Your organization wants to allow department IT liaisons to reset passwords and unlock accounts for users in their department without giving them Domain Admin rights. How would you implement this using delegation in Active Directory?

Sample answer preview

Delegation of administrative control is a fundamental security practice in Active Directory that follows the principle of least privilege. Rather than granting department IT liaisons full Domain Admin rights, which would give them unrestricted access to every object in the…