050-696 · Question #137
You have just finished installing an OES NetWare server named WIDGET1 into a new eDirectory tree named WIDGET-TREE . The server's context is .SLC . WIDGET. The Admin user for this tree has been…
The correct answer is B. The tree root. During OES NetWare installation, the Admin user is automatically assigned as an explicit trustee of the tree root and granted the Supervisor right there, giving it inherited administrative control over the entire eDirectory tree.
Question
Options
- AO=WIDGET
- BThe tree root
- COU=SLC . O=WIDGET
- DOU=CORP.O=WIDGET
How the community answered
(44 responses)- A5% (2)
- B75% (33)
- C5% (2)
- D16% (7)
Why each option
During OES NetWare installation, the Admin user is automatically assigned as an explicit trustee of the tree root and granted the Supervisor right there, giving it inherited administrative control over the entire eDirectory tree.
O=WIDGET is a single Organization object within the tree, not the top of the hierarchy, so a trustee assignment there would not cover objects outside that organization.
The Supervisor right is granted to Admin at the tree root during installation because eDirectory uses inheritance - a right assigned at the tree root flows down to every container and leaf object in the entire tree. This ensures the Admin user has full administrative control over all objects regardless of their context. Assigning it at the root is the only single point that covers the whole tree hierarchy.
OU=SLC.O=WIDGET is the server's own container context, not the location where initial Admin rights are established during installation.
OU=CORP.O=WIDGET is the container where the Admin user object resides, not where the Supervisor trustee assignment is made.
Concept tested: eDirectory Admin trustee assignment during installation
Source: https://www.netiq.com/documentation/edirectory-92/pdfdoc/edir_admin/edir_admin.pdf
Topics
Community Discussion
No community discussion yet for this question.