Exam 70-742 topic 1 question 29 discussion

Actual exam question from Microsoft's 70-742

Question #: 29
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named User1 to the local Administrators group on Server1.
Solution: From a domain controller, you run the Set-AdComputer cmdlet.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
The Set-AdComputer cmdlet modifies an Active Directory computer object. It will not allow you to add a domain user to a local Administrators group.
References:
https://technet.microsoft.com/es-es/library/hh852268(v=wps.620).aspx

by paprda at Aug. 5, 2019, 6:57 p.m.

Comments

Submit Cancel

5 years, 6 months ago

right , the answer is B.NO This question is tricky, although you can use Set-ADComputer Server1 -ManagedBy "CN=User1" to modify the "Managed By" attribute setting of Server1 account and grant administrative rights to User1 on Server1, however, this cmdlet did NOT achieve the objective stated by the question "add a domain user named User1 to the local Administrators group on Server1" therefore, it did not meet the goal.

upvoted 4 times

GenjamBhai

4 years, 10 months ago

ManagedBy is just an attribute of the AD Computer Object, changing it does not change any permisions on the computer.

upvoted 1 times

...