A technician has password-reset delegation but cannot add users to a role group. Which explanation fits?

Choose the single best answer.

A.Every delegated directory task requires Enterprise Admins
B.Reset-password delegation automatically grants group-member writes on every group in the domain
C.Reset-password permission does not include group-membership modification
D.The technician's Kerberos preauthentication setting controls group-member write rights

Show the answer and explanation

✓ Correct answer

Reset-password permission does not include group-membership modification

Delegated operations are distinct, so membership edits require appropriate separate rights on the intended groups. Enterprise Admins is unnecessary for routine scoped administration. Preauthentication controls authentication behavior rather than the object ACL, and password-reset rights do not imply domain-wide group modification.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.