Security Administrator Street Smarts: A Real World Guide to CompTIA Security+™ Skills, Second Edition

5.1. Task 5.1: Creating User Accounts

To provide as much security as possible while creating user accounts, administrators take advantage of user account templates to establish a minimum baseline of permission required for each role in the enterprise. Only after this baseline is found to lack sufficient privilege will an administrator increase the level of privilege by granting only the additional permissions required for the worker to perform the tasks required of their role.

Further, the placement of the user account in the proper organizational unit (OU) within Active Directory (AD) implements user-based security controls by Group Policy Object (GPOs). GPOs can be applied at the AD site, domain, or OU level.

5.1.1. Scenario

You are an administrator ...