration: Administrative Templates: Windows Components: Internet
Explorer
If you have a proxy or ISA server, you may want to set Make proxy settings
per-machine. This policy will allow you to set the policy settings for one
account and then every account that logs in will receive the proxy settings.
Computer Configuration: Administrative Templates: Windows Components: Internet
Information Services
If you set Prevent IIS installation, you can prevent rogue IIS servers from
popping up on the network.
Computer Configuration: Administrative Templates: Windows Components: Windows
Messenger
We do not like the Windows Messenger (the MSN like instant messenger application
Microsoft installs by default). We enable Do not allow Windows Messenger to be
run and Do not automatically start Windows Messenger initially.
Computer Configuration: Administrative Templates: Windows Components: Windows
Update
If you are using SUS or want the machines to perform automatic updates, you can
configure those options in this section.
User Configuration: Windows Settings: Internet Explorer Maintenance
There are several configuration options for Internet Explorer. If you want to
force users to have the same homepage or options, you can configure these
options.
There are hundreds of policy settings you could potentially apply. We recommend
caution and to only apply policies that are absolutely necessary - leaving the
rest as "Not Configured." This will make your user community much happier.
The Microsoft 70-291 exam and study
guide is design to complete knowledge, I recommend login on to
www.testkingdom.com to get the complete
study solution for professional and students who are seeking to changing their
career to new level.