Two questions

[lck092580]

Hi,

I've been reading the MS Press for exam 70-290 and I have been stuck on one question:

Lock down the desktops of the sales representatives.

My way of tackling this problem would be to use a dsquery to get all the users that belong to the "sales representatives" group then use dsmod to change their profile directory that consists of a mandatory profile.

However, I've been sitting around trying to figure out how to dsquery all users that belong to the "sales rep" group. Is there even such a command? I've read the info in the help file numerous times and still can't figure it out.

-----------

Second question:

"What type of profile will be most useful to maintain a locked-down desktop common to all sales reps."

My belief is to preconfigure a roaming mandatory group profile so no matter where they log on, they'll be stuck with that profile.

However, the answer to this question is:

"Local, mandatory profile"

Doesn't this mean I have to goto each computer and configure the default profile to .man? This also means that if some guy from accounting logs on, they'll be using that profile as well. I'm lost. Can anyone shed some light to this? Thanks.

T

 

[Wishdiak]

lck092580,

1. There is such a command as 'dsquery'. See

http://www.microsoft.com/resources/...erv/2003/standard/proddocs/en-us/dsquery.asp.

I know it's in the book, but I don't have it in front of me.

2. It's possible to push out mandatory user profiles to client computers using Group Policy. Again, I know it's in the book, but I don't have it in front of me.


Wishdiak

http://www.wishdiak.com

 

[laseruk81]

I would say that you would use Roaming profiles hence the ease of administration which should be what Microsoft want. Local profiles are a pain, and since most companies wont include local drives in a backup if your hard-drive goes your stuffed and lose your profile.

DSMod is a quick tool to modify Active Directory objects.

DSQuery will locate specified attributes, such as members of group -

DSQUERY user –startnode "ou=Marketing,dc=SS64,dc=com"

Would fine all users in the Marketing Group
with a DSMOD command the member could then be moved to another location.

 

[lck092580]

Thanks for the replies but does anyone know the correct syntax for the query?

DSQUERY user –startnode "ou=Marketing,dc=SS64,dc=com"

This command will only find objects that are located in the Marketing OU. I'm trying to find all objects that belong to, say, the group "Domain Admins".

Thanks for the continuing help. I really appreciate it.

T

 

[lck092580]

TTT

 

[lck092580]

Nevermind... I was looking into the wrong command. Instead of DSQUERY it should have been DSGET group groupDN -member -expand.

Thanks for all those that helped.