问题：
You are the administrator of a Windows 2000 Professional computer. A user named Maria assists you in performing some administrative tasks. Maria is a member of local Administrators group. Users report that Maria has been viewing and changing their files.
You want Maria to be able to install programs, perform backups and manage printers, but not to view, change or read other users’ files for which permission has not been granted. You want to set up Maria’s account to have minimal rights and permission. You want to accomplish this with least amount of administrative effort.
What should you do? （）
A . Leave Maria in the local Administrators group. Limit her rights by using Local Policies.
B . Leave Maria in the local Administrators group. Change the NTFS provision on other users’ files to deny Maria’s request.
C . Remove Maria from the local Administrators group. Add her to both the Power Users group and Backup Operators group.
D . Remove Maria from local Administrators group. Add her to Power User group. Then grant her NTFS Read permission on the files to be backed up.
You are the administrator of a Windows 2000 Professional computer. A user named Maria assists you in performing some administrative tasks. Maria is a member of local Administrators group. Users report that Maria has been viewing and changing their files.
You want Maria to be able to install programs, perform backups and manage printers, but not to view, change or read other users’ files for which permission has not been granted. You want to set up Maria’s account to have minimal rights and permission. You want to accomplish this with least amount of administrative effort.
What should you do? （）
● 参考解析
By adding Maria’s user account to the Power Users group Maria will inherit the ability to share resources and install programs that is conferred on members of the Power Users group. To grant Maria the ability to backup files she must be added to the Backup Operators group， which has the permissions to backup files. As a member of this group Maria will be able to backup files as she will inherit those rights by virtue of being a member of that group. Maria will not have permissions to read the users’ files as she has been removed from the local administrators group and as neither the Power Users group nor the Backup Operators group has the permissions to read other users’ files.
相关内容
相关标签
