nerdexam
Microsoft

70-649 · Question #348

Your network contains a domain controller named Server1 and a server named Server2. Server2 has the Windows Deployment Services (WDS) server role installed. You open the Windows Deployment Services co

The correct answer is B. Assign the Server2 computer account permissions to the Computers container.. Approve a pending computer: Read and write permissions to the C:RemoteInstall\MGMT folder (which contains Binlsvcdb.mdb). The actual account of an approved pending computer is created by using the server's authentication token, not the token of the administrator who is performing

Configuring Active Directory Infrastructure

Question

Your network contains a domain controller named Server1 and a server named Server2. Server2 has the Windows Deployment Services (WDS) server role installed. You open the Windows Deployment Services console and see several pending devices. You right-click one of the devices and click Name and Approve. You enter the computer name and receive the following error message:

"The parameter is incorrect." You need to ensure that you can create new computer accounts and update existing computer accounts. What should you do?

Options

  • AAssign the Server1 computer account permissions to the Computers container.
  • BAssign the Server2 computer account permissions to the Computers container.
  • CFrom Windows Deployment Services, change the Computer Account Location settings.
  • DFrom Windows Deployment Services, change the PXE Response Policy to Respond only to

How the community answered

(41 responses)
  • A
    7% (3)
  • B
    78% (32)
  • C
    2% (1)
  • D
    12% (5)

Explanation

Approve a pending computer: Read and write permissions to the C:RemoteInstall\MGMT folder (which contains Binlsvcdb.mdb). The actual account of an approved pending computer is created by using the server's authentication token, not the token of the administrator who is performing the approval. Therefore, in AD DS, you must grant rights to the Windows Deployment Services server's account (WDSSERVER$) to create computer account objects for the containers and OUs where the approved pending computers will be created. To grant permissions to WDS to approve a pending computer 1. Open Active Directory Users and Computers. 2. Right-click the OU where you are creating prestaged computer accounts, and then select Delegate Control. 3. On the first screen of the wizard, click Next. 4. Change the object type to include computers. 5. Add the computer object of the Windows Deployment Services server, and then click Next. 6. Select Create a Custom task to delegate. 7. Select Only the following objects in the folder. Then select the Computer Objects check box, select Create selected objects in this folder, and click Next. 8. In the Permissions box, select the Write all Properties check box, and click Finish. Source:

Topics

#WDS#computer accounts#AD permissions#Computers container

Community Discussion

No community discussion yet for this question.

Full 70-649 Practice