Exam MS-201 topic 2 question 42 discussion

Actual exam question from Microsoft's MS-201

Question #: 42
Topic #: 2

You have a Microsoft Exchange Server 2019 organization.
You run the following commands.
New-Management-Scope ""Name "VIP Mailboxes" ""RecipientRoot "Contoso.com/Executives"
""RecipientRestrictionFilter (RecepientType ""eq "UserMailbox")
New-ManagementRoleAssignment ""SecurityGroup "VIP Admins" ""Role "Mail Recipients" ""CustomRecipientWriteScope "VIP
Mailboxes"
You have a user named Admin1.
You need to ensure that Admin1 can manage the mailboxes of users in the Executives organizational unit (OU) only.
What should you do?

A. Modify the membership of VIP Admins.
B. Create a custom role group.
C. Add Admin1 to the Recipient Management role group.
D. Move Admin1 to the Executives OU.

Show Suggested Answer

Suggested Answer: C 🗳️
References:
https://social.technet.microsoft.com/Forums/exchange/en-US/b316a841-c39d-483a-ac8e-64d5904c42e6/how-to-limit-recipient-management-rights-to-users-in-a- ou-in-exchange-2010-sp1?forum=exchangesvradminlegacy

by Ilya at Aug. 27, 2019, 8:59 a.m.

Comments

Submit Cancel

Ilya

Highly Voted 5 years, 10 months ago

Correct Answer: A. New-ManagementScope creates a custom scope for "Contoso.com/Executives". New-ManagementRoleAssignment links permissions "Mail Recipients" with the group "VIP Admins". We should just add our admin to this group.

upvoted 16 times

ellichen

5 years, 10 months ago

Agreed, that should be the correct answer

upvoted 3 times

...

de_liberate

5 years, 2 months ago

That makes total sense. I agree. 'A'. Assigning 'Recipient Management' role group would provide permissions for all mailboxes, not just the ones in the OU.

upvoted 3 times

...

jeffangel28

4 years, 3 months ago

Agree https://docs.microsoft.com/en-us/powershell/module/exchange/new-managementroleassignment?view=exchange-ps#example-4

upvoted 1 times

...