You have an Exchange Server 2013 organization.
An Active Directory administrator is concerned about the permissions assigned to a group named Exchange
Trusted Subsystem. Exchange Trusted Subsystem has a member named Exchange Windows Permissions.
You need to show the Active Directory administrator all of the permissions assigned to Exchange Trusted
Subsystem.
What should you use?

A.
ADSI Edit

B.
Active Directory Sites and Services

C.
Dsget

D.
Active Directory Users and Computers

Explanation:
D: ADUC would be the best choice to view permissions and group memberships assigned to an AD object.
NOT A: Although possible to view the permissions assigned on an AD objects ACL, group memberships cannot
be viewed via ADSIEdit.
NOT B: Cannot view User/Group permissions in ADSS.
NOT C: DSGET can retrieve user/group members and memberships, but not the permissions assigned to the
object.