Removing Delegated Permissions

By Author: fiona
Total Articles: 191
Comment this article

The ACL is the tool you use to assign MCITP exams users permission to access resources.
Selective authentication allows you to make flexible access control decisions between domains in an external or forest trust. You can designate the trust authentication level for incoming or outgoing external or forest trusts as selective to control which users can access resources. If you use this option, you must manually assign permissions on each domain and resource to which you want users in the second domain or forest to have access.
Before taking the exam, review the key points and terms that are presented in this chapter. You need to know this information.
You delegate administrative control of domains and containers in order to provide other administrators, groups, or users with the ability to manage functions accord?ing to their needs. Delegating administrative control is different from access control because it enables administrative responsibility for a designated administrator, group, or user rather than providing access to objects.
The Delegation Of Control Wizard ...
... is the tool you use to set administrative permissions for a domain, OU, or container.
You've given Michael Full Control permissions to the 70-686 exam South OU. Now he wants to
allow his assistant to reset users' passwords in the South_Site. What should he do?
Michael doesn't have the ability to delegate any permissions at the site level, but he can delegate the specific permission to reset passwords on the South OU. He can use the Delegation Of Control Wizard to accomplish this task.
4.You want Jim, Vamsi, Michael, and Don to be able to log on to and shut down the domain controllers at their respective locations. However, right now when they try to log on to the domain controllers, they receive a message that reads: "The local policy of this system does not permit you to log on interactively." What should you do?
Normal users do not have the right to log on to a domain controller. This right is available only to Account Operators, Administrators, Backup Operators, Print Operators, and Server Operators. The right to shut down the system is available only to Administrators, Backup Operators, Print Operators, and Administrators. Therefore, you can either make Jim, Vamsi, Michael, and Don members of one of these groups or specifically grant them the right to access these com?puters through the Default CompTIA Domain Controllers Policy in Group Policy.