LAB 3
TROUBLESHOOTING LOGIN PROBLEMS
THIS LAB CONTAINS THE FOLLOWING EXERCISES AND ACTIVITIES:
Exercise 3.1 Exercise 3.2 Exercise 3.3 Exercise 3.4 Troubleshooting Login User Rights Troubleshooting Disabled and Locked Accounts Looking at Computer Accounts Troubleshooting Credential Manager
Exercise 3.1
Overview
Working with Local Users and Groups
When users access a computer or network resource, they will need to be authenticated and authorized. To log in to a Windows computer, you will need to use an account with the correct user privileges. During this exercise, you will be reviewing user privileges that apply to Windows login rights. 15 minutes
Completion time
Question 1
What groups are assigned the Allow log on locally user right? Administrators, Backup Operators, Guest, Users.
Question 2
Why was AdminTest able to log in? Part of a administrators group.
Question
What error message did you get? Didnt recognize the
name.
Question 4
Why could you not log in using remote desktop? remote not turned on.
Question 5
What error message did you get now? remote access to the server is not enabled. The remote computer is turned off. Not available on the network
Question 6
What are the different ways you can fix this problem? Enable remote access, turn on remote computer, make available to the network.
Exercise 3.2
Overview
Working with Domain Users and Groups
Account policies are used to protect your user accounts from being easily guessed. Therefore, depending on your domain environment, you will most likely have to deal with disabled and locked user accounts. 25 minutes
What are the settings for Password Policy? Enforce password history:24
Completion time
Question 7
Maximum password age: 42 days Minimum password age: 1 Minimum password length: 7 characters Password must meet complexity requirements: enabled
What are the settings for Account Lockout Policy?
Question 8
Account lockout duration: None Account lockout threshold: 0 Reset account lockout counter after: None
Question
Can you change the Account Lockout settings. If not, why?
Group policy not in effect.
What are the settings for Account Lockout Policy?
Question 10
Account lockout duration: 30 minutes Account lockout threshold: 3 invalid login attempts Reset account lockout counter after: 30 minutes
Question 11
What is the Full [email protected] What is the user logon name?TestUser01
Question 12
What error message did you get? The referenced account is currently locked out and may not be logged on to.
Question 13
What is the first and most obvious thing you should check when a user is having problems logging in to any computer, application or website? If the password is correct
Question 14
What error message did you get?
Question 15
What error message did you get?
Exercise 3.3
Overview
Working with Group Policies
To enhance overall security, computers also have accounts within Active Directory. Because of this, you will be asked to troubleshoot them from time to time. During this lab, you will look at how to reset a computer account. 10 minutes
Completion time
Question 16
What error message did you get?
Question 17
What error message did you get?
Exercise 3.4
Overview
Working with Credential Manager
While the local and Active Directory user accounts and passwords are used often within an organization, they are not the only usernames and password used. As a worker with the Contoso Ltd. you have users who need to manage their usernames and passwords. 10 minutes
Completion time
Question 18
So why did the login fail?
