Exam 70-410 topic 5 question 69 discussion

Actual exam question from Microsoft's 70-410

Question #: 69
Topic #: 5

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1. Server1 runs Windows Server 2012 R2.
You create a group Managed Service Account named gservice1.
You need to configure a service named Service1 to run as the gservice1 account.
How should you configure Service1?

A. From the Services console, configure the Log On settings.
B. From a command prompt, run sc.exe and specify the privs parameter.
C. From a command prompt, run sc.exe and specify the sdset parameter.
D. From Windows PowerShell, run Set-Service and specify the -StartupType parameter.

Show Suggested Answer

Suggested Answer: C 🗳️
Setting permissions on specific services can be achieved by using the sc command.
The sc command has two parameters for this task:
sdshow Displays the security descriptor for a specific service sdset Changes the security descriptor for a service
To set permissions use the following syntax:
sc <server> sdset <service name> <SD in SDDL format>
Reference: SET PERMISSIONS ON A SPECIFIC SERVICE (WINDOWS)
http://blogs.msmvps.com/erikr/2007/09/26/set-permissions-on-a-specific-service-windows/

by [deleted] at April 4, 2025, 8:03 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!