MCITP Windows Server® 2008 Server Administrator: Study Guide

6.8. Answers to Review Questions

1. B. You should add Joe to the Server Operators group. This will allow him to create shares and do other administrative tasks on the domain controller without granting him administrative rights to the domain. Neither the Power Users group nor the Local Administrators groups exists on a domain controller. Adding Joe to the Domain Administrators group would grant him significant privileges and violate a basic security tenet of least privilege.

2. C. The Co-owner role is granted Full Control permissions and Modify permissions. There isn't such a thing as a Full Control role, but Full Control permissions can be granted. You can't add someone to the Owner role. Instead, someone is an owner if she created an object or she ...