You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed.
AIOTestking.com has a Sales department. An OU exists for the Sales department. The OU contains
the user and computer accounts for the Sales department.
Mia works as an IT Technician at AIOTestking.com. Mia is not a member of the Domain Admins
group.
You have delegated control of the Sales OU to Mia to enable her to manage the user accounts of
the Sales users.
A new company security states that the following settings should be applied to Sales users:
Users must change password at next logon.
Minimum password length: 10.
Account is sensitive and cannot be delegated.
Enforce password history.
Password must meet complexity requirements.
Enforce maximum password age.
Mia can configure some of the required settings in the account properties of the user accounts.
Other required settings will be configured using a password settings object (PSO).
Which settings can Mia configure? (Choose all that apply).
A.
Users must change password at next logon.
B.
Minimum password length: 10.
C.
Account is sensitive and cannot be delegated.
D.
Enforce password history.
E.
Password must meet complexity requirements.
F.
Enforce maximum password age.
Hi there,
Answers A. and C. are clear to me, but I don´t see the possibility to enforce a Minimum Password lenght of 10 letters for Mia on OU Level with the Delegation right to manage user accounts.
The Password lenght can be enforced in the Default Domain policy or Default Domain Controller policy or any GPO which is applied to the Domain Controllers of the Domain, or by a PSO.
Can somebody tell me, if I am wrong? How could she do it, if she can?
thanks in advance, cheers, Michael
u not wrong brov…. A and C are correct
You wrote these answers. Every other question it answered wrong.
For reference
http://technet.microsoft.com/en-us/library/cc754544(v=ws.10).aspx
it’s B, D, E, F
Your answers tend to be incorrect more than the ones posted. It’s the exact opposite of your answer.
We are looking for what Mia CAN do, then a PSO used for everything else RTFQ.
A ,C , because the question state that Mia can configure some of user account properties under user account , but it never mention she has access to update PSO.
For those who are confused, rephrase this question as the following.
What can you do from DSA.msc
Again, Li Pin Ho is right.
Only A and C can be changed from “Users and Computers”.