Your network contains an Active Directory domain. The domain contains an enterprise certification authority (CA). You need to ensure that only members of a group named Admin1 can create certificate…

Question

Options

• Athe Certification Authority console
• BActive Directory Users and Computers
• Cthe Certificates snap-in
• DActive Directory Sites and Services

• A
  19% (5)
• B
  4% (1)
• C
  8% (2)
• D
  69% (18)

Explanation

We need to use Active Directory Sites and Services to assign permissions to create certificate templates to global or universal groups. You can delegate the permission to create new templates by assigning permissions to a custom universal group for the CN=Certificate Templates,CN=Public Key Services,CN=Services,CN=Configuration,ForestRootDomain container. 1. Log on as a member of the Enterprise Admins group or the forest root domain Domain Admins 2. Open the Active Directory Sites And Services console. 3. From the View menu, ensure that the Show Services Node setting is enabled. 4. In the console tree, expand Services, expand Public Key Services, and then click Certificate 5. In the console tree, right-click Certificate Templates, and then click Delegate Control. 6. In the Delegation Of Control wizard, click Next. 7. On the Users Or Groups page, click Add. 8. In the Select Users, Computers, Or Groups dialog box, type a user or group name, and then 9. On the Users Or Groups page, click Next. 10.On the Tasks To Delegate page, click Create A Custom Task To Delegate, and then click Next. 11.On the Active Directory Object Type page, click This Folder, Existing Objects In This Folder, and Creation Of New Objects In This Folder, and then click Next. 12.On the Permissions page, in the Permissions list, enable Full Control, and then click Next. 13.On the Completing The Delegation Of Control wizard page, click Finish. Microsoft 70-648 Exam

No community discussion yet for this question.