Microsoft · AZ-802
Users, groups, and service accounts
AZ-802 · Lesson 4 of 21 · 25:17
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the AZ-802 exam (Administering Windows Server). In this lesson: managing users and groups with Active Directory Administrative Center and PowerShell, organizational units for delegation and policies, global, domain local, and universal scopes, users from trusted domains and forests, and service accounts: built-in and virtual accounts, standalone and group managed service accounts with the KDS root key, and the delegated managed service accounts of Windows Server 2025. Includes three original practice questions.
Preview the topics
- Contoso’s sales users live in the three domains of its forest, and a single group must contain them all, and be granted permissions on resources in every domain. Which scope should the group use?
- Fabrikam’s users, from a trusted forest, need access to a share in Contoso’s Paris domain. Which kind of Contoso group can contain them?
- Contoso’s intranet runs on four load-balanced web servers, all under one domain user account whose password never changes. What should replace that account?