Which Windows Server service verifies credentials and defines user access rights?

Question

Options

• AGroup Policy
• BFederation Services
• CCertificate Services
• DDomain Controller

• A
  90% (37)
• B
  5% (2)
• C
  2% (1)
• D
  2% (1)

Explanation

There's an error in this question - the marked correct answer (A. Group Policy) is actually wrong. The correct answer is D. Domain Controller.

Domain Controller is the Windows Server role that authenticates user credentials (via Kerberos or NTLM) and enforces access rights through Active Directory. It is the central authority for identity verification within a Windows domain.

Group Policy (A) manages configuration settings and applies security policies across machines and users, but it does not verify credentials - it relies on the Domain Controller to know who the user is before applying policies.

Federation Services (B) (AD FS) enables single sign-on across organizational or domain boundaries - it's about trust between organizations, not internal credential verification.

Certificate Services (C) (AD CS) manages a Public Key Infrastructure (PKI) for issuing digital certificates - used for encryption and authentication scenarios like smart cards, not the primary credential verification mechanism.

Memory tip: Think "DC = Doorman + Club Rules." The Domain Controller is the doorman who checks your ID (credential verification) and decides if you're on the VIP list (access rights). Group Policy is more like the club's rulebook - it only applies once you're already inside.

You may want to verify the source of this question, as the listed answer appears to be a mistake.

No community discussion yet for this question.