| Author |
answer /explanation?
|
|
| cm2gj 2002-10-13, 12:21 am |
| Administrators of your Graphics organizational unit want to be able to manage EFS for the users in their department. These administrators belong to a group named GraphicsAdmin which has full administrative privileges to the OU. You install an Enterprise CA for use by the entire company. However, the administrators of the Graphics department notify you that they are unable to create a Group Policy that allows them to manage EFS for their department. What should you do? (Choose two)
1- Add the GraphicsAdmin group's certificate to the CA's RCL
2- Add a new policy setting for an EFS Recovery Agent certificate in the Certification Authority console for the CA.
3- Grant the enroll permission to the GraphicsAdmin group for the Recovery Certificate Template
4- Install a Enterprise Subordinate CA on one of the computers in the Graphics OU
 | |
| Slinky 2002-10-13, 1:04 am |
| Pretty sure its 2, and its most definately 3. By default only members of the Domain Admins and Enterprise Admins security groups have the Enroll permission for EFS recovery agent certificates. Since these guys are administering only their own OU, you will need to change the default Access Control Lists for the recovery certificate template to allow members of the GraphicsAdmin group to request them. | |
|
| quote:
Originally posted by Slinky
Pretty sure its 2, and its most definately 3. By default only members of the Domain Admins and Enterprise Admins security groups have the Enroll permission for EFS recovery agent certificates. Since these guys are administering only their own OU, you will need to change the default Access Control Lists for the recovery certificate template to allow members of the GraphicsAdmin group to request them.
choice 2 say the question...... | |
| Slinky 2002-10-13, 11:03 am |
| Yah, but your original question said choose 2. | |
|
| quote:
Originally posted by Slinky
Yah, but your original question said choose 2.
yes, but you say that answer is 2..... or 3? not 2 and 3 no? | |
|
| quote:
Originally posted by Slinky
Yah, but your original question said choose 2.
men: follow my recomendation:
VNC is free and is amazing: i work with 6 servers at a time, very awat from me and resolve many many problems........ realVNC is now on the public domain and is FREE! |
|
|
|