70-647 · Question #152
A company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. The company plans to add a large number of members to the Account Operators group. You…
The correct answer is C. Manually alter the access control lists (ACLs) on the Account Operators group to allow the. See the full explanation below for the reasoning.
Question
A company has an Active Directory Domain Services (AD DS) domain. All servers run Windows Server 2008 R2. The company plans to add a large number of members to the Account Operators group. You create a new organizational unit (OU), move the Account Operators group to the new OU, and delegate control of the OU to a server operator. The server operator is unable make changes to the Account Operators group. You need to ensure that the server operator can manage the Account Operators group. What should you recommend? (More than one answer choice may achieve the goal. Select the BEST answer.)
Options
- ASet the dsHeuristic flag to include the Account Operators group in the AdminSDHolder
- BMake the server operator a Domain Administrator.
- CManually alter the access control lists (ACLs) on the Account Operators group to allow the
- DSet the dsHeuristic flag to exclude the Account Operators group from the AdminSDHolder
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- C81% (17)
- D5% (1)
Community Discussion
No community discussion yet for this question.