ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 14 - AZ-720 discussion

Report
Export

You need to resolve the issue with Admin1.

What should you do?

A.
Configure Azure AD Connect filtering to include the Admins organizational unit.
Answers
A.
Configure Azure AD Connect filtering to include the Admins organizational unit.
B.
Reset the Azure AD Connect service account password in AD DS.
Answers
B.
Reset the Azure AD Connect service account password in AD DS.
C.
Enable security inheritance in Active Directory Domain Services (AD DS).
Answers
C.
Enable security inheritance in Active Directory Domain Services (AD DS).
D.
Start a full import in Azure AD Connect.
Answers
D.
Start a full import in Azure AD Connect.
Suggested answer: C

Explanation:

The error 8344 insufficient access rights to perform the operation indicates that the Azure AD Connect service account does not have the required permissions to synchronize the Admin1 account.

This could be because the Admin1 account is in an organizational unit (OU) that has security inheritance disabled, which prevents the service account from inheriting the necessary permissions from the parent OU. To resolve this issue, you should enable security inheritance in AD DS for the OU that contains the Admin1 account. This will allow the service account to synchronize the Admin1 account to Azure AD. Alternatively, you could also grant the service account explicit permissions on

the Admin1 account, but this would be more tedious and less scalable than enabling security inheritance.

asked 02/10/2024
IOSSIF ZINGUER
46 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first