You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
Mia works as an IT Technician at AIOTestking.com. Mia is not a member of the Domain Admins
group.
You need to enable Mia to link existing Group Policy objects (GPOs) in the domain. Mia must not
be able to modify existing GPOs.
Your solution must minimize the administrative privileges assigned to Mia.
Which two of the following actions would achieve the desired result? (Choose two possible
answers).
A.
Click the Group Policy Objects node in Group Policy Management and add Mia under the
Delegation tab.
B.
Click the domain node in Group Policy Management and add Mia under the Delegation tab.
C.
Right-click the domain node in Active Directory Users and Computers and select Delegate
Control.
D.
Add Mia to the Group Policy Creator Owners group in Active Directory Users and Computers.
E.
In Active Directory Users and Computers, add Mia to the Managed By tab in the properties of
the Domain Controllers group.
is anyone checking these answers? It’s A and C
http://windowsitpro.com/active-directory/view-remove-ad-delegated-permissions
http://technet.microsoft.com/en-us/magazine/gg416505.aspx
answer is correct
B : select domain > “Delegation” tab > Permission = Link GPOs > Add users
C : Delegation of Control Wizard : select “Manage Group policy link”
The provided answer is correct (as li pin ho stated): B and C.
I confirmed this in my lab.
Under the “Group Policy Objects > Delegation” Tab (Answer A) you can only specify who is allowed to create GPOs in the domain.