Note: This question is part of a series of questions that present the same scenario. Each question in the series
contains a unique solution that might meet the stated goals. Some question sets might have more than one
correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will
not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named
Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU)
named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named User1 to the local Administrators group on Server1.
Solution: From the Computer Configuration node of GPO1, you configure the Local Users and Groups
preference.
Does this meet the goal?
A.
Yes
B.
No
There isn’t a Local Users and Groups preference. Restricted Groups is what’s used.
0
6
Both way works.
5
4
Restricted Groups will remove the existing membership of the Administrators group. The question states we want to ADD the user.
Restricted Groups can add a GROUP without removing current membership, but it cannot add a USER. Which is the question here.
Reference:
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/
6
0
There is a local users and groups node under preferences. And from there you can add a domain user to the local admin on a server.
11
0