Possible Bad Question

From: TechGeekPro (%username%_at_yahoo.com)
Date: 04/02/04 

Date: Fri, 2 Apr 2004 13:51:27 -0500

I'm taking a practice test for the 70-218 using the CramMaster software.

Question:

Jennifer is an employee of a company called XYZ Dimensions Inc. located in
Chicago. Jennifer is currently using a stand-alone Windows 2000 Professional
workstation, named JennyW2KP, to use a locally installed graphics editing
application. As the administrator, you are going to add JennyW2KP to the
Windows 2000 Domain, named XYZDimensions.edu, which currently consists of
one Windows 2000 Server Domain Controller and four Windows 2000 Professional
workstations.

Before adding JennyW2KP to the XYZDimensions.edu Domain, you use the Local
Group Policy MMC snap-in on JennyW2KP and configure the account lockout
policy to lock out Jennifer's local user account after three bad logon
attempts. Afterwards, you configure the Default Domain Controllers Policy to
lockout Jennifer's Domain Account after two bad logon attempts.

What will be Jennifer's result if she attempts to logon to the Windows 2000
Network using her Domain Logon account and providing an invalid password
both times? Select the correct answer.

      A Jennifer will be locked out of the Windows 2000 Network for a
configured amount of time designated by the administrator.

      B Jennifer will be allowed three more logon attempts to the Windows
2000 Network because the Local Group Policy and Default Domain Controllers
Policy cumulatively allow her five bad logon attempts.

      C Jennifer will be allowed one more logon attempt to the Windows 2000
Professional machine because the Local Group Policy allows her three bad
logon attempts.

      D Jennifer will be allowed one more logon to the Windows 2000 Network
because the Local Group Policy overrides the Group Policy.

Correct answer:

      B Jennifer will be allowed three more logon attempts to the Windows
2000 Network because the Local Group Policy and Default Domain Controllers
Policy cumulatively allow her five bad logon attempts.

Explanation:

Jennifer is using a Domain User account, which is impacted by the settings
the administrator configured in the Default Domain Controllers Policy.

My question is, since she is not logging on to a domain controller, I
thought she wouldn't be affected by the default doamin controllers policy,
therefore, her account should be locked out.

Am I way off base here or is this a bad question? 

--
I may not be fully certified, but I am fully certifiable.

Relevant Pages

  • Re: Please help refresh my memory on AD DC
    ... When I boot my Laptop I reach the Logon screeen for XP Laptop and here ... admin account to be able to Login so I can control it from the DC. ... A domain user can by default logon to any domain computer, except Domain controllers. ... A Server has websites already hosted on it in a Workgroup and now I ...
    (microsoft.public.windows.server.active_directory)
  • Re: Urgent: All AD users are locked out
    ... Can you logon to any of your domain controllers? ... Specifically, look at the value for Caller Machine Name, which should tell you where the account lockouts are originating from. ... If you cannot logon to any of your DCs, then try rebooting in DSRM and accessing the event log for the above information. ... we have an w2k3 domain environment, with more than 300 users account. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Admins Account.... Locked Out ever 15 minutes
    ... You probably have an account on a machine that has an old password in it. ... Run LockoutStatus.exe from the link below and select the security template. ... > We have two Domain Controllers at headquarter, and two Domain Controllers, ... > Logon Failure: ...
    (microsoft.public.windows.server.active_directory)
  • Possible Bad Question
    ... Group Policy MMC snap-in on JennyW2KP and configure the account lockout ... lockout Jennifer's Domain Account after two bad logon attempts. ... 2000 Network because the Local Group Policy and Default Domain Controllers ...
    (microsoft.public.cert.exam.mcsa)
  • Re: VisualBasic Out-Of-Process Server problem
    ... guessing that someone in IT has created a group policy that is somehow ... involving this account. ... DCOM got error "Logon failure: the user has not been granted the ...
    (microsoft.public.vb.com)