You have a group Managed Service Account named Service01. Three servers named Server01, Server02, andServer03 currently use the Service01 service account.
You plan to decommission Server01.
You need to remove the cached password of the Service01 service account from Server01. The solution must
ensure that Server02 and Server 03 continue to use Service01.
Which cmdlet should you run?
A.
Set-ADServiceAccount
B.
Remove-ADServiceAccount
C.
Uninstall-ADServiceAccount
D.
Reset-ADServiceAccountPassword
Explanation:
The Remove-ADServiceAccount cmdlet removes an Active Directory service account. This cmdlet does not
make changes to any computers that use the service account. After this operation, the service account is no
longer hosted on the target computer but still exists in the directory.
Incorrect:
Not C: The Uninstall-ADServiceAccount cmdlet removes an Active Directory service account on the computer
on which the cmdlet is run. The specified service account must be installed on the computer.
Remove-ADServiceAccount
https://technet.microsoft.com/en-us/library/ee617190.aspx
I would have said C :
https://technet.microsoft.com/en-us/library/jj128431(v=ws.11).aspx#BKMK_DecommMemberHosts
1
1
B
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee617190(v=technet.10)
The Remove-ADServiceAccount cmdlet removes an Active Directory service account. This cmdlet does not make changes to any computers that use the service account. After this operation, the service account is no longer hosted on the target computer but still exists in the directory.
1
1
Answer is C. B would remove the MSA from AD thus preventing the other 2 systems from using the MSA.
https://docs.microsoft.com/en-us/powershell/module/addsadministration/uninstall-adserviceaccount?view=win10-ps
1
1
Answer C
“Uninstall” remove account from computer
“Remove-ADServiceAccount” – delete account from domain at all.
2
0
By Calin
April 12, 2016 at 11:17 am
i’m not shure but:
Set-ADServiceAccount – https://technet.microsoft.com/en-us/library/ee617252.aspx
Uninstall-ADServiceAccount – https://technet.microsoft.com/en-us/library/ee617202.aspx
Uninstalls an Active Directory service account from a computer. -The Uninstall-ADServiceAccount cmdlet removes an Active Directory service account on the computer on which the cmdlet is run. The specified service account must be installed on the computer.
Remove-ADServiceAccount – https://technet.microsoft.com/en-us/library/ee617190.aspx
Remove an Active Directory service account. – The Remove-ADServiceAccount cmdlet removes an Active Directory service account. This cmdlet does not make changes to any computers that use the service account. After this operation, the service account is no longer hosted on the target computer but still exists in the directory.
Reset-ADServiceAccountPassword – https://technet.microsoft.com/en-us/library/ee617201.aspx
Resets the service account password for a computer.
The Reset-ADServiceAccountPassword cmdlet resets the service account password for the local computer. This cmdlet needs to be run on the computer where the service account is installed
Actual command:
Set-ADServiceAccount -Name Account01 -PrincipalsAllowedToRetrieveManagedPassword Server02 Server03
m i right?
0
0