You create a user account for an IT employee and delegate permissions to create, delete, and manage groups to his account in Active Directory Users and Computers snap-in. The IT employee needs to manage groups in three departments. He is to use a domain controller named DOM1 for this task. However, he complains that he cannot log on to DOM1. Which of the following should you do to ensure that he can manage groups from DOM1?
A)Modify the default security policy for the domain and refresh the policy using Secedit.exe.
B)Modify the default security policy for the domain and refresh the policy by using Gpupdate.exe.
C)Modify the default security policy for the DOM1 OU and refresh the policy by using Gpupdate.exe.
D)Modify the default security policy for the DOM1 OU and refresh the policy by using Secedit.exe.

Question

Quizplus · Accepted Answer

To fix this problem, you should modify the default security policy for the DOM1 OU and refresh the policy by using Gpupdate.exe.
Key Takeaway: The secedit command allows you to apply a security template to a computer at the command line. You can use it in a script or batch file to apply settings each time the computer is booted.

You Create a User Account for an IT Employee and Delegate