ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-744 All Questions

View all questions & answers for the 70-744 exam
Go to Exam

Exam 70-744 topic 1 question 173 discussion

Actual exam question from Microsoft's 70-744
Question #: 173
Topic #: 1
[All 70-744 Questions]

Your network contains an Active Directory domain named contoso.com. The domain contains an organizational unit (OU) named OU1.
OU1 contains a server named Server1. The properties of Server1 are shown in the Server1 exhibit. (Click the Server1 tab.)

You create a Group Policy object (GPO) linked to OU1. You configure the GPO as shown in the LAPS exhibit. (Click the LAPS tab.)

You need to ensure that the password of the local Administrator of Server1 is managed by using Local Administrator Password Solution (LAPS).
Which cmdlet should you run?

  • A. Reset-AdmPwdPassword
  • B. Set-AdmPwdComputerSelfPermission
  • C. Update-AdmPwdADschema
  • D. Set-AdmPwdResetPasswordPermission
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
References:
http://techgenix.com/deploying-laps/
by itakemyexamsdrunk at March 21, 2020, 6:14 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
itakemyexamsdrunk
Highly Voted 5 years, 1 month ago
I disagree with C. Because obviously the schema has already been updated due to the presence of AdmPwd and ADMPWDexpiring.. So the last bit of configuration left to do is provide 'self' permissions to update the password.
upvoted 5 times
Ario
5 years, 1 month ago
I agree B is better answer
upvoted 5 times
...
...
DES123
Highly Voted 4 years, 9 months ago
The attributes are already created, but computers require access to update them Set-AdmPwdComputerSelfPermission
upvoted 5 times
...
SamsOtro
Most Recent 4 years, 5 months ago
The schema was already updated - B is correct. https://stealthbits.com/blog/running-laps-in-the-race-to-security/#:~:text=The%20'ms%2DMcs%2DAdmPwd,time%20until%20the%20password%20expires.
upvoted 2 times
...
algerianphoenix
4 years, 6 months ago
.B - Correct Answer. Both updates were made to the schema.
upvoted 3 times
...
KidCastaldo
4 years, 7 months ago
Answer is B. Schema has already been extended. https://www.prajwaldesai.com/how-to-configure-active-directory-for-laps/
upvoted 1 times
...
Boehlie
5 years, 1 month ago
Answer is good C. You're missing the attribute that the password will be in. You get that from the schema update.
upvoted 1 times
...
SIMSIM741
5 years, 1 month ago
we’ll need to open a PowerShell window with Admin rights. At the PowerShell prompt, load the LAPS module and then run the Update-AdmPwdADSchema cmdlet: Import-Module AdmPwd.PS Update-AdmPwdADSchema 1 2 Import-Module AdmPwd.PS Update-AdmPwdADSchema After updating the Active Directory schema, we need to check permissions in AD to ensure that only authorized users and groups can view the passwords that are stored there.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago