Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch
office contains a domain controller and a file server. The DHCP Server server role is installed on the
branch office domain controllers. Each office has a branch office administrator. You need to delegate
the administration of DHCP to meet the following requirements:
• Allow branch office administrators to manage DHCP scopes for their own office
• Prevent the branch office administrators from managing DHCP scopes in other offices
• Minimize administrative effort
What should you do?
A.
In the Active Directory domain, add the branch office administrators to the Server Operators
builtin local group.
B.
In the Active Directory domain, add the branch office administrators to the Network Configuration
Operators builtin local group.
C.
In each branch office, migrate the DHCP Server server role to the file server. On each file server,
add the branch office administrator to the DHCP Administrators local group.
D.
In each branch office, migrate the DHCP Server server role to the file server. In the Active
Directory domain, add the branch office administrators to the DHCP Administrators domain local
group.
Explanation:
http ://technet.microsoft.com/en-us/library/dd379494%28WS.10%29.aspx
http ://technet.microsoft.com/en-us/library/dd379483%28WS.10%29.aspx
http ://technet.microsoft.com/en-us/library/dd379535%28WS.10%29.aspx
http ://technet.microsoft.com/en-us/library/cc737716%28WS.10%29.aspx
DHCP Administrators
Members of the DHCP Administrators group can view and modify any data at the DHCP server. DHCP
Administrators can create and delete scopes, add reservations, change option values, create
superscopes, or perform any other activity needed to administer the DHCP server, including export
or import of the DHCP server configuration and database. DHCP Administrators perform these tasks
using the Netsh commands for DHCP or the DHCP console. For more information, see DHCP tools.
Members of the DHCP Administrators group do not have unlimited administrative rights. For
example, if a DHCP server is also configured as a DNS server, a member of the DHCP Administrators
group can view and modify the DHCP configuration but cannot modify DNS server configuration on
the same computer.
Because members of the DHCP Administrators group have rights on the local computer only, DHCP
Administrators cannot authorize or unauthorize DHCP servers in Active Directory. Only members of
the Domain Admins group can perform this task. If you want to authorize or unauthorize a DHCP
server in a child domain, you must have enterprise administrator credentials for the parent domain.
For more information about authorizing DHCP servers in Active Directory, see Authorizing DHCP
servers and Authorize a DHCP server in Active Directory.
Using groups to administer DHCP servers in a domain
When you add a user or group to a DHCP Users or DHCP Administrators group on a DHCP server, the
rights of the DHCP group member do not apply to all of the DHCP servers in the domain. The rights
apply only to the DHCP service on the local computer.
