70-647 · Question #121
Your network consists of one Active directory domain. The functional level of the domain is Windows Server 2008 R2. The organizational units (OUs) are configured as shown in the exhibit. (Click the…
The correct answer is B. Delegate the Reset inetOrgPerson passwords and force password change at next logon. To ensure that Help desk users that are part of EmpOU should possess only the minimum number of required rights in the domain to reset all user passwords, except IT administrator passwords and manager passwords, you need to delegate the inetOrgPerson passwords and force…
Question
Your network consists of one Active directory domain. The functional level of the domain is Windows Server 2008 R2. The organizational units (OUs) are configured as shown in the exhibit. (Click the Exhibit button.) The Human Resources OU does not contain user accounts. Help desk technicians respond to all user service requests. You need to plan the management of all users on the network. The solution must meet the following requirements:
- Help desk technicians must have only the minimum number of required
rights in the domain.
- Help desk technicians must be able to reset all user passwords except
IT administrator passwords and manager passwords. What should you include in your plan?
Exhibit
Options
- ADelegate the Reset user passwords and force password change at next logon permission to
- BDelegate the Reset inetOrgPerson passwords and force password change at next logon
- CDelegate the Reset user passwords and force password change at next logon permission to
- DDelegate the Reset inetOrgPerson passwords and force password change at next logon
How the community answered
(34 responses)- A3% (1)
- B71% (24)
- C15% (5)
- D12% (4)
Explanation
To ensure that Help desk users that are part of EmpOU should possess only the minimum number of required rights in the domain to reset all user passwords, except IT administrator passwords and manager passwords, you need to delegate the inetOrgPerson passwords and force password change at next logon permission to the support technicians in the EmpOU. This is because the Help desk users are the part of EmpOU. The inetorgperson objects can be used by the Delegation Wizard to set the required Active Directory access permissions on objects to give users various levels of control. It will enable Help desk users to reset all user passwords, except IT administrator passwords and manager passwords.
Topics
Community Discussion
No community discussion yet for this question.