5.8. Answers to Review Questions
B. The Delegation of Control Wizard can be used to assign the correct permissions. You must launch the wizard by right-clicking the Sales OU to grant the permissions to the Sales OU. Launching it at the domain level will grant permissions for the entire domain. The wizard can't be launched from a user account. Adding Sally's account to the Domain Admins group would grant her significantly more permissions than necessary.
B. You can upgrade the file and print server to an RODC at no additional cost. Additionally, an RODC presents less risk since passwords that are cached at the server can be limited. Adding a domain controller would present a significant security risk since if it was stolen (and it could be since ...
Get MCITP Windows Server® 2008 Server Administrator: Study Guide now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.