Question

The HelpDesk security group was delegated the permission to create User objects and Reset their passwords in the Trainees organizational unit of the Active Directory domain. A new company policy will now mandate the HelpDesk security group to have the permission to create Group objects and modify their membership. This permission must be applied in the same Trainees OU. Which of the following tool can you use to modify the delegated permission to HelpDesk security group?

A. LDP.exe

B. Credential Manager

C. Active Directory Users and Computers

D. ADSI Edit

Answer 1

To modify the permissions for the HelpDesk security group in the Active Directory domain, you would use Active Directory Users and Computers. This graphical tool allows you to delegate control and modify permissions for organizational units, user accounts, and groups.

Step-by-step explanation:

To modify the delegated permissions for the HelpDesk security group in the Trainees organizational unit (OU) of the Active Directory domain, you would use Active Directory Users and Computers (ADUC). This tool provides a graphical interface for managing objects in an Active Directory domain, including OUs, users, and groups. It allows administrators to delegate control, specify permissions, and apply policy changes.

To delegate permission to the HelpDesk group for creating Group objects and modifying group membership, first, open ADUC, right-click the Trainees OU, and select 'Delegate Control.' Follow the delegation wizard to add the required permissions to the HelpDesk security group.