Errata

The Active Directory system is all about managing data. How does it go
from place to place and who has access to it? The division of data access
does not always follow strict departmental lines. If the company is designed
in such a way that billing and sales need access to customer financial
records and customer service and technical support need access to customer
product records, you can divide by function rather than department. Instead of
having four separate OUs based on department, you may be better off with
two OUs, based on the data they need to access.

Don't forget that OUs are automatically arranged in a hierarchical structure
with permissions inheritance. You can create top level OUs based on the
data they need to access and lower level OUs by department. Then you can move
an entire department in and out of data access OUs whenever the
department's needs change.

Because permissions would be automatically inherited from the top level
data access OU to the lower level departmental OU, you wouldn't have to
change permissions for employees on an individual basis. They would inherit
permissions from their departmental OU, which in turn inherits
permissions from the data access OU.

The above information is utterly incorrect. OUs are not security principals, and are not used to grant access to resources. The only permissions that are inherited via the AD structures are the permissions on the AD objects themselves, *not* file system permissions or user rights. Those permissions are granted using security principals- users, computers and groups.

Whoever wrote this seems to have a strong misunderstanding of Active Directory. AD != NDS.

It is stated that "Systems running HPFS must be converted to NTFS before upgrading.
The ACLCONV utility, available from microsoft, can perform this conversion.

I have seen no evidence of ACLCONV having this benefit. And according to Q104097 on
the Microsoft KB, CONVERT performs this function.

Quote:
"ACLCONV: Converts LAN Manager access control lists (ACLs) to Windows NT permissions
on Windows NT file system (NTFS) files.

CONVERT: Converts a partition from FAT or HPFS to NTFS."

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q104097

According to the ResKit the /U parameter can only be used with winnt. For winnt32 you need to use /unattend.

Disk quotas can only be assigned to user objects and not Group objects, as inorrectly implied by this sentence.

The NTFS Permissions should be:

Full Controll
Modify
Read & Execute
List Folder Contents
Read
Write

For all I read in TechNet the rdisk command is no longer available. An ERD can ONLY be created via Ntbackup.

Shouldn't the text be: Update.exe (without the /slip parameter)??? The
description on page 36 (Using Service Packs) is different.

The Answers given by the book are

A. Application Sharing
B. Remote Sharing
C. Remote Administration
D. Application Tuning

The books answers are A and C.

The corect Answer to me is just C. There is no such thing as Application Ssharing Mode. There are 2 modes that may be selected when installing Terminal Server, they are Application Server Mode and Remote Administration Mode. Sharing is not a Mode.

How can a Print device refer to more than one logical printer? A print device
is the physical printer, it cannot refer to logical printers. Logical printers
can refer to more than one print device. Your answers say that is a correct s
tatement and that the only incorrect answer is D.

Range 172.16.0.0 is in the Class B range (not C as stated in the book), isn?t it?

The 3 class C addresses given in the example are 132.124.4.0, 132.24.5.0
and 132.24.6.0. Given that they have to be consecutive addresses to be
supernetted, shouldn't the first address be 132.24.4.0?

ms chapv2 and win 2k only

completly untrue and very misleading...... see

http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q189771&