1. What does DACL stand for and what does it mean.

It stands for Discretionary Access Control List (special permissions).

2. Why would you add permissions to a group instead of the individual? What policy definition do you think is required to support this type of access control implementation?

To make your life easier and to add permissions to groups because many users require same permissions. The GPO policy would be required in order to use this function.

3. List the 5 different access control permissions that can be enabled on user folders and data within a Microsoft windows server.
The 5 permissions are :
Read/Execute, Full control, Deny, Modify, and Write. Modify will add Write by default.
4. What is the lowest level of permission you can enable for a user who must view the contents of a folder and its files? Why is this type of permission necessary?

Read, it is required to see the contents of the folder but does not allow any other capabilities.

5. What are other available password policy options that could be enforced within a Microsoft windows server to improve security?
The available policies are:
Password history, maximum password age, minimum password age, password complexity, and store password using encryption.

6. Is using the option to ‘Store Passwords using reversible encryption’ a good security practice? Why or why not? When should you enable the option to ‘Store Passwords using reversible encryption’?

No, they store the password where they can be retrieved and de-encrypted. You should only use them when application requirements outweigh the needs of the company and/or network requirements.

7. What’s the difference between a Local Group Policy and a domain group policy?

Local group policy applies only to a/the local machine.
Domain group policy is domain wide policy. It can be applied to any and all users on any machine joined to the network.

8. In what order are all available group policies applied?

They are applied in the order of: Local, Site, Domain, and OU

9. What is an administrative template as it refers to windows group policy objects?
The administrative template is a registry based policy settings that appears in the local group policy editor.

10. What is the GPMC? How can GPMC help ensure proper access controls are implemented correctly?
GPMC = Group Policy Management Console, it ensures that policies are applied correctly and to the proper groups and/or OU.