Upgrading Your Skills to MCSA Windows Server 2012 — Question 61

You have a group managed Service Account name Account01. Only three servers named Server01, Server02 and Server03 are allowed to use Account01 service account. You plan to decommission Server01. You need to prevent Server01 from using the Account01 service account. The solution must ensure that Server02 and Server03 continue to use the Account01 service account.
What command should you run?

Answer options

• A. Set-ADServiceAccount
• B. Uninstall-ADServiceAccount
• C. Remove-ADServiceAccount
• D. Reset-ADServiceAccountPassword

Correct answer: D

Explanation

The correct answer is D because resetting the password of the service account effectively prevents Server01 from using it, while still allowing Server02 and Server03 to access the account with the new password. Options A, B, and C do not address the requirement to revoke access specifically for Server01 while maintaining it for the other servers.