Answers-User Profiles
1 Individual display settings, network and printer connections.
2 Local, roaming, mandatory and temporary.
3 You would use mandatory roaming profiles when you did not want the user to change any settings. To implement them, create a roaming profile and in the profile path give it the file type of man.

Answers-Configure and Troubleshoot
1 A user object/account.
2 A domain controller.
3 It has complexity enabled, which means it has to comply with the following:
not contain all or part of the user’s account name;
be at least six characters in length;
contain characters from three of the following four categories;Uppercase, Lowercase, Numbers, symbols.

1 Group type is security or distribution. Group scope is universal, global, domain, local and they are used to collect users together.
2 Universal.
3 Built-in and Users.

Answers-Account Management and Administration
1 The Logon hours section of the Account tab in User properties will need to be modified.
2 On the Global Catalog Server.
3 Delegation of the Control Wizard.
4 You can use Ldifde.exe to create a large number of users at once by importing them from another system.
5 Command line account management tools are: dsadd, dsget, dsmod, dsmove, dsrm, dsquery.
6 They can be put into scripts and run automatically.
7 Delegation of Control Wizard.

Answers-File and Folder Permissions
1 Share permissions and NTFS permissions.
2 Share permissions only apply if you access the folder via a network,so they will have full control of the folder.
3 In Windows Explorer,navigate to the folder that is being shared, right-click it and select Sharing and Security. Click the radio button ‘Do not share this folder’ and it will no longer be shared.
4 No – shadow copies are configured on the volume

Next – Physical Server Environment