70-294 QOTD for June 3rd

Discussion in 'Active Directory Exams' started by tripwire45, Jun 3, 2004.

  1. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    Keith is a network administrator for a Windows Server 2003 Active Directory network. The Network is quite large and he needs assistance in editing the Group Policy Objects (GPOs) linked to several Organizational Units as an effort to improve security on the network. Keith only wants this one permission to be given to a group of junior technicians without giving them any other authority over those OUs or the network in general. What should Keith do to assign three of his junior technicians the ability to Edit these GPOs? Choose only answer only.

    A. Keith should use the Delegation of Control Wizard by right-clicking the particular OUs in Active Directory Users and Computers, selecting “Delegate Control”. When the Delegation of Control Wizard starts, Keith can select the three technicians and then select “Edit Group Policy Objects”.
    B. Keith should add the three technicians to the Group Policy Editor administrators group in the Users container by double clicking the group, clicking on the Members tab and adding the selected users.
    C. Keith should open the GPO into the Group Policy editor, right-click the GPO name, choose Properties and click the Security tab. Next he can add the selected users and set the permissions to Read/Write to allow them to edit a GPO.
    D. Keith should give the selected users the ability to Create GPOs which is the only way they will also be able to edit them. To do this, he should use the Delegation of Control Wizard by right-clicking the particular OUs in Active Directory Users and Computers, select “Delegate Control” and start the Wizard. Keith can then choose the three technicians and select “Create Group Policy Objects”. The ability to edit them will also be inherited.


    Answer later.
     
    Certifications: A+ and Network+
  2. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    Ok, so it's a little tough. This is about the degree of difficulty that the MS exam presents (though my question is completely made up). Give it a crack somebody. Please? :wink:
     
    Certifications: A+ and Network+
  3. Jakamoko
    Honorary Member

    Jakamoko On the move again ...

    9,924
    74
    229
    I reckon the simplest option point's to C, but then I'm probably falling into a trap on this one.

    C
     
    Certifications: MCP, A+, Network+
    WIP: Clarity
  4. AJ

    AJ 01000001 01100100 01101101 01101001 01101110 Administrator

    6,897
    182
    221
    Ok trip I'll have a go at A then
     
    Certifications: MCSE, MCSA (messaging), ITIL Foundation v3
    WIP: Breathing in and out, but not out and in, that's just wrong
  5. tripwire45
    Honorary Member

    tripwire45 Zettabyte Poster

    13,493
    180
    287
    Correct answer is C. Gav gets this one. Assigning administrative privledges to certain users and groups without giving them excessive rights is a huge subject on this exam. Some of the scenarios get pretty convoluted. Here's the breakdown:

    Managing Group Policy links = Delegation of Control Wizard
    Creating GPOs = Group Policy Creator Owners membership
    Editing GPOs = Security Properties of the specific GPO in Group Policy Editor.

    More tomorrow.
     
    Certifications: A+ and Network+

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.