You work as a Network Administrator at AIOTestking.com. AIOTestking.com has an Active Directory
Domain Services (AD DS) domain named AIOTestking.com. All servers in the AIOTestking.com domain
have Microsoft Windows Server 2012 R2 installed and all client computers have Windows 7
Professional installed. The client computers are a mix of portable laptop computers and desktop
computers.
AIOTestking.com has a Sales department and a Research department. An organizational unit (OU)
exists for each department. The OUs contain the user and computer accounts for the respective
departments.
You configure a group policy object (GPO) named ManagersGPO. You link the GPO to the
domain.
You need to ensure that the ManagersGPO is applied to managers in all departments. The
ManagersGPO must not be applied to other users.
How can you ensure that only managers receive the GPO?
A.
You should configure Security Filtering.
B.
You should modify the GPO precedence order.
C.
You should configure WMI filtering.
D.
You should modify the GPO enforcement settings.
E.
You should modify the GPO status.
Answer is A
https://technet.microsoft.com/en-us/library/cc752992.aspx
0
0
You are getting confused with a different question. This states that there is an OU for each department. What you need to do is create a WMI filter so that this policy only applies to desktop users.
0
0
Agree with A
Security group filtering determines whether the GPO as a whole applies to groups, users, or computers
Question is: “How can you ensure that only managers receive the GPO?”
B: Precedence would work but would apply to whole OU and would need additional steps to only apply to managers including creation of another group of users that doesn’t include the managers. Ffrom the group policy object’s delegation tab, select advanced, Add the non-managers group, select Deny permission.
C: Windows Management Instrumentation (WMI) filters allow you to dynamically determine the scope of Group Policy objects (GPOs) based on attributes of the target computer.
D: GPO enforcement is at OU level to ensure a particular GPO is applied, doesn’t filter out to just applying to managers
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx
E: GPO status to enable or disable a GPO
0
0