2. LHG Inc. is a Dubai-based company providing luxury furniture items to customers around the globe through its retail stores chain and online portal. To maintain round-the-clock services, the IT department has designated the LON-CL1 machine for general use by sales executives. Multiple executives use this machine in rotational shifts. Recently, the company has received some suggestions and requests from the users of this machine for simplifying their daily tasks. In addition, Eric, the Desktop Administrator, is also having some concerns about the usage of this machine. Based on these suggestions, requests, and concerns, Eric has compiled the following tasks: Many users are unable to use the picture password. They are unable to configure or remember the password. In addition, the picture password uses cache memory that has slowed down the machine. Therefore, this feature should be disabled. The users forget to logout their account after they have switched to another account. This results in loss of data due to unsaved information. The users should not be allowed to switch accounts. Any user should not be able to change the taskbar location. This is to avoid problems for other users who are accustomed to uniform settings of taskbar for their sessions. Eric wants that any user should not be able to change the password of any account in the machine. This is to prevent any inconvenience to other users while accessing the machine. Some users are not finding the lock screen useful. Eric has decided to remove the lock screen. How can Eric configure these settings? Experiment To accomplish the assigned task, Eric needs to perform the following tasks: Configure Group Policy Objects (GPO) settings. Test the settings.

Task 1. Configuring GPO settings
to configure GPO setting, you need to erform the following steps:
1. Press the windows+C keys. the Charms bar is displayed.
2. click search. the search charm is displayed.
3. type mmc.exe in the apps text box. and then press the enter key. the MMC window is displayed.
4. Maximize the MMC window.
5. select the file--Add/Remove snap-in option from the menu bar. the add or Remove snap-in dialog box is dispalyed.
6. select the Group policy object editor option under the snap-in column in the Available snap-ins list box.
7. Click the add button. the select Group policy object wizard is displayed.
8. click the finish button. After a few moments, the Local computer policy option in the selected snap-in list box is displayed.
9. click the ok button. the MMC window is displayed.
10. Expand the Local computer policy-computer configuration--Administrative Templates-- system nodes in the left pane.
11. select the Logon fogon folder. After a few moments. the logon setting page is displayed in the middle pane.
12. select the Turn off picture password sign-in option in the midde pane.
13. click the policy setting link on the left-hand side of the middle pane. the Turn off picture password sign-in window is displayed.
14. select the Enablal option.
15. click the ok button.
16. select the hide entry points for fast user switching option in the middle pane.
17. click the policy setting link. the hide entry points for fast user switching window is displayed.
18. select the Enabled optin.
19. click the ok button.
20. Expand the user configuration--Administative Templates nodes in the left pane.
21. select the start menu and taskber folder. the start menu and Taskbar setting page is displayed in the middle pane.
22. select the lock the taskbar option in the middle pane.
23. click the policy setting link. the Lock the taskbar window is displayed.
24. select the Enabled option.
25. click the ok button.
26. Expand the system node under the user configuration--administrative templates nodes.
27. select the Ctrl+Alt_Detele options folder. the Ctrl+Alt_Detele options page is displayed in the middle pane.
28. select the Remove change password option in the middle pane.
29. click the policy setting link. the Remove change password window is displayed.
30. select the Enabled option.
31. click the ok button.
32. Expand the Control panel node under the computer configuration templates nodes.
33. select the Personalization folder.
34. select the do not disply the lovk screen option in the middle pane.
35. click the policy setting link. the do not display the lock screen window is displayed.
36. select the enabled option.
37. click the ok button.
38. close the MMC window without seving any changes.

Task 2. Testing the settings.
to test the settings, you need to perform the following steps:
1. Open the command Promot window.
2. type the gpupdate /force command, and then press the enter key. After a few moments. computer and user policies are updated successfully.
3. Restart the 20687B-LON-CL1 cirtual machine and log on with ADATUM\Administrator as the username and Pa$$w0rd as the password. After a few moments, the start screen is displayed.
4. click the administrator tile.you will notice that there is no option to switch account.
5. Open the desktop screen.
6. Right-click taskbar. you will notice that the lock the taskbar option is displayed.
7. select the properties option. you will notice that the lock the taskbar and taskbar location on screen options are displayed.
8. click the cancel button.
9. press the windows+C keys. the charms bar is dispalyed.
10. click setting. the setting screen is displayed.
11. select the change PC setting option. the PC setting screen is displayed.
12. select the users option in the left name. you will notice that the create a picture password button is displayed.
13. press the the Ctrl+Alt_End keys. you will notice that the change password option is not displayed.
14. click the cancel button.
15. close all the open windows.
16. Ensure that the start screen is displayed.
17. select the administrator--lock option. you will notice that the lock screen is not displayed. Instead, the login screen is displayed.
18. type the Pa$$w0rd in the password text box.
19. press the enter key. the start acreen is displayed.
20. Sign out and revert the both the virtual machines.