Home » Microsoft » 70-411 » What should you do?
You have the following Windows PowerShell Output.
You need to create a Managed Service Account.
What should you do?
A. Run New-ADServiceAccount -Name “service01” -DNSHostName service01.contoso.com -SAMAccountName service01.
B. Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount -Name “service01” -DNSHostName service01.contoso.com.
C. Run Add-KDSRootKey, and then run New-ADServiceAccount -Name “service01” -DNSHostName service01.contoso.com.
D. Run Set-KDSConfiguration, and then run New-ADServiceAccount -Name “service01” -DNSHostName service01.contoso.com.
Correct Answer: C
Explanation/Reference:
From the exhibit we see that the required key does not exist. First we create this key, then we create the managed service account.
The Add-KdsRootKey cmdlet generates a new root key for the Microsoft Group Key Distribution Service (KdsSvc) within Active Directory (AD). The Microsoft Group KdsSvc generates new group keys from the new root key.
The New-ADServiceAccount cmdlet creates a new Active Directory managed service account.
Reference: New-ADServiceAccount
https://technet.microsoft.com/en-us/library/hh852236(v=wps.630).aspx
Reference: Add-KdsRootKey
ttps://technet.microsoft.com/en-us/library/jj852117(v=wps.630).aspx
