Your company has a human resources department and a finance department.
You are planning an administrative model for both departments to meet the following
requirements:
Provide human resources managers with the ability to view the audit logs for the files of their
department.
Ensure that only domain administrators can view the audit logs for the files of the finance
department.
You need to recommend a solution for the deployment of file servers for both departments.
What should you recommend?
More than one answer choice may achieve the goal. Select the BEST answer.
A.
Deploy one file server. Add the human resources managers to the local Administrators
group.
B.
Deploy one file server. Add the human resources managers to the local Event Log
Readers group.
C.
Deploy two file servers. Add the human resources managers to the local Administrators
group on one of the servers.
D.
Deploy two file servers. Add the human resources managers to the local Event Log
Readers group on one of the servers.
http://blogs.technet.com/b/janelewis/archive/2010/04/30/giving-non-administrators-permission-to-read-event-logs-windows-2003-and-windows-2008.aspx
I think D
I vote D based on plain logic and MS exams experience, they don’t want you giving administrator privileges just like that, fact I don’t even want that he he.
Agreed D
i think its B
D ? or B?
http://blogs.technet.com/b/mspfe/archive/2013/08/27/auditing-file-access-on-file-servers.aspx
The rationale behind this is that since the users have exclusive rights to their home folders, besides them, only members of the local administrators group would have the ability to read or modify the contents of the folders.
I prefer D.