Securing Windows Server 2016 — Question 155

Your network contains an Active Directory forest named contoso.com. The functional level of the forest and the domain is Windows Server 2012 R2.
You plan to use Local Administrator Password Solution (LAPS) for all member servers.
You need to prepare the forest for LAPS.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. Run the Set-AdmPwdComputerSelfPermission cmdlet.
• B. Install the LAPS client-side extension on all domain controllers.
• C. Run the Update-AdmPwdADSchema cmdlet.
• D. Run the Set-AdmPwdAuditing cmdlet.
• E. Deploy an enterprise certification authority (CA).

Correct answer: A, C

Explanation

The correct options are A and C because running the Set-AdmPwdComputerSelfPermission cmdlet grants the necessary permissions for computers to update their own passwords, and executing the Update-AdmPwdADSchema cmdlet extends the Active Directory schema to support LAPS. The other options are incorrect as they either pertain to the installation of components not required for schema preparation or involve auditing and certification authority tasks that are not essential for LAPS deployment.