Exam Essentials

Understand the OU owner role.     The OU owner is a group that has been assigned the Full Control permission and is responsible for controlling and maintaining the OU tree.

Understand the OU admin role.     The OU admin is the group that is responsible for a specific function within the OU, such as maintaining user or group objects.

Know what the five OU design options are.     OU designs are based upon location, organization, function, or two combinations of location and organization.

Know what object autonomy is and how it is achieved.     Object autonomy is granted to OU owners when they are given control over their OU tree. OU owners from other OUs will not have control over the resources that are managed by any other OU owner.

Know what object visibility is and how it is achieved.     Object visibility is the ability to view objects within Active Directory, and it is controlled by giving the permission to list the contents of an OU to those users who need access to the object.

Understand object-based delegation.     Object-based delegation grants a group the ability to work with all aspects of a specific object type, such as a user object or computer object.

Understand task-based administration.     Task-based administration grants a group the ability to perform specific functions on an object type, such as changing the password on a user object.

Know what an account OU is. Account OUs consist of user objects and group objects.

Know what a resource OU is. Resource OUs consists of computer objects and shared folders, printers, and other resources that are published in Active Directory.

Understand how inheritance works.     Inheritance allows for the permissions that are set at a parent OU to be passed down to a child OU and to all of the objects that reside within these OUs.

Know the two migration options when you are migrating Windows NT 4 domains to OUs.     Windows NT 4 account and resource domains can be migrated so that they retain their original design configuration and the same groups can manage them, or they can be restructured so that the OU structure is more efficient and the groups that administer them are changed.