Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 68 discussion

Actual exam question from Microsoft's 70-742

Question #: 68
Topic #: 1

Your network contains an Active Directory domain.
You have a user account that is a member of the Domain Admins group.
You have 100 laptops that have a standard corporate image installed. The laptops are in workgroups and have random names.
A technician named Tech1 is assigned the task of joining the laptops to the domain. The computer accounts of each laptop must be in an organizational unit (OU) that is associated to the department of the user who will use the laptop. The laptop names must start with four characters indicating the department, followed by a four-digit number.
Tech1 is a member of the Domain Users group only. Tech1 has the administrator logon credentials for all the laptops.

You need Tech1 to join the laptops to the domain. The solution must ensure that the laptops are named correctly, and that the computer accounts of the laptops are in the correct OUs.
Solution: You script the creation of files domain join, and then you give the files to Tech1.
You instruct Tech1 to sign in to each laptop, and then to run djoin.exe.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️

by MrRiver at Nov. 9, 2019, 12:36 p.m.

Comments

Submit Cancel

hajduk82

Highly Voted 4 years, 10 months ago

What wories me is that every single one of this Tech1 joining computers question is correct, and on the exam we will have 3 or 4 grouped questions with no option to mark it for later. So we need to select wich one will be Yes, and all others No. My best bet is answer NO to all of that questions, so on 4 questions I will get 3 correct ones :)

upvoted 8 times

...

coleman

Highly Voted 5 years, 6 months ago

49answer may be A.YES. the given answer is incorrect. When creating computer accounts by using "djoin /provision" command, the computer accounts are created by domain administrator (not Tech1), which has no limitation on the number of computer accounts.

upvoted 7 times

ShockwaveXYZ

5 years, 3 months ago

The answer is b, djoin will prompt you for domain admin credentials when you run the script. and the question never says that the tech has any access to the domain admins credentials.

upvoted 2 times

...

pepeold

4 years, 7 months ago

I agree, tested in lab; on server: djoin.exe /provision /domain ad.somedain.tld /machine TestQuest /savefile c:\testquest.txt on PC with local user that is local admin(no password prompts whatsoever) djoin.exe /requestODJ /loadfile c:\testquest.txt /windowspath C:\Windows /Localos from 70-472 book by Andrew Warren https://imgur.com/a/SjU9HuO

upvoted 2 times

...

NickTim

Most Recent 4 years, 6 months ago

Tech1 is a Domain user, not admin: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/jj574150(v=ws.11) Answer is B.

upvoted 1 times

gd1f365

4 years, 5 months ago

Doesn't need to be domain admin, Tech1 can run the script, created by your user account, which is Domain Admin.

upvoted 1 times

...

KLOS

4 years, 6 months ago

Hi. i thing is the correct B. If you type just djoin.exe. MS exams is build on the direct what is in the questions.

upvoted 1 times

...

weff

4 years, 7 months ago

Whe you script 100 files with correct computer names and OU and give this files to technician then if if he have admin credential of local comp then just run djoin with this script and that computer will get proper name and will be in right OU when script is applied on local computer. I tested in lab and this work great.

upvoted 1 times

...

VeiN

4 years, 8 months ago

The answer is YES (A). I`ve tested on a lab As a domain admin you can create files: djoin /provision /domain your.lab /machine Tst01 /savefile djoinTst01.txt /machineou "OU=Chicago,DC=your,DC=lab" I don`t see any problem to make a script from it to divide machines into proper ous ,names and create respected djoin file as a local admin Tech1 can do on client: djoin /requestobj /loadfile djoinTst01.txt /windowspath c:\windows /localos During this process: - you aren`t prompted for any credentials from domain (since its "offline join") - computer object doesn`t have written SID of the creator so no object count to 10 per user - no restriction for the computer depending on the network (it can be reachable by domain/ have IP inside domain before/ after join with no problems)

upvoted 1 times

Sten111

4 years, 6 months ago

I also labbed it exactly this way and got the same results. As far as i'm concerned this achieves all of the necessary requirements so the answer is Yes.

upvoted 1 times

...

Diffie

4 years, 9 months ago

Answer should be B - 3 things to mention here. 1. If the question stated the script had delegated credentials or domain admin creds built in then answer would be yes. 2. You can add members for djoin via GPO. Question does not mention this 3. You can delegate control for this action. Question does not mention this. I'm going with B - NO

upvoted 1 times

...

Jacky2020

4 years, 10 months ago

the solution mentioned that "script the creation of files domain join, and give the files to Tech1", at this moment, assume domain administrator has already assigned the privilege Tech1 to run that command. It should be A, Yes.

upvoted 1 times

...

Kamikazekiller

4 years, 11 months ago

Answer is correct. B-NO

upvoted 1 times

Detso

4 years, 10 months ago

Didn't you say this was the correct answer in another one of the question?

upvoted 3 times

...

darkknight

5 years, 1 month ago

Sybex book has the same question and the answer is A. You can script it and djoin

upvoted 4 times

...

daluadanilo

5 years, 1 month ago

the answer is yes, Step 1: the administator has created the computer object with the script using "djoin" or another command Step 2: Tech1 is "Domain user", he doesn't have to create the computer object, he wants to execute "djoin" with his credentials only.

upvoted 4 times

...

ve22

5 years, 1 month ago

...and what is the Microsoft answer...

upvoted 2 times

...

AZ764

5 years, 2 months ago

I think the answer is YES. Tech1 HAS DOMAIN CREDENTIALS on him, therefore it is irrelevant what his user account can do. He won't be using it for domain adds. But, the part that could make this question NO would be if the domain admin ran "redircmp" prior to Tech1 doing this. https://www.briandesmond.com/active-directory/change-default-location-for-domain-joined-computers/ Unfortunately the question is too broad and I don't think it warrant's B

upvoted 2 times

alexnt

4 years, 8 months ago

Where did you see that Tech1 has domain credentials? It says that "Tech1 has the administrator logon credentials for all the laptops".

upvoted 2 times

...

Sparrow033

5 years, 3 months ago

They ask you two things, to change the name (adding a series of letters of the department and some numbers) to the computers and to join them to the domain. In the answer at no time the name of the teams change, so regardless of whether or not you can do the second part (join the domain) the first part is not done, so in my opinion the answer is correct.

upvoted 2 times

...

capitainekurck

5 years, 4 months ago

seem that must have privilege to join the domain https://docs.microsoft.com/en-us/windows-server/remote/remote-access/directaccess/directaccess-offline-domain-join#credential-requirements

upvoted 1 times

...

[Removed]

5 years, 5 months ago

To me the answer is B. No While I do not see any problem in the process of provisioning the computer accounts in AD, nor in the privileges of Tech1 to run djoin /requestODJ and finish the whole process, I believe one step is missing here and that is properly naming the computers before running the command djoin /requestODJ. The computer name of the computer to be joined by the command djoin /requestODJ must match the name supplied in the switch /machine <destination computer when djoin /provision was first run to provision the computer object in AD. Tech1 has privileges to change the computer name before running djoin /requestODJ, but this isn't mentioned as a step, even though it is crucial. The only instructions for Tech1 mentioned in the question are logon to the laptop and run djoin. As djoin won't automatically rename the computer, this step must be done manually.

upvoted 7 times

krj

5 years, 4 months ago

you don't need to manualy rename a computer. Just tested in the lab. This method works for sure.

upvoted 1 times

...

Spud1993

5 years, 5 months ago

I think the given answer is correct as Tech1 doesn's have enough user privileges to add a device to the domain see heading Credential requirements in following link https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd392267(v=ws.10)?redirectedfrom=MSDN

upvoted 2 times

...

Load full discussion...