70-648 · Question #16
Your company has a main office and a branch office. The network contains an Active Directory domain. The main office contains a writable domain controller named DC1. The branch office contains a…
The correct answer is D. Modify the properties of DC2's computer account. To prevent a user from being cached on an RODC, they need to be added to the Denied RODC Microsoft 70-648 Exam Password Replication group. These memberships are configured from the properties of the RODC's account in ADUC. To allow individual RODCs to cache user and computer…
Question
Your company has a main office and a branch office. The network contains an Active Directory domain. The main office contains a writable domain controller named DC1. The branch office contains a read- only domain controller (RODC) named DC2. You discover that the password of an administrator named Admin1 is cached on DC2. You need to prevent Admin1's password from being cached on DC2. What should you do?
Options
- AModify the NTDS Site Settings.
- BModify the properties of the domain.
- CCreate a Password Setting object (PSO).
- DModify the properties of DC2's computer account.
How the community answered
(27 responses)- A7% (2)
- B4% (1)
- C15% (4)
- D74% (20)
Explanation
To prevent a user from being cached on an RODC, they need to be added to the Denied RODC Microsoft 70-648 Exam Password Replication group. These memberships are configured from the properties of the RODC's account in ADUC. To allow individual RODCs to cache user and computer credentials in specific locations, configure the Allowed and Denied Lists on the Password Replication Policy tab for the properties of each individual RODC account in the Domain Controllers OU. Reference: https://sites.google.com/a/pccare.vn/it/ent-admin-pages/password-replication-policy-facts
Topics
Community Discussion
No community discussion yet for this question.