You work as the network administrator for a network consisting of a single Active Directory domain. You use a non-administrative user account to log on to a client computer. You need to change the password for a domain user account named John. When you attempt to change John's password in Active Directory Users and Computers, you receive an "Access is denied" error message. Which of the following should you do to change John's password without using your Administrator credentials to log on to the domain?
A)Add your non-administrative domain user account to the local Administrators group.
B)Use the run as command to run Active Directory Users and Computers with domain administrative credentials.
C)At the command prompt, run the net user John/add/passwordreq:yes command.
D)At the command prompt, run the net accounts/uniquepw:/domain command.

Question

Quizplus · Accepted Answer

To fix this problem, you should use the run as command to run Active Directory Users and Computers with domain administrative credentials.
Key Takeaway: Running your computer as a member of the Administrators group makes the system vulnerable to Trojan horse attacks and other security risks. When it is necessary to perform administrative tasks on the local computer or in Active Directory, use run as to start a program using administrative credentials. Run as allows you to accomplish administrative tasks without exposing your computer or data stored in Active Directory to unnecessary risk.

You Work as the Network Administrator for a Network Consisting