18/01/2024, 17:56 Check Answers
6.3.3 Configure Security Options
Lab Report
Time Spent: 22:16
Score: 3/3 (100%)
TASK SUMMARY
Required Actions
Edit the Default Domain Policy security options Show Details
Edit the SupportGPO security options Show Details
Disable the user settings in SupportGPO
EXPLANATION
While completing this lab, use the following information:
Group Policy Object Policy Setting
Accounts: Guest account status Disabled
Accounts: Rename administrator account skycaptain
Interactive logon: Do not display last user name Enabled
Default Domain Policy
Network access: Allow anonymous SID/Name translation Disabled
Network access: Do not allow anonymous enumeration of SAM accounts Enabled
Network access: Do not allow anonymous enumeration of SAM accounts and shares Enabled
Interactive logon: Number of previous logons to cache 0
Interactive logon: Require Domain Controller authentication to unlock workstation Enabled
SupportGPO
Network security: Force logoff when logon hours expire Enabled
Shutdown: Allow system to be shut down without having to log on Disabled
Complete this lab as follows:
1. Edit the Default Domain Policy security options on CorpDC.
a. From Server Manager, select Tools > Group Policy Management.
b. Maximize the window for easier viewing.
c. From the left pane, expand Forest: CorpNet.local > Domains > CorpNet.local.
d. Right-click Default Domain Policy and select Edit.
e. Maximize the window for easier viewing.
f. Under Computer Configuration, expand Policies > Windows Settings > Security Settings > Local Policies.
g. Select Security Options.
h. From the right pane, double-click the policy that you want to edit.
i. Select Define this policy setting.
j. Select Enabled or Disabled (as applicable).
k. Configure the values for the policy as needed.
l. Select OK.
m. Repeat steps 1h–1l to configure the additional policies.
n. Close the Group Policy Management Editor.
2. Configure SupportGPO security options.
a. From the Group Policy Management dialog, expand Support.
b. Right-click SupportGPO and select Edit.
c. Maximize the window for easier viewing.
d. Under Computer Configuration, expand Policies > Windows Settings > Security Settings > Local Policies.
e. Select Security Options.
f. From the right pane, double-click the policy that you want to edit.
g. Select Define this policy setting.
h. Select Enabled or Disabled (as applicable).
i. Configure the values for the policy as needed.
j. Select OK.
k. Repeat steps 2f–2j for additional policies.
l. Close the Group Policy Management Editor.
3. Disable user settings in the SupportGPO.
https://labsimapp.testout.com/v6_0_581/index.html/productviewer/1203/6.3.3/5c4e1d6d-4dd1-4024-ac88-34ea6ed1ae34/outline?nonce=R_IvSMEor8qKoW4st… 1/2
18/01/2024, 17:56 Check Answers
a. From the Group Policy Management console, expand Group Policy Objects.
b. Right-click SupportGPO and select GPO Status > User Configuration Settings Disabled.
c. Close the Group Policy Management window.
Copyright © 2024 TestOut Corp. Copyright © 2024 The Computing Technology Industry Association, Inc. All rights reserved.
https://labsimapp.testout.com/v6_0_581/index.html/productviewer/1203/6.3.3/5c4e1d6d-4dd1-4024-ac88-34ea6ed1ae34/outline?nonce=R_IvSMEor8qKoW4st… 2/2
