Exam MD-102 All QuestionsBrowse all questions from this exam
Go to Exam
Question 40

DRAG DROP -

You have a computer that runs Windows 10 and contains two local users named User1 and User2.

You need to ensure that the users can perform the following actions:

User1 must be able to adjust the date and time.

User2 must be able to clear Windows logs.

The solution must use the principle of least privilege.

To which group should you add each user? To answer, drag the appropriate groups to the correct users. Each group may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

    Correct Answer:

Discussion
letters1234

As a twist, in Windows 11 a standard user can change the time without elevation. Make sure to read that this question says Windows 10.

volto

Answers are wrong User1: "By default, only users with administrator rights in Windows 10 can change time and date settings." User 2: "Restricting the Manage auditing and security log user right to the local Administrators group is the default configuration."

Futfuyfyjfj

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-system-time#default-values

Futfuyfyjfj

https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/clear-eventlog?view=powershell-5.1

Garrick98

That is correct, "you must be a member of the Administrators group on the affected computer."

mail2bala3011

I justed tested on my lab User1: Administrator User2 : Administrator Administrator can perform both action

yosry

answers should be : User1: Administrator User2: Administrator User1: "By default, only users with administrator rights in Windows 10 can change time and date settings." User 2: "Restricting the Manage auditing and security log user right to the local Administrators group is the default configuration."

Jt909

Administrators for both. Lab tested on Windows 10 22H2 domain-joined. With Power Users and Performance Log Users always access denied .

Darkfire

User1: Administrator User2: Administrator Change system time = https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/change-the-system-time#default-values Clear eventlog = https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/clear-eventlog?view=powershell-5.1 Only Administrators can. The other user groups are not administrators.

Judith1969

You are talking about domain joined in this case. I don't see any reference to that in this question. I am thing user 1: Power Users and user 2: Administrators.

Tonsku

user1: power users user2: administrators

LukeXtreme

Looks like the below is correct: User1: Administrator; you need this for changing time and date however there is GPO policy you could set to go around it but that's not a possible answer here User2 : Administrator; By default, only members of the Administrators group are able to clear the system logs. Workaround? You would need to change the Security Descriptor to allow users to clear the logs; however, this is a security-sensitive operation and should be done with caution.

sergioandreslq

User1: The Power Users group is able to install software, manage power and time-zone settings, and install ActiveX controls, actions that limited Users are denied. User 2: Only administrator

MR_Eliot

In Windows 10 & 11 you can change the timezone without any admin priviliges. Hower when you want to change the date and time settings, it will ask you for admin permissions. So my anwers: 1: Administrators 2: Administrators. Performance log users can only shedule colletion of logs. Not remove the system logs.

Softeng

- User 1: Administrator - User 2: Administrator https://community.spiceworks.com/topic/2244141-power-users-vs-local-admins

Merrybob

User 1: Power Users (they use the principle of least privilege and can change Time/Date settings and are still available in Windows 10) User 2: Administrators (only the local administrators group members can delete Windows logs) Ref: https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.management/clear-eventlog?view=powershell-5.1#description

Amir1909

- Administrators - Administrators

belyo

Power Users is a deprecated group since Vista, but according to some research they can change date & time | not sure why is present in tests... https://superuser.com/questions/241092/difference-between-power-user-and-administrator Performance Log Users is correct for clearing the event log https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/understand-security-groups#performance-log-users

cpaljchc4

According to Chat GPT 1. For User 1 to adjust the date and time, they typically need to be part of the "Administrators" group or have specific permissions granted for modifying the system time. 2. For User2 to clear Window logs, they usually need to be part of the "Event Log Readers" or "Backup Operators" group to access and manage event logs without elevated privileges. If there are no better answer and explanation here, I am going to follow ChatGPT...

kay000001

haha you will fail for sure!

NoursBear

I sure would not use Chat GPT haha

iTomi

ChatGPT is reliable as a Kremlin spokesperson.

Daveazure

I think they are mixing it up with 365 RBAC.

Garrick98

Both answers are Administrators