Which cmdlet should you use?

Your network contains an Active Directory domain. The domain contains an organizational unit (OU) named OU1. OU1 contains all managed service accounts in the domain. You need to prevent the managed service accounts from being deleted accidentally from OU1. Which cmdlet should you use?

Your network contains an Active Directory domain. The domain contains an organizational unit (OU) named OU1. OU1 contains all managed service accounts in the domain. You need to prevent the managed service accounts from being deleted accidentally from OU1. Which cmdlet should you use?

A.
Set-ADUser

B.
Set-ADOrganizationalUnit

C.
Set-ADServiceAccount

D.
Set-ADObject



Leave a Reply 4

Your email address will not be published. Required fields are marked *


daniele

daniele

for me the correct answer is B.
http://technet.microsoft.com/en-us/library/ee617208.aspx

ichko

ichko

Thanks for bringing the “B” answer – however B and D are correct just tested them on my machine and both are working fine:

PS C:\Users\Administrator> set-adobject -identity “OU=People,dc=contoso,dc=com” -protectedfromaccidentalDeletion $true

And:

PS C:\Users\Administrator> set-adorganizationalunit -identity “ou=people,dc=contoso,dc=com” -protectedfromAccidentalDeletion $true

daniele

daniele

exact, but the question does not say “choose 2 answers” … what you choose during the exam?

ichko

ichko

actually the question states:
You need to prevent the managed SERVICE ACCOUNTS 😉
(not the OU)
so I rather go for D 😉