Your network contains an Active Directory domain named contoso.com. All servers run Windows
Server 2012 R2.
The domain contains a domain controller named DC1 that is configured as an enterprise root
certification authority (CA).
All users in the domain are issued a smart card and are required to log on to their domain-joined
client computer by using their smart card.
A user named User1 resigned and started to work for a competing company.
You need to prevent User1 immediately from logging on to any computer in the domain. The
solution must not prevent other users from logging on to the domain.
Which tool should you use?

A.
Active Directory Users and Computers
B.
Server Manager
C.
The Certificates snap-in
D.
Active Directory Administrative Center
Explanation:
To disable or enable a user account using Active Directory Administrative Center
1. To open Active Directory Administrative Center, click Start , click Administrative Tools , and then
click Active Directory Administrative Center .
To open Active Directory Users and Computers in Windows Server 2012, click Start , type dsac.exe.
2. In the navigation pane, select the node that contains the user account whose status you want to
change.
3. In the management list, right-click the user whose status you want to change.
4. Depending on the status of the user account, do one of the following:
To disable the user account, click Disable.
To enable the user account, click Enable.Disable or Enable a User Account
Why not A? A should be OK too.
0
0
They key word in this question is “immediately”.
Answer is D.
0
0
How is Active Directory Administrative Center faster than ADUC?
0
0
I don’t know if ADAC is faster than ADUC but what I know is that Microsoft plan to prefer ADAC for the management of users for the next version of Windows Server, so if you have to choose between ADAC and ADUC, you mostly have to choose ADAC
0
0
I think, because ADAC is full of unwanted s..t the it is always load slower than simply ADUC what is nothing more than MMC+plug-in. Ahh… and additionally even because of splash banner the new ADAC is slower.
0
0
Guys, it’s not about whether ADUC or ADAC is faster. This is the 3rd exam, you guys should know by now that MS prefers answers that are in Powershell or newer technologies. ADAC is the preferred answer and will most likely replace ADUC in the future. A lot of things have to be done in ADAC, so that’s the preferred solution.
If the answer choice has Certificate Authority, that would be the preferred one.
1
0
Yes, A and D is both good answer.
PS: Do not forget to initiate a domain wise sync with site and services after you disable the account.
0
0
Be interesting to see on the test. ADUC is quicker than ADAC.
0
0
ADAC
0
0