The Network Access Account is used by client computers when they cannot use their local computer account to access content on distribution points. For example, this applies to workgroup clients and…

Question

Options

• AYou can configure the Network Access Account on a central administration site.
• BYou should not grant this account interactive logon rights
• CWhen Configuration Manager tries to use the computername$ account to download the content
• DThe Network Access Account is never used as the security context to run programs, install

• A
  91% (29)
• C
  6% (2)
• D
  3% (1)

Explanation

Answer A is FALSE. The Network Access Account cannot be configured on a central administration site (CAS). In a Configuration Manager hierarchy, the CAS is an administrative tier and does not serve content directly to clients; it has no distribution points of its own and no clients report to it. The Network Access Account is configured at primary sites, which are the sites that directly serve clients and host distribution points. The remaining statements are all TRUE: B is a security best practice (no interactive logon rights prevents misuse if credentials are compromised); C correctly describes that ConfigMgr first attempts to use the computer's machine account (computername$) before falling back to the Network Access Account; and D is a critical security restriction - the Network Access Account is strictly for content access only, never for running programs or installing software.

No community discussion yet for this question.