Your network consists of one Active directory domain.
The functional level of the domain is Windows Server 2008.
You have one organizational unit (OU) named AllUsers that contains all user accounts for the domain.
Your company has two departments named Sales and Engineering.
Each department has a department manager. Each department has a global security group that contains all department users.
You need to prepare the environment to manage all user accounts.
The solution must meet the following requirements:
– Sales department users must be required to reset their passwords every 30 days.
– Department managers must administer only users in their respective departments.
– Engineering department users must be required to reset their passwords every 45 days.
– The solution must be achieved by using the minimum amount of administrative effort.
What should you do?
A.
Delegate administration of the AllUsers OU to the department manager of each department. Modify the password policy for the domain.
B.
Create a new OU for each department. Delegate administration to the department manager of each OU. Create a new password policy for each global security group.
C.
Create a child domain for each department. Delegate administration to the department manager of each domain. Create a new password policy for each domain.
D.
Create a new OU for each department. Delegate administration to the department manager of each new OU. Create a new Group Policy object. Configure the password policy for the new GPO and link it to the OUs.