Identity with Windows Server 2016 — Question 187

Your company has an office in Montreal. The network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Montreal that contains all of the users accounts for the users in the Montreal office. An office manager in the
Montreal office knows each user personally.
You need to ensure that the office manager can provide the users with a new password if the users forget their password.
What should you do?

Answer options

• A. Create a Group Policy object (GPO) and link the GPO to the Montreal OU. Assign the office manager the Apply Group Policy permission on the GPO. Configure the Password Policy settings of the GPO.
• B. From the Security settings of each user account in the Montreal OU, assign the office manager the Change Password permission.
• C. From the Security settings of the Montreal OU, assign the office manager the Reset Password permission.
• D. Create a Group Policy object (GPO) and link the GPO to the OU of the domain. Filter the GPO to the Montreal users. Assign the office manager the Apply Group Policy permission on the GPO. Configure the Password Policy settings of the GPO.

Correct answer: C

Explanation

The correct answer is C because assigning the Reset Password permission to the office manager in the Security settings of the Montreal OU allows them to reset passwords for all users within that OU. Option A is incorrect as creating a GPO does not directly grant password reset capabilities. Option B only allows changing passwords for individual accounts, which is not efficient. Option D, like A, involves GPO creation but does not provide the necessary permission directly within the OU.