Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An organizational unit (OU) named Branch1Servers contains the computer objects for the servers in Branch1. A global group named Branch1admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1. You need to recommend a solution that allows the members of Branch1admins group to perform the following tasks on the Branch1 member servers.
– Stop and start services
– Change registry settings
What should you recommend?
A.
Add the Branch1admins group to the Power Users local group on each server in Branch1.
B.
Add the Branch1admins group to the Administrators local group on each server in Branch1.
C.
Assign the Branch1admins group change permissions to the Branch1Servers OU and to all child objects.
D.
Assign the Branch1admins group Full Control permissions on the Branch1Servers OU and to all child objects.
Explanation:
Local admins have these rights.
Power Users do not
By default, members of the power users group have no more user rights or permissions than a standard user account. The Power Users group in previous versions of Windows was designed to give users specific administrator rights and permissions to perform common system tasks. In this version of Windows, standard user accounts inherently have the ability to perform most common configuration tasks, such as changing time zones. For legacy applications that require the same Power User rights and permissions that were present in previous versions of Windows, administrators can apply a security template that enables the Power Users group to assume the same rights and permissions that were present in previous versions of Windows.