5.8. Answers to Review Questions

  1. B. The Delegation of Control Wizard can be used to assign the correct permissions. You must launch the wizard by right-clicking the Sales OU to grant the permissions to the Sales OU. Launching it at the domain level will grant permissions for the entire domain. The wizard can't be launched from a user account. Adding Sally's account to the Domain Admins group would grant her significantly more permissions than necessary.

  2. B. You can upgrade the file and print server to an RODC at no additional cost. Additionally, an RODC presents less risk since passwords that are cached at the server can be limited. Adding a domain controller would present a significant security risk since if it was stolen (and it could be since ...

Get MCITP Windows Server® 2008 Server Administrator: Study Guide now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.