Question

You are the IT security administrator for a small corporate network. You are working to increase the authentication security of the domain. You need to make sure that only authorized users have administrative rights to all local machines. Local users and groups can be controlled through a GPO linked to the domain. In this lab, your task is to edit the Default Domain Policy and configure the Local Users and Groups policy settings as follows: Create a policy to update the built-in Administrator local group. Delete all member users. Delete all member groups. Add BUILTIN Administrator to the group. Add ________.

Answer 1

To configure the Local Users and Groups policy settings in the Default Domain Policy, follow these steps: Open the Group Policy Management Console, expand the necessary options, right-click on Default Domain Policy and select Edit. In the Group Policy Management Editor, go to Computer Configuration → Preferences → Control Panel Settings → Local Users and Groups. Right-click on Local Users and Groups and select New → Local Group, then configure the local group settings according to the specifications given.

Step-by-step explanation:

To configure the Local Users and Groups policy settings in the Default Domain Policy, follow these steps:

1. Open the Group Policy Management Console.
2. Expand Forest
3. Expand Domains
4. Expand your domain name
5. Expand Group Policy Objects
6. Right-click on Default Domain Policy and select Edit
7. In the Group Policy Management Editor, go to Computer Configuration → Preferences → Control Panel Settings → Local Users and Groups.
8. Right-click on Local Users and Groups and select New → Local Group
9. Configure the local group settings according to the specifications given. In this case, you would add BUILTIN Administrator to the group and add the authorized users to the group by clicking on Add → Browse and selecting the appropriate user accounts.
10. Click Apply and OK to save the changes.