StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 364 of 506 · medium

Helpdesk can reset ordinary users in an OU but not a protected administrator account moved into the same OU. Which mechanism should be investigated?

Choose the single best answer.

  1. A.AdminSDHolder/SDProp and protected-object ACL inheritance
  2. B.Only the GPO processing order for the helpdesk workstation
  3. C.Only the user's universal group membership cache
  4. D.Only the password complexity setting
Show the answer and explanation

✓ Correct answer

  • AdminSDHolder/SDProp and protected-object ACL inheritance

Protected administrative objects can have AdminSDHolder-derived ACLs and disabled inheritance. Workstation GPO order, password complexity, and universal membership caching do not explain the protected-object directory permission boundary.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.