You delegate the permissions to create, delete, and manage groups to an IT administrator. When he tries to log on to the domain controller, he receives the error message shown in the image. Which of the following should you do to enable him to manage groups in the domain?
Explanation
Answer - D - To fix this problem, you should modify the default security policy for the Domain Controllers OU and refresh the policy using Gpupdate.exe.
Key Takeaway: By default, only Account Operators, Administrators, Backup Operators, Print Operators, and Server Operators can logon to the domain controllers locally. To allow anyone else to logon locally, you should modify the default security policy for domain controllers OU. So you should refresh the security policy using the gpupdate.exe utility.
