Examkin

Question

Difficulty: HardWindows Administrative and System Management Tools

A systems administrator needs to create a customized management interface for tier-1 help desk technicians that consolidates the Event Viewer, Services, and Device Manager snap-ins into a single window. To maintain administrative control, the administrator must ensure technicians can use the tools but cannot add or remove snap-ins or modify the console layout. Which of the following approaches best satisfies these requirements?

  1. Launch Microsoft Management Console (mmc.exe) in Author Mode, add the required snap-ins, and save the console file in User Mode - Limited Access.Answer
  2. B
    Open Computer Management (compmgmt.msc), customize the System Tools branch, and export the configuration as an Administrative Template (.adm) file.
  3. C
    Configure the Local Security Policy (secpol.msc) snap-in under User Rights Assignment to restrict MMC customization permissions for non-administrators.
  4. D
    Open System Properties (sysdm.cpl), select the Advanced tab, and adjust User Profiles settings to lock administrative tool window layouts.

Answer

The administrator should launch Microsoft Management Console (mmc.exe) in Author Mode, add the necessary snap-ins, and save the console file in User Mode - Limited Access.
Building a custom management console using Microsoft Management Console (mmc.exe) allows administrators to select specific snap-ins (Event Viewer, Services, Device Manager) and combine them into a single file (.msc). By saving the file in User Mode (specifically Limited Access, Single Window or Multiple Window), technicians can execute the management tools within the console but are strictly prevented from adding/removing snap-ins or altering the interface design.

Step-by-Step Solution

1
Identify the required tool for creating custom consolidated administrative views.
Microsoft Management Console (mmc.exe) provides a blank canvas where individual snap-ins (Event Viewer, Services, Device Manager) can be combined.
Pre-packaged consoles like Computer Management do not allow saving customized, restricted subset layouts under a unique console file.
2
Determine the mode required to configure and restrict the console.
The console is built in Author Mode (mmc /a) to grant full rights to add snap-ins and adjust view options.
Author mode provides full access to design options that are hidden when the console runs in User mode.
3
Select the appropriate saving option to enforce layout locks.
Saving the console file (.msc) in 'User Mode - Limited Access' locks the console layout and prevents users from adding or removing snap-ins.
User Mode - Limited Access restricts navigation and hides menu options for modifying snap-in structures.

Key Concept

Microsoft Management Console (MMC) Customization and Console Modes
Rate this question

Topics

Windows Administrative and System Management Tools

More questions from this topic