70-215 QOTD 15/06/2004

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

You are the Windows 2000 domain administrator of a manufacturing company. The company is using Windows 2000 Active Directory as the directory service. Recently, the management has decided to upgrade all the Windows 98 systems to Windows 2000 Professional. You prepare the installation distribution folder and answer file for each department's IT support technician.

By default, any domain user account can create up to 10 computers accounts. However, in the majority of departments, there are more than 10 Windows 98 systems. What should you do to ensure the success of the upgrading? Select all that apply


A) Add all IT support technicians as a member of Windows 2000 Domain Admins group.

B) Add all IT support technicians as a member of Windows 2000 Server Operators group.

C) Pre-create a computer account for each Windows 98 systems.

D)Grant the "Create Computer Objects" to all IT support technicians.

E)Create a ADSI script to override the default limit of the number of computer accounts an authenticated user can join a domain.

 

Well this is disapointing only the armadillo with something to say, no change there then.

Ahh well, the answer:

Correct answer is: CDE

Explanation: Windows 2000 grants the "Add workstations to domain" privilege to the Authenticated Users group by default. When this privilege is enabled, authenticated users can bypass the access control list (ACL) check for up to a predefined maximum value. To prevent misuse, the maximum number of machine accounts any authenticated user can join is 10 by default.
To resolve this problem, use the appropriate method.

-- Method 1: Pre-Create the User's Computer Account.

-- Method 2: Grant the "Create Computer Objects" and "Delete Computer Objects" Access Control Entries (ACEs) to the User.

-- Method 3: Override the Default Limit of the Number of Computers an Authenticated User Can Join to a Domain.

Domain Users Cannot Join Workstation or Server to a Domain

Add workstations to domain