-
-
If you received this error message "CREATE PROCEDURE permission denied in database 'SMS_XXX'"
What this means is the "Create Procedure" permission is missing from "Webreport_approle" database role.
To Fix this issue, perform the following:
Open a Query window and execute the following SQL statement:
Grant Create Procedure to [Webreport_approle]
Now you are going to ask why does the Webreport_approle need this permission, the answer is it does and I will show why in another blog post.
-
-
What SUS client log Event ID indicates, "Install success"?
-
-
Select B.ADSite as 'AD Site', Count(B.ADSite) as 'Count'
from
(SELECT
Case
When R.AD_Site_Name0 = '' Then '<No AD Site>'
When R.AD_Site_Name0 = NULL Then '<No AD Site>'
When isnull(R.AD_Site_Name0,'one') = 'one' Then '<No AD Site>'
else R.AD_Site_Name0
End as 'ADSite'--,
FROM v_R_System R) as B
Group by
B.ADSite
Order by
B.ADSite
-
-
What is the command line for MBSA to use the SUS server instead MS catalog?
Answer:
Mbsacli /SUS Http://SMSUG_SUS
-
-
Select Distinct
CS.Name0,
NIC.Description0,
NAC.IPAddress0,
NAC.DefaultIPGateway0
from
dbo.v_GS_COMPUTER_SYSTEM CS,
dbo.v_GS_NETWORK_ADAPTER NIC,
dbo.v_GS_NETWORK_ADAPTER_CONFIGUR NAC
Where
CS.ResourceID = NIC.ResourceID
and CS.ResourceID = NAC.ResourceID
and NAC.ServiceName0 = NIC.ServiceName0
and NAC.IPAddress0 != ''
and NAC.IPAddress0 != '0.0.0.0'
Order by
CS.Name0,
NIC.Description0,
NAC.IPAddress0,
NAC.DefaultIPGateway0
-
-
What is the command line for MBSA to use the SUS server instead MS catalog?
-
-
What are RODC and why are they more secure? 
-
-
This weeks reading for the self study group is:
| 8.1 Configuring Password and lockout Policies | 13 | 38 |
| 8.2 Auditing Authentication | 6 | |
| 8.3 Configuring Read-Only Domain Controllers | 19 | |
-
-
What are the values and their meanings for the registry entry for AUOptions?
Answer:
2 = Notify of download and install
3 = Automatically download and notify
4 = Automatically download and schedule installation
Yes, there is no 0 or 1 options :-)
-
-
Microsoft System Center Configuration Manager 2007: Configuration 486
Microsoft System Center Operations Manager 2007: Configuration 503
-
-
What are the values and their meanings for the registry entry for AUOptions?
-
-
Rank the software updates in order of important's
- Critical
- Important
- Low
- Moderate
Answer:
- Critical
- Important
- Moderate
- Low
-
-
Which of the following can be deployed via GPSI?
- Batch file (.Bat)
- Command File (.Com)
- Executable (.Exe)
- Visual Basic Scripting Edition (.Vbs)
- Windows Installer (.Msi)
- Windows PowerShell (.Ps1)
- Windows Software Installation Settings file (.Zap)
Answer:
- Windows Installer (.Msi)
- Windows Software Installation Settings file (.Zap)
-
-
Rank the software updates in order of important's
- Critical
- Important
- Low
- Moderate
-
-
Chris M. might disagree with me on this but a blank password for a local account is arguably the most secure password that account can have! Now I’m sure that some of you will disagree but here is why.
1. A local account using blank password in default setting in windows 2003 setup, can only logon locally.
2. Again arguably all windows 2003 servers are in a secure location. Server room, etc.. If not and anyone can get access to the server then what does it matter if a local account has no password, since they will be able to re-boot the server and do whatever they like to it.
-
-
What type of Video card is needed for EMS to work correctly?
- VT-100
- VT-100+
- VT-UTF8
- VGA
- SVGA
- None
Answer: None is Correct. EMS can administer a Windows 2003 server without a Keyboard, mouse, or display.
-
-
What type of Video card is needed for EMS to work correctly?
- VT-100
- VT-100+
- VT-UTF8
- VGA
- SVGA
- None
-
-
Should Administrators have access to email?
Answer: No, each administrator should have two accounts, 1 - User Account and 1 Administrator account and only the user account should have access to email.
-
-
Should Administrators have access to email?
-
-
select
CS.Name0,
OS.Description0
from
dbo.v_GS_OPERATING_SYSTEM OS,
dbo.v_GS_COMPUTER_SYSTEM CS
Where
CS.ResourceID = OS.ResourceID
Order by
CS.Name0
-
-
This weeks reading for the self study group is:
| 7.3 Managing Software with Group Policy Software Installation | 13 | 33 |
| 7.4 Auditing | 20 | |
-
-
Which of the following can be deployed via GPSI?
- Batch file (.Bat)
- Command File (.Com)
- Executable (.Exe)
- Visual Basic Scripting Edition (.Vbs)
- Windows Installer (.Msi)
- Windows PowerShell (.Ps1)
- Windows Software Installation Settings file (.Zap)
-
-
Define each of the following, with respect to this exam:
- Autonomy
- Isolation
- Security Boundaries
Answer:
- Autonomy: A state or condition in which external control is possible ever while local control is the way things are done.
- Isolation: A state or condition that indicates a clear, precise boundary.
- Security Boundaries: Borders beyond which security authority does not extend.
-
-
Define each of the following, with respect to this exam:
- Autonomy
- Isolation
- Security Boundaries
-
-
Which of the follow are encryptions that can be used for IPSec?
- 3DES
- Data Encryption Standard
- DES
- TDES
- Triple Data Encryption Standard
Answer:
This is a trick questions, all of them are encryptions that can be used by IPSec.
DES is acronym for Data Encryption Standard
3DES & TDES are acronyms for Triple Data Encryption Standard
-
-
Where are Security Templates stored by default on a DC?
Answer:
%SystemRoot%\Security\Templates
-
-
Which of the follow are encryptions that can be used for IPSec?
- 3DES
- Data Encryption Standard
- DES
- TDES
- Triple Data Encryption Standard
-
-
How can you offload IPSec workload from CPU to another device?
Answer:
Some Network cards can encrypt Network traffic using onboard processor, Here is just one example and No I have not used this or any other brand.
http://interfacemasters.com/products/SSL_IPSec_cards.html
-
-
How can you offload IPSec workload from CPU to another device?
