220-802 · Question #599
A small business owner is looking to assign users to a Windows group level. They have the following requirements for these users, and stress that they should receive no more privileges than…
The correct answer is B. Power Users. The Power Users group is the best fit: Power Users can install software and perform many system tasks, but they cannot create new user accounts and cannot modify accounts with higher privilege levels (such as Administrators). This satisfies all three requirements - no ability…
Question
A small business owner is looking to assign users to a Windows group level. They have the following requirements for these users, and stress that they should receive no more privileges than necessary:
- The users should not be able to change passwords for higher level
accounts
- The users need the ability to install software
- The users cannot create new accounts for others
Which of the following group levels will BEST meet these needs?
Options
- ARemote Desktop Users
- BPower Users
- CStandard Users
- DAdministrators
How the community answered
(61 responses)- A5% (3)
- B77% (47)
- C15% (9)
- D3% (2)
Explanation
The Power Users group is the best fit: Power Users can install software and perform many system tasks, but they cannot create new user accounts and cannot modify accounts with higher privilege levels (such as Administrators). This satisfies all three requirements - no ability to change higher-level passwords, ability to install software, and no ability to create accounts. Standard Users (C) cannot install most software, failing that requirement. Administrators (D) have full system access including account creation, violating the least-privilege requirement. Remote Desktop Users (A) only grants remote access rights, not local administrative capabilities.
Topics
Community Discussion
No community discussion yet for this question.