StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Security · Security | Secure AD DS

Practice question 366 of 506 · easy

Helpdesk should reset and unlock ordinary Staff users but cannot manage privileged groups. Which approach fits?

Choose the single best answer.

  1. A.Add helpdesk to Domain Admins
  2. B.Delegate only the required operations on the Staff OU to a helpdesk security group
  3. C.Grant forest-wide Write all properties to every technician
  4. D.Use unconstrained Kerberos delegation for the helpdesk console
Show the answer and explanation

✓ Correct answer

  • Delegate only the required operations on the Staff OU to a helpdesk security group

Scoped operation-specific delegation grants the requested directory tasks. Domain Admins and forest-wide writes exceed the scope. Kerberos delegation concerns forwarding user context to services, not granting password-reset administration.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.