test name: Implementing and supporting windows NT 4.0 in the enterprise

test #: 70-068

I took my Enterprise exam on 16/10/98.

I passed with 921.

You will need to answer 40 questions correctly to pass.

The braindump was invaluable. I would recommend reading the course material from a book such as New Riders MCSE training guide and then going through the brain dumps.  And don't forget the Transcender tests and Microsoft pep tests, they are similar to the exam and contain questions that are on it.

On the exam I marked the larger scenario questions as I went through and returned to them later, on completing the rest of the exam I had about 58 minutes remaining.    The rest of my time was spent doing the multiple domain trust scenario questions.

I was lucky, I had about 20 minutes left at the end of the exam to review all the questions.

REMEMBER in trusts the account domain (where the user accounts reside), is the TRUSTED domain, whereas the resource domain (where the printer or shared directory containing a file, is located) is the TRUSTING domain.

ACCOUNT <------- RESOURCE

Global groups residing on the ACCOUNT domain which contain global users can be placed into local groups on the RESOURCE domain which have been assigned permissions to say a directory or a printer etc.

Also remember global accounts and global groups can be used across trusts.

Whereas local accounts and local groups cannot, they are restricted to the domain controller, member server or workstation upon which they reside.

For questions like:

A user logs onto the CORP domain from a computer in the SALES domain.  What resources can the user access?. The users account resides on the SALES domain.

SALES <----- CORP (Note this could be a two way trust!)

As the user is a member of SALES\domain users and CORP trusts SALES he is also a member of CORP\domain users. He therefore has access to all folders the CORP\domain users have access to.

Just to recap on the domain models: (A must to pass!)

Single Domain

Everything centralised, no trusts, up to 40,000 users (SAM limit of 40MB). Not ideal for distributed organisations with many offices, due to WAN traffic.

Single Master Domain

Accounts centralised in Master domain, resources distributed in separate resource domains which trust the Master (account) domain. Again up to 40,000 users.

RESOURCE ------> MASTER (ACCOUNT) <------ RESOURCE

Multiple Master Domain

Accounts central among master domains, two way trusts exist between each Master domain. Resources are again distributed in separate resource domains which trust the Master (account) domains. The number of users can be infinite.

RESOURCE \------> <------/

RESOURCE

\ /-> MASTER (ACCOUNT) <-\ /

\/ ||

\/

/\ ||

/\

/ \-> MASTER (ACCOUNT) <-/ \

RESOURCE /------> <-----\

RESOURCE

Full Trust

Accounts and resources exist in each domain, all domains are connected by two way trusts. The number of users can again be infinite.  

(ACCOUNT/RESOURCE)(ACCOUNT/RESOURCE)

Domain A ======= Domain B

||\\ //||

|| \\ // ||

|| \\ // ||

|| \\ // ||

|| \\ // ||

|| \\ // ||

|| \\// ||

|| // ||

|| //\\ ||

|| // \\ ||

|| // \\ ||

|| // \\ ||

|| // \\ ||

|| // \\ ||

||// \\||

Domain C ======= Domain D

(ACCOUNT/RESOURCE)(ACCOUNT/RESOURCE)

The questions I think I got wrong were:

The system policy editor.

The question was something about a company with a new software standard which has edited a workstation's registry and wanted to implement the change on all workstations. They wanted to merge the workstation's registry with the ntconfig.pol file located on the PDC netlogon share. They gave various ways to do this. 

I definitely got one question wrong in connectivity. I think it may have been The NetWare migration question in which I selected the mapping file.

The other two I'm not so sure about.

Thanks to everyone who has contributed.

And good luck

Regards

SS