70-294 QOTD for May 31st

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Good morning. I’m trying something of an experiment here so please bear with me. I’d love to provide a graphic but don’t have the capacity to do so. With that in mind, let’s hope my powers of description are up to the task.

Joe is a network administrator for CrazyCorp, a company that makes gag gifts and novelty items. He manages a single domain Windows Server 2003 AD structure. The structure of the domain and OUs is as follows.

Under the domain crazycorp.com, there is one top-level OU called “everyone”. Below the everyone OU, there are four second-level OUs called “support”, “sales”, “research”, and “managers”. Joe wants to give the help desk technicians security group that is contained in the support OU the ability to rename user accounts for the sales OU only. To do this, Joe must use the Delegate Authority Wizard. In order to accomplish his task and only give the help desk techs that authority over the sales OU, where must the right to delegate the ability to change user names be placed?

A. Authority should be placed at the domain level.
B. Authority should be placed at the everyone top-level OU
C. Authority should be placed at the support OU
D. Authority should be placed at the sales OU

Answer later.

 

I'm going to pitch B for this one.

I would have gone with AJ on C, but I reckon that's too obvious (sorry AJ )

 

My best guess is B.

 

Correct answer is D. The authority should be delegated for control at the Sales OU level. That gives the help desk folks authority only over that particular function as applied to the Sales OU container. Placing it at a higher level could give them control not only over that container but over the sub-containers under it. Giving them authority at the level of the support OU container would only give the support staff name changing authority over themselves.

Hope I wasn't too confusing. I was trying to take this QOTD up a level. More later.

 

ack was just about to reply
sorry for slow response, been out most the day, and got so much to do before my flight on wednesday morning
with it being a public holiday here i only have tomorrow to get anything done that envolves shops :P