MD-100 Exam QuestionsBrowse all questions from this exam

MD-100 Exam - Question 256


SIMULATION -

Please wait while the virtual machine loads. Once loaded, you may proceed to the lab section. This may take a few minutes, and the wait time will not be deducted from your overall test time.

When the Next button is available, click it to access the lab section. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.

Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.

Labs are not timed separately, and this exam may more than one lab that you must complete. You can use as much time as you would like to complete each lab.

But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.

Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

Username and password -

Use the following login credentials as needed:

To enter your password, place your cursor in the Enter password box and click on the password below.

Username: Contoso/Administrator -

Password: Passw0rd!

The following information is for technical support purposes only:

Lab Instance: 10921597 -

You need to create a group named Group2 on Client2. The members of Group2 must be able to change the system time. The solution must use the principle of least privilege.

To complete this task, sign in to the required computer or computers.

Show Answer
Correct Answer:

To complete the task of creating a group named Group2 on Client2 and ensuring its members can change the system time while adhering to the principle of least privilege, follow these steps: 1. On Client2, press Windows+R, type 'lusrmgr.msc' to open the Local Users and Groups management. 2. In the Local Users and Groups window, right-click 'Groups' and select 'New Group.' 3. Enter 'Group2' as the name and provide a description if desired. 4. Click 'Add' to add members to this group by specifying their usernames. 5. Click 'Create' and then 'Close.' 6. Press Windows+R again, type 'secpol.msc' to open the Local Security Policy editor. 7. In the Local Security Policy editor, expand 'Local Policies,' then click 'User Rights Assignment.' 8. Double-click 'Change the system time' policy in the right pane. 9. Click 'Add User or Group,' then click 'Object Types' and ensure all relevant boxes are checked. 10. Click 'Advanced,' then 'Find Now.' Select the 'Group2' that was created earlier and click 'OK.' 11. Confirm by clicking 'OK' again, and then close all open windows. By following these steps, you will have created Group2 and assigned it the specific privilege to change the system time, ensuring you adhere to the principle of least privilege.

Discussion

4 comments
Sign in to comment
AnoniMouse
May 28, 2021

Or simply, create the account, then open GPEDIT.MSC. Go to Computer Configuration Windows Configuration Security Settings User Rights Assignment Look for CHANGE THE SYSTEM TIME, double click, add your user there

RodrigoT
Jan 22, 2022

I didn't find this in gpedit. I had to open secppol.

FrancisLai
Mar 15, 2022

It is there. Computer Configuration -> Windows Configuration -> Security Settings -> Local Policies -> User Rights Assignment -> Change the system time

Perycles
May 4, 2021

Correct

raduM
Jun 9, 2022

you cannot macke changes only for the members of group 2. This will make changes to everyone that logs in to the machine

Hatsapatsa
Dec 27, 2022

Tested in a lab environment and you actually can. In 'secpol -> change the system time' you can add the group or user to have this right.

Hatsapatsa
Dec 21, 2022

Tried solution in lab environment and it worked. Create local group, add the group to secpol 'Change the system time'.