Case Project 3-1

Solving a Password Policy Problem

Youve been called in to solve a problem for CSM Tech Publishing, which is running Windows Server 2016 servers in a domain environment. Strict account policies that require password changes every 20 days, a password history of 24, complex passwords, and an account lockout threshold of 2 are in place because five high-level managers have access to information about future projects that must be kept secret. The problem is that the support team is constantly fielding calls to unlock accounts and reset passwords because users forget them. Worse, many users have taken to writing their passwords on notes stuck to their desks or monitors. What can you suggest to maintain a strict password policy for the five managers but loosen requirements for the remaining staff? What steps would you take?

Case Project 3-2

Working with Service Accounts

Youre installing six new servers as members of a Windows Server 2016 domain. All existing servers are also running Windows Server 2016. Server 1 is running the NetServ1 network service, Server 2 is running the LocServ2 local service, and Servers 3 through 6 are server farms, each running the LBServ service. Security policies forbid using built-in service accounts for configuring authentication on new services. You dont want to have to manage service account passwords, and you want to perform this task with the least administrative effort. Describe what type of service account you should use for each server, and explain your reasons.