Exam MD-102 topic 1 question 40 discussion

Answers are wrong User1: "By default, only users with administrator rights in Windows 10 can change time and date settings." User 2: "Restricting the Manage auditing and security log user right to the local Administrators group is the default configuration."

As a twist, in Windows 11 a standard user can change the time without elevation. Make sure to read that this question says Windows 10.

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc771990(v=ws.10)#:~:text=Default%20local%20groups,-Article

Answer incorrect: - User1- Administrator ( Members of the Administrators group have the necessary permissions to change system settings, including the date and time.) - User2 -event log readers (Members of the Event Log Readers group have the necessary permissions to read and clear Windows logs.)

User1: To adjust the date and time, User1 should be added to the Power Users group. This group has the necessary permissions to change the system time without granting full administrative rights1. User2: To clear Windows logs, User2 should be added to the Administrators group. Only administrators have the rights to manage and clear event logs2.

on my test Windows 10, hyper-v, works fine only Admin, account. Power User, can't change time, Performance user can't clean events.

You have a computer that runs Windows 10 and contains two local users named User1 and User2. You need to ensure that the users can perform the following actions: User1 must be able to adjust the date and time. User2 must be able to clear Windows logs. The solution must use the principle of least privilege. To which group should you add each user? what permission will you give to user1 and user2? Copilot Sent by Copilot: To ensure that User1 and User2 can perform their respective tasks while adhering to the principle of least privilege, you should assign them to the appropriate groups and permissions: User1 (Adjust the date and time): Group: Add User1 to the Power Users group. Permission: Grant the Change the system time permission through Local Security Policy or Group Policy. User2 (Clear Windows logs): Group: Add User2 to the Event Log Readers group. Permission: Grant the Manage auditing and security log permission through Local Security Policy or Group Policy.

Administrators for both. Lab tested on Windows 10 22H2 domain-joined. With Power Users and Performance Log Users always access denied .

Looks like the below is correct: User1: Administrator; you need this for changing time and date however there is GPO policy you could set to go around it but that's not a possible answer here User2 : Administrator; By default, only members of the Administrators group are able to clear the system logs. Workaround? You would need to change the Security Descriptor to allow users to clear the logs; however, this is a security-sensitive operation and should be done with caution.

I justed tested on my lab User1: Administrator User2 : Administrator Administrator can perform both action

User1: The Power Users group is able to install software, manage power and time-zone settings, and install ActiveX controls, actions that limited Users are denied. User 2: Only administrator

In Windows 10 & 11 you can change the timezone without any admin priviliges. Hower when you want to change the date and time settings, it will ask you for admin permissions. So my anwers: 1: Administrators 2: Administrators. Performance log users can only shedule colletion of logs. Not remove the system logs.

- User 1: Administrator - User 2: Administrator https://community.spiceworks.com/topic/2244141-power-users-vs-local-admins

User1: Administrator User2: Administrator Change system time = https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-system-time#default-values Clear eventlog = https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/clear-eventlog?view=powershell-5.1 Only Administrators can. The other user groups are not administrators.

User 1: Power Users (they use the principle of least privilege and can change Time/Date settings and are still available in Windows 10) User 2: Administrators (only the local administrators group members can delete Windows logs) Ref: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/clear-eventlog?view=powershell-5.1#description

- Administrators - Administrators

user1: power users user2: administrators