nerdexam
Microsoft

70-648 · Question #56

You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do?

The correct answer is B. Run the repadmin.execommand and specify the /prp parameter. In addition to reviewing the list of authenticated users, you may decide to periodically clean up the list of accounts that are authenticated to the RODC. Cleaning up this list may help you more easily determine the new accounts that have authenticated through the RODC…

Configuring Active Directory Infrastructure

Question

You need to purge the list of user accounts that were authenticated on a read-only domain controller (RODC). What should you do?

Options

  • ARun the dsrm.exe command and specify the -u parameter.
  • BRun the repadmin.execommand and specify the /prp parameter.
  • CFrom Active Directory Sites and Services, modify the properties of the RODC computer object.
  • DFrom Active Directory Users and Computers, modify the properties of the RODC computer object.

How the community answered

(39 responses)
  • A
    8% (3)
  • B
    85% (33)
  • C
    3% (1)
  • D
    5% (2)

Explanation

In addition to reviewing the list of authenticated users, you may decide to periodically clean up the list of accounts that are authenticated to the RODC. Cleaning up this list may help you more easily determine the new accounts that have authenticated through the RODC. Membership in the Domain Admins group of the domain in which the RODC is a member, or equivalent, is the minimum required to complete this procedure. To clear all entries from the list, run the command repadmin /prp delete <hostname> auth2 /all. Substitute the actual host name of the RODC that you want to clear. password- replication-policy.aspx

Topics

#RODC#password replication policy#repadmin /prp#authenticated accounts purge

Community Discussion

No community discussion yet for this question.

Full 70-648 Practice