Your network contains an Active Directory domain. The domain contains an organizational
unit (OU) named OU1. OU1 contains all managed service accounts in the domain.
You need to prevent the managed service accounts from being deleted accidentally from
OU1.
Which cmdlet should you use?
A.
Set-ADUser
B.
Set-ADOrganizationalUnit
C.
Set-ADServiceAccount
D.
Set-ADObject
Explanation:
You can use Set-ADOrganizationalUnit and the -ProtectedFromAccidentalDeletion $true
parameter to prevent OU1 from being deleted accidentally, but you would still be able to
delete the accounts inside it. Use Set-ADObject to protect the accounts.http://technet.microsoft.com/en-us/library/hh852326.aspx
Set-ADObject Modifies an Active Directory object.
Parameter
-ProtectedFromAccidentalDeletion <Boolean>Specifies whether to prevent the object from
being deleted. When this property is set to true, you cannot delete the corresponding object
without changing the value of the property. Possible values for this parameter include:
$false or 0
$true or 1
The following example shows how to set this parameter to true.
-ProtectedFromAccidentalDeletion $true