Your network contains an Active Directory domain named contoso.com. All servers run
Windows Server 2012 R2.
The domain contains a domain controller named DC1 that is configured as an enterprise root
certification authority (CA).
All users in the domain are issued a smart card and are required to log on to their domainjoined client computer by using their smart card.
A user named User1 resigned and started to work for a competing company.
You need to prevent User1 immediately from logging on to any computer in the domain. The
solution must not prevent other users from logging on to the domain.
Which tool should you use?
A.
Active Directory Users and Computers
B.
Server Manager
C.
The Certificates snap-in
D.
The Certification Authority console
IT’s A. You simply delete the user account.
A , either delete or disable user account will do
A.
Active Directory Users and Computers
Confirming A
Explanation:
Disabling an account in ADAC or ADUC is dependent on DC replication. This is 15m by default, but can be forced to proceed immediately.
Disabling a user’s cert is dependent on the TTL of the cert (30m default?) and cannot be forced, as the certificate is only renewed as its TTL runs out.