Microsoft 70-411 Exam – Q16

Your network contains an Active Directory domain named contoso.com. The domain contains an Organizational Unit (OU) named IT and an OU named Sales. All of the help desk user accounts are located in the IT OU. All of the sales user accounts are located in the Sales OU. The Sales OU contains a global security group named G_Sales. The IT OU contains a global security group named G_HelpDesk.

You need to ensure that members of G_HelpDesk can perform the following tasks:
– Reset the passwords of the sales users.
– Force the sales users to change their password at their next logon.
What should you do?

A. Run the Set-ADAccountPasswordcmdlet and specify the -identity parameter.
B. Right-click the Sales OU and select Delegate Control.
C. Right-click the IT OU and select Delegate Control.
D. Run the Set-ADFineGrainedPasswordPolicycmdlet and specify the -identity parameter.

Correct Answer: B

Explanation:
To delegate control of an organizational unit
1. To open Active Directory Users and Computers, click Start , click Control Panel , double-click Administrative Tools , and then double-click Active Directory Users and Computers. To open Active Directory Users and Computers in Windows Server® 2012, click Start , type dsa.msc.

2. In the console tree, right-click the organizational unit (OU) for which you want to delegate control. In the case of this question, it will be the Sales OU.

3. Click Delegate Control to start the Delegation of Control Wizard, and then follow the instructions in the wizard.

16a