The ABC.com network consists of a single Active Directory domain named ABC.com.
You want to improve the security on the Windows Server 2003 domain controllers by configuring
enahnced password policies and audit settings.
Which security template should you apply to the domain controllers?
A.
Setup security.inf.
B.
Hisecws.inf.
C.
DC security.inf.
D.
Securews.inf.
E.
Securedc.inf.
F.
Compatws.inf.
G.
Rootsec.inf.
Explanation:
Securedc.inf contains policy settings that increase the security on a domain
controller to a level that remains compatible with most functions and applications. The template
includes more stringent account policies, enhanced auditing policies and security options, and
increased restrictions for anonymous users and LanManager systems.
Reference:
Craig Zacker, MCSE Self-Paced Training Kit (Exam 70-293): Planning and Maintaining a Microsoft
Windows Server 2003 Network Infrastructure, Microsoft Press, Redmond, Washington, 2004,
Chapter 10
Dan Holme, and Orin Thomas, MCSA/MCSE Self-Paced Training Kit: UABCrading Your
Certification to Microsoft Windows Server 2003: Managing, Maintaining, Planning, and
Implementing a Microsoft Windows Server 2003 Environment: Exams 70-292 and 70-296,
Microsoft Press, Redmond, Washington, 2004, Chapter 9