You are required to configure one of the Windows 2000 domain controllers named Ezonexam4 to support several legacy applications that are not Windows 2000 certified.
What should you do? (Select two. Each answer specifies a complete solution).
A. On Ezonexam4, type secedit /configure /db secedit.sdb /cfg
C:\winnt\security\templates\hisecdc.inf /overwrite.
B. On Ezonexam4, type secedit /configure /db secedit.sdb /cfg
C:\winnt\security\templatescompatws.inf /overwrite.
C. On Ezonexam4, use the Security Configuration and Analysis snap-in to apply the Compatws.inf security template.
D. On Ezonexam4, use the Security Configuration and Analysis snap-in to apply the Hisecdc.inf
E. On Ezonexam4, use the Security Templates snap-in to open the Compatws.inf security template.
F. On Ezonexam4, use the Security Templates snap-in to open the Hisecdc.inf security template.
参考答案
正确答案：BC
B,C 解析：Explanation: The Compatws template removes all users from the Power Users group and relaxes the default permissions for members of the Users group. This setting allows members of the Users group to run certain applications that aren't properly designed for Windows security, without granting them the additional administrative privileges (such as the ability to create user accounts) granted to Power Users. Options B and C will support several non-Windows 2000 certified legacy applications.
Incorrect answers:
A: The hisecdc.inf template is applied in this fashion, but it is too restrictive.
D: The hisecdc.inf template is too restrictive.
E: This option only suggests that you open the template and not apply it.
F: Firstly, the hisecdc.inf template will not allow the applications to run and secondly it has to be applied.