Review Questions

1.	When a member of the Domain Admins group grants a user Full Control permissions to an OU, what is that user considered to be? OU admin OU delegate OU controller OU owner
2.	When a user is given the permission to control and maintain user objects within an OU, what role is the user considered to have? OU admin OU delegate OU controller OU owner
3.	When an OU structure is created based on the geographic makeup of the company, what type of structure is this? Location-based Organization-based Function-based Location/organization-based
4.	Tom is an administrator for XYZ, Inc. His job responsibilities include installing and maintaining computers at the Houston office. Within Active Directory, the top-level OUs are based on the city where the resources are located, with child OUs based on the departments at each office. What type of structure is used at XYZ? Location-based Organization-based Function-based Location/organization-based
5.	Susie is the user and group administrator for 24Hr Coffee. Within Active Directory Users and Computers, she has access to the top-level OU Accounts. Within this OU she can manipulate and control the user and group objects, but within the Workstations, Servers, and Resources OUs she cannot perform any functions. What type of OU structure is being used at 24Hr Coffee? Location-based Organization-based Function-based Location/organization-based
6.	Cari works for the Help Desk. When users call with password problems, she is able to reset their passwords using a custom taskpad. What kind of delegation is being used? OU-based Rights-based Object-based Task-based
7.	When an OU is created for the sole purpose of hosting users or groups, what type of OU is it? Account OU Resource OU Security principle OU Task OU
8.	When an OU is created for the sole purpose of hosting computers, shared folders, or printers, what type of OU is it? Account OU Resource OU Security Principle OU Task OU
9.	Prestige Plastics has seven plants within the United States. Each of the plants maintains its own resources so that it can function even if it cannot reach resources at the corporate office in Jefferson City, MO. Each plant is equipped with a T1 connection to the corporate office. The administrative team in Jefferson City can control all of the resources at all of the plants, but the administrative teams at each of the plants only have control over their own resources. Based on the information given, what OU structure would you suggest? Location-based Organization-based Function-based Location/organization-based
10.	Within an Active Directory structure, what is the easiest way to hide a large number of objects from users but keep administration easy for administrators? Create a separate forest for the objects and do not create a trust relationship between forests. Create a separate domain for the objects and disable the trust relationship for the domain. Create a separate OU for the objects and assign the List Contents permission for only the accounts that need access. Add the objects into the Restricted Groups container.

Answers

1.	D. The OU owner is an account that has been granted Full Control permissions to an OU. This permission is usually assigned to a group and then the user account is added to the group.
2.	A. The OU admin is an account that has been granted the ability to perform specific functions to objects within an OU. This permission is usually assigned to a group and then the user account is added to the group.
3.	A. One of the most popular OU structure types, the location-based design, allows the resources to be grouped based on the geographic distribution of the organization. This type of design is resistant to reorganizations, mergers, and acquisitions.
4.	D. Because the administrative functions are based on the physical location of the objects and the resources themselves are grouped based on the organization s departmental arrangement, the location/organization-based OU structure is being employed.
5.	C. The administrative control that is delegated in this example is based on the administrative function for which the users or groups are responsible.
6.	D. Task-based delegation assigns specific permissions that an account will be able to use on an object. Using this method, specific functions can be assigned to users so that they do not have too much power over objects. It is also more difficult to troubleshoot permission problems when task-based delegation is used.
7.	A. An account OU is created so that permissions can be delegated to administrators who need to control the user or group objects and will have an OU for that purpose.
8.	B. A resource OU is created so that permissions can be delegated to administrators who need to control computer objects, shared folders, or printers that have been published within the OU.
9.	A. Location-based would be the most appropriate structure because the administrative structure is set up to take advantage of administrators at each location having control over their own resources.
10.	C. If the objects are placed within the same forest, they will share the same Global Catalog, which will allow those users who do need to view the objects the ability to search for them. If the permissions are set on the OU so that the users who need to view them have the List Contents permission, the users will be able to search for the objects while those who have not been granted that permission will not see that they exist.