Home » Microsoft » 70-742 » What should you do?
Your company has multiple branch offices.
The network contains an Active Directory domain named contoso.com.
In one of the branch offices, a new technician is hired to add computers to the domain.
After successfully joining multiple computers to the domain, the technician fails to join any more computers to the domain.
You need to ensure that the technician can join an unlimited number of computers to the domain.
What should you do?
A. Configure the technician’s user account as a manager service account.
B. Run the Set-ADComputer cmdlet.
C. Modify the Security settings of the Computers container.
D. Add the technician to the Domain Computers group.
Correct Answer: C
Explanation/Reference:
Users who have the Create Account Objects privilege for the Computers container can create an unlimited number of computer accounts in the domain. You can grant this privilege by accessing the Advanced Security settings on the Security Tab of the Computer container via Active Directory Users And Computers or the
Active Directory Administrative Center.
References: https://books.google.co.za/books?id=LvNODQAAQBAJ&pg=PT268&lpg=PT268&dq=Modify+the+Security+settings+of+the+Computers+container+2016&source=bl&ots=1lRBQ21cL0&sig=1AUSon_6cjIqyN_927iOB7z3-Eg&hl=en&sa=X&ved=0ahUKEwjBi4OS-rnbAhXKD8AKHerKDcgQ6AEISjAC#v=onepage&q=Modify%20the%20Security%20settings%20of%20the%20Computers%20container%202016&f=false
83answer C. Modify the Security settings of the Computers container is the correct answer.
Users in the Administrators or Domain Admins groups, and those users who have delegated permissions on containers in Active Directory to create and delete computer accounts, are not restricted by the 10 AD Machine quota limitation.