Annex F09 Microsoft AD Considerations

Question 0

Group Policy

Answer 0

Provides a centralized method for modifying user and computer environments to predetermined settings

Controls what users can and cannot do on their own computers

Question 1

Two (2) purposes for creating OU’s within Microsoft AD

Answer 1

To delegate admin control of objects below the domain level

To control and manage Group Policy

Question 2

Security Groups vs Group Policies within Microsoft AD

Answer 2

Security groups give permissions to functions and services within AD like folders on a share drive and access to DC’s

Group policy controls what users can and cannot do on their own computers

Question 3

Principles of Inheritance as they apply to Group Policy with Microsoft AD

Answer 3

Group policy settings are inherited from the top down

A computer in an OU may have group policies applied at both the domain and OU level

Child OU’s inherit the group policy of the parent OU

Group policy inheritance can be blocked by experienced admin but is not commonly done

Question 4

Purpose for standardizing user and computer accounts within Microsoft AD

Answer 4

New programs and patches can be pushed to every computer in the OU rather than conducting individual installs

Question 5

Difference between Service and Admin Permissions and Roles

Answer 5

• Service level-affect the AD forest and domain structure (enterprise and domain level)
• Data administrator-control, administer and change objects in AD