Which tool should you use?

Your network contains an Active Directory domain named contoso.com. All servers run Windows
Server 2012 R2.
The domain contains a domain controller named DC1 that is configured as an enterprise root
certification authority (CA).

All users in the domain are issued a smart card and are required to log on to their domain-joined
client computer by using their smart card.
A user named User1 resigned and started to work for a competing company.
You need to prevent User1 immediately from logging on to any computer in the domain. The
solution must not prevent other users from logging on to the domain.
Which tool should you use?

A.
Active Directory Administrative Center

B.
Certificate Templates

C.
The Security Configuration Wizard

D.
The Certificates snap-in

Explanation:
To disable or enable a user account using Active Directory Administrative Center
1. To open Active Directory Administrative Center, click Start , click Administrative Tools , and then
click Active Directory Administrative Center .
To open Active Directory Users and Computers in Windows Server 2012, click Start , type dsac.exe .
2. In the navigation pane, select the node that contains the user account whose status you want to
change.
3. In the management list, right-click the user whose status you want to change.
4. Depending on the status of the user account, do one of the following:
To disable the user account, click Disable .
To enable the user account, click Enable .

Disable or Enable a User Account