Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 36 discussion

Actual exam question from Microsoft's 70-742

Question #: 36
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain.
You have a user account that is a member of the Domain Admins group.
You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names.
A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The laptop names must start with four characters indicating the department, followed by a four-digit number.
Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.

You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and that the computer accounts of the laptops are in the correct OUs.
Solution: You instruct Tech1 to sign in to each laptop, to rename each laptop by using System in Control Panel, and then to join each laptop to the domain by using the Netdom join command.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️

by adsl7 at Oct. 13, 2019, 7:23 a.m.

Comments

Submit Cancel

coleman

Highly Voted 5 years, 6 months ago

the given answer ic incorrect. When using netdom join command, the computer account is created by Tech1 and recorded into AD domain, a quota is deducted. http://support.microsoft.com/kb/243327/en-us Default limit to number of workstations a user can join to the domain is 10. the correct solution is : You script the creation of files for an offline domain join, and then you give the files to Tech1. You instruct Tech1 to sign in to each laptop, and then to run djoin.exe. When creating computer accounts by using "djoin /provision" command, the computer accounts are created by domain administrator (not Tech1), which has no limitation on the number of computer accounts.

upvoted 15 times

...

nomsboms

Highly Voted 5 years, 8 months ago

Tech 1 is member of Domain User Group: so liek Charchar already said, there is a Quota of 10 machines for domain users. Netdom dont bypass: Answer should be NO in my opinion

upvoted 14 times

...

bdlm

Most Recent 4 years, 5 months ago

The Tech would not be able to join the machines as they would hit the 10 machine limit. This article lists 3 ways of circumventing the limit. While it is not incredibly specific the ways it lists are: 1. Pre-Create the User's Computer Account 2. Grant the "Create Computer Objects" and "Delete Computer Objects" Access Control Entries (ACEs) to the User 3. Override the Default Limit of the Number of Computers an Authenticated User Can Join to a Domain The article then says it will expand on topic 3 which it does with 2 different ways to modify the ms-DS-MachineAccountQuota attribute. I am unable to lab this at the moment but based up this article and not finding evidence anywhere else that this command can circumvent the 10 machine limit, Tech 1, who is not a domain admin, will not be able to join all the machines to the domain so the answer should be no. https://www.techrepublic.com/blog/tr-dojo/increase-the-number-of-workstations-a-user-can-join-to-a-domain/

upvoted 1 times

...

lofzee

5 years, 3 months ago

The answer is right. The biggest piece of information that people looked over in this is when it said "You have a user account that is a member of the Domain Admins group." You have a domain admin account so you can join the computers to the network. You aren't using Tech1 credentials

upvoted 2 times

uevenasdf

5 years, 2 months ago

You're the admin and Tech1 is a separate person. The question implies Tech1 is joining to the domain and he doesn't have the admin access

upvoted 3 times

...

Sparrow033

5 years, 4 months ago

The answer given is correct. When you do a clean installation of the server it is allowed that a user adds unlimited workstations to the domain, it is our duty of administrators to modify this rule so that it does not happen. Look at the first line that appears in the documents they provide, it says: "This rule applies to subsequent editions" And is no longer applied in WS 2008R2 .... In short, if we have not configured anything on the server, a user authenticated in the Domain can add unlimited computers to the domain. Verifying it is as simple as doing a clean installation of a WS 2012 onwards. Note: Restriction can be added using a gpo Answer YES 100%

upvoted 1 times

Bobgross

5 years, 3 months ago

In Active Directory Users and Computers, change the view to advance view, right click on your domain and select properties. Go over to the attribute editor. Scroll down to ms-DS-MachineAccountQuote. The value is set to 10 by default. I'm looking at this on a fresh copy of server2016. We can modify the quote b ut the default is still there.

upvoted 3 times

Sparrow033

5 years, 2 months ago

Thank you very much for your answer, friend. I hope everyone is well. First of all, I have no idea about this, you know much more, so take my comments as a noob's. For the limit you are talking about to work, two things are necessary: Indeed the option that you show is one, the other and fundamental (and this is where the change occurs) Is that this GPO that I show in image should be defined by default, but it is not, (at least in my clean installation) https://imgur.com/a/iLhVbKh Both configurations are necessary, the one you indicate is useless unless the one I show is also configured. Note: This was not always the case, before the two configured came. A hug.

upvoted 1 times

Sparrow033

5 years, 2 months ago

I have taken the liberty of looking for that option in an old Windows Server, with a clean installation, the gpo came as default. https://imgur.com/a/VvZbTq4

upvoted 1 times

...

KLOS

4 years, 7 months ago

I was install fresh copy of Server 2016, promote to DC and check the quota parameter. Sti have a limit 10. My opinion is NO -> correct answer

upvoted 2 times

...

krj

5 years, 4 months ago

I'm pretty sure that correct answer is No. As others already explained by default there is 10 workstation limit that any authenticated user can join to the domain. netdom by itself won't bypass that. It would be stupid if it could. You need to precreate the computer objects using other user with apropriate permissions.

upvoted 3 times

...

Ben22

5 years, 4 months ago

Given answer is correct if you are working in IT you should no this ..! https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc788049(v%3Dws.11)

upvoted 1 times

Yebubbleman

4 years, 5 months ago

...except the user isn't a domain admin. You don't want to say something like "if you are working in IT, you should know this" followed by an incorrect piece of information that you'd know is incorrect if you worked in IT. :-p

upvoted 5 times

...

Nhan

5 years, 4 months ago

I’m not sure if the answer is correct or not, but this is the PowerShell script to join the computer to the specific OU Powershell Add-Computer -DomainName yourdomainhere.ydh -Credential domain\username -OUPath "OU=yourou,OU=yourou,DC=yourdc,DC=yourdc"

upvoted 1 times

...

Load full discussion...