Difficulty: Medium
Correct Answer: Add your user account to the Domain Admins group on any Windows NT Advanced Server in the SYCON domain
Explanation:
Introduction / Context:
Centralized administration is a core advantage of Windows NT domains. Rather than touching every server, you can use domain groups to grant rights across the domain. Understanding the scope of the “Domain Admins” global group saves time and ensures consistent privilege assignment.
Given Data / Assumptions:
Concept / Approach:
Adding a domain user account to the Domain Admins group grants administrative privileges on all domain member servers/workstations by default policy, avoiding per-machine changes. Adding a local workstation account (non-domain) to Domain Admins is invalid; adding your account to each server’s local Administrators group works but is labor-intensive and error-prone.
Step-by-Step Solution:
Verification / Alternative check:
Microsoft guidance on group scopes and default privileges confirms that Domain Admins confer administrative rights on domain members.
Why Other Options Are Wrong:
Common Pitfalls:
Confusing local vs. domain accounts; forgetting to re-authenticate to receive new group tokens.
Final Answer:
Add your user account to the Domain Admins group on any Windows NT Advanced Server in the SYCON domain.
Discussion & Comments