350-001 testking and VCP-310,640-802 dumps

You are a security administrator for certifyme.com. The network consists of a single
Active Directory domain named certifyme.com. The certifyme.com domain contains
Windows Server 2003 computers and Windows XP Professional client computers.
All computers are members of the domain.
Leading the way in IT testing and certification tools, www.certifyme.com
- 11 -

The employee user accounts in certifyme.com are members of the Administrators
local group on client computers. 350-001 You occasionally experience problems managing
client computers because an employee removes the Domain Admins global group
from the Administration local group on the computer.

You need to prevent employees from removing the Domains Admins global group
from the Administrators local group on client computers.

What should you do?

A. Apply a security template to the client computers that establishes the Domain Admins
global group as a member of the Administrators local group by using the Restricted
Groups policy.
B. Apply a security template to the domain controller computers that establishes the
Domain Admins global group as a member of the Administrators domain local group by
using the Restricted Groups policy.
C. Modify the Domain Admins global group by assigning the Allow - Full Control
permission to the Domain Admins global group.
D. Modify the Domain Admins global group by assigning the Deny - Full Control
permission to the Domain Admins global group. 640-802
Answer: A
Explanation: When a Restricted Group policy is enforced, any current member of a
restricted group that is not on the "Members" list is removed with the exception of
administrator in the Administrators group. Any user on the "Members" list which
is not currently a member of the restricted group is added.
Using the "Member Of" Restricted Group Portion of Policy
Only inclusion is enforced in this portion of a Restricted Group policy. The Restricted
Group is not removed from other groups. VCP-310 It makes sure that the restricted group is a
member of groups that are listed in the Member Of dialog box.