Exam 70-410 topic 2 question 43 discussion

Actual exam question from Microsoft's 70-410

Question #: 43
Topic #: 2

Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 that runs Windows Server 2012 R2.
A user named User1 attempts to log on to DC1, but receives the error message shown in the exhibit. (Click the Exhibit button.)

You need to ensure that User1 can log on to DC1.
What should you do?

A. Add User1 to the Remote Management Users group.
B. Grant User1 the Allow log on locally user right.
C. Modify the Logon Workstations setting of the User1 account.
D. Modify the Account is sensitive and cannot be delegated setting of the User1 account.

Show Suggested Answer

Suggested Answer: B 🗳️
Domain controllers, by default, restrict the types of user accounts that have the ability to log on locally.
References:
remote management, p. 114
http://technet.microsoft.com/en-us/library/ee957044(v=ws.10).aspx

by NerdAlert at Oct. 27, 2020, 2:39 a.m.

Comments

Submit Cancel

NerdAlert

4 years, 7 months ago

Domain controllers, by default, restrict the types of user accounts that have the ability to log on locally. If you want to a user to have the ability to log on locally to a DC, you must grant that user the "Allowed logon locally" right.

upvoted 1 times

...