Another administrator has been changing permissions on the O…

Another administrator has been changing permissions on the Operations OU by adding some groups and users to the DACL. You’re concerned that the JrAdmin account has been given more access to the OU than it should have. You need to see all permissions the JrAdmin account has to the Operations OU. What should you do?

You want to see the permissions set on an OU, so you open Ac…

You want to see the permissions set on an OU, so you open Active Directory Users and Computers, right-click the OU, and click Properties. After clicking all the available tabs, you can’t seem to find where permissions are set in the Properties dialog box. What should you do?

Jane has left the company. Her user account is a member of s…

Jane has left the company. Her user account is a member of several groups and has permissions and rights to a number of forest-wide resources. Jane’s replacement will arrive in a couple of weeks and needs access to the same resources. What’s the best course of action?

You have created a GPO named RestrictU and linked it to the…

You have created a GPO named RestrictU and linked it to the Operations OU (containing 30 users) with link order 3. RestrictU sets several policies in the User Configuration node. After a few days, you realize the Operations OU has three users who should be exempt from the restrictions in this GPO. You need to make sure these three users are exempt from RestrictU’s settings, but all other policy settings are still in effect for them. What’s the best way to proceed?