Practice Quiz

Microsoft MCSA 70-290 Exam Prep

Category - 70-290

Start a Study Session Sign up for Question of the Day
Your company issues a new security policy that does not allow any user to be logged on to the domain beyond the business hours. Users who remain logged on after business hours must be automatically disconnected from the domain. Which of the following should you do to implement the security policy immediately?
  1. Configure the Default Domain Policy GPO to increase scheduling priority for all domain users.
  2. Configure the Default Domain Policy GPO to force domain users to log off when their logon hours expire.
  3. Create a new domain user account and configure the account properties to restrict logon hours to business hours.
  4. Modify the DACL on the Default Domain Policy GPO to assign the Allow - Read permission to the Users group.
Explanation
Answer - B - You should configure the Default Domain Policy GPO to force domain users to log off when their logon hours expire.

Key Takeaway: This security setting determines whether to disconnect users who are connected to the local computer outside their user account’s valid logon hours. It affects the SMB component. When this policy is enabled, it causes client sessions with the SMB server to be forcibly disconnected when the client’s logon hours expire. If this policy is disabled, an established client session is allowed to be maintained after the client’s logon hours have expired.
Previous Next
Was this helpful? Upvote!
Login to contribute your own answer or details
Start a Study Session Sign up for Question of the Day

Top questions

Related questions

Most popular on PracticeQuiz