You are the administrator of 10 Windows XP Professional computers for your company. The computers are members of a Windows 2000 domain. Because the computers are used in a public area in the cafeteria, you audit all security events on the computers. A user named Marc reports that he was using one of the Windows XP Professional computers when the computer suddenly shut down with a STOP error. When the computer restarted, Marc attempted to log on by using the same user name and password that he used before. Marc received the following error message:
“Your account is configured to prevent you from using this computer. Please try another computer.”
Marc states that he did not do anything to cause the STOP error to occur. You want to ensure that Marc can use this computer.
What should you do?
A.
On the computer, save and clear the security log, set the CrashOnAuditFail setting to 1, and restart the computer.
B.
On the computer, modify the local audit policy so that system events are not audited, set the CrashOnCtrlScroll setting to 1, and restart the computer.
C.
In the domain, modify Marc’s Logon Workstations list to include the name of the computer.
D.
In the domain, modify Marc’s account properties to unlock the account.
Explanation:
This message will be displayed if the Windows NT Resource Kit utility, C2 Configuration Manager (C2Config.exe) has been run on the validating server and the “Halt on Audit Failure” security feature is enabled. When the Security Log size reaches capacity, only Administrators will be able to access the server.
To resolve this issue, an Administrator should clear the Security Log and run C2CONFIG to reset the CrashOnAuditFail value to 1.Incorrect Answers:
B: The CrashOnAuditFail, not the CrashOnCtrlScroll, setting should be set to 1. The CrashOnCtrlScroll setting is used to enable a crash with certain keystrokes.
C: Marc was able to log on to the computer before the crash. Marc’s account is already allowed to log on to this computer, and this setting has not changed after the crash.
D: Marc account has not been locked out. Another message would be displayed if Marc’s account was locked out.