You have an Active Directory Domain Services (AD DS) domain. The domain contains a member server named Server1 that runs Windows Server. You need to ensure that you can manage password policies for…

Question

Options

• AInstall-WindowsFeature RSAT-AD-Tools
• BInstall-WindowsFeature RSAT-ADRMS
• CInstall-WindowsFeature GPMC
• DInstall-WindowsFeature RSAT-AD-PowerShell

• A
  3% (1)
• C
  95% (36)
• D
  3% (1)

Explanation

Installing GPMC (Group Policy Management Console) is the correct first step because domain-wide password policies in AD DS are configured through Group Policy - specifically the Default Domain Policy GPO. To create, edit, or link GPOs from Server1, you must first install the GPMC snap-in, which Install-WindowsFeature GPMC provides.

Why the distractors are wrong:

• A (RSAT-AD-Tools) installs tools like Active Directory Users and Computers and the AD Administrative Center - useful for managing objects and Fine-Grained Password Policies, but not the primary tool for domain-level password policy management via GPO.
• B (RSAT-ADRMS) installs tools for Rights Management Services, which has nothing to do with password policies - a classic trap for confusing ADRMS with ADDS.
• D (RSAT-AD-PowerShell) installs the AD PowerShell module, which lets you query/modify AD objects but cannot manage Group Policy without GPMC being present first.

Memory tip: Think "Password Policies live in Group Policy" → you need GPMC. If the question involves domain policy (not just AD objects), GPMC is your answer.

No community discussion yet for this question.