HOTSPOT
Your network contains an Active Directory domain named contoso.com.
Computer accounts for the marketing department are in an organizational unit (OU) named
Departments\Marketing\Computers. User accounts for the marketing department are in an OU
named Departments\Marketing\Users.
Marketing users can only log on to the client computers in the Departments\Marketing\Computers
OU.
You need to apply an application control policy to all of the marketing users.
Which Group Policy Object (GPO) should you configure?
To answer, select the appropriate GPO in the answer area.
Answer: 
Explanation:
Application control policies specify which programs are allowed to run on the local computer and
which are not.
References:
http://technet.microsoft.com/en-us/library/hh125923(v=ws.10).aspx
http://technetHYPERLINK “http://technet.microsoft.com/enus/library/cc781458(v=WS.10).aspx#_blank”.HYPERLINK “http://technet.microsoft.com/enus/library/cc781458(v=WS.10).aspx#_blank”microsoftHYPERLINK “http://technet.microsoft.com/enus/library/cc781458(v=WS.10).aspx#_blank”.comHYPERLINK “http://technet.microsoft.com/enus/library/cc781458(v=WS.10).aspx#_blank”/en-us/library/cc781458(v=WSHYPERLINK
“http://technet.microsoft.com/en-us/library/cc781458(v=WS.10).aspx#_blank”.HYPERLINK
“http://technet.microsoft.com/en-us/library/cc781458(v=WS.10).aspx#_blank”10)HYPERLINK
“http://technet.microsoft.com/en-us/library/cc781458(v=WS.10).aspx#_blank”.HYPERLINK
“http://technet.microsoft.com/en-us/library/cc781458(v=WS.10).aspx#_blank”aspx
http://technetHYPERLINK “http://technet.microsoft.com/enus/library/hh967461.aspx#_blank”.HYPERLINK “http://technet.microsoft.com/enus/library/hh967461.aspx#_blank”microsoftHYPERLINK “http://technet.microsoft.com/enus/library/hh967461.aspx#_blank”.comHYPERLINK “http://technet.microsoft.com/enus/library/hh967461.aspx#_blank”/en-us/library/hh967461HYPERLINK
“http://technet.microsoft.com/en-us/library/hh967461.aspx#_blank”.HYPERLINK
“http://technet.microsoft.com/en-us/library/hh967461.aspx#_blank”aspx
http://technetHYPERLINK “http://technet.microsoft.com/enus/library/ee461050.aspx#_blank”.HYPERLINK “http://technet.microsoft.com/enus/library/ee461050.aspx#_blank”microsoftHYPERLINK “http://technet.microsoft.com/enus/library/ee461050.aspx#_blank”.comHYPERLINK “http://technet.microsoft.com/enus/library/ee461050.aspx#_blank”/en-us/library/ee461050HYPERLINK“http://technet.microsoft.com/en-us/library/ee461050.aspx#_blank”.HYPERLINK
“http://technet.microsoft.com/en-us/library/ee461050.aspx#_blank”aspx
http://technetHYPERLINK “http://technet.microsoft.com/enus/library/ee461044.aspx#_blank”.HYPERLINK “http://technet.microsoft.com/enus/library/ee461044.aspx#_blank”microsoftHYPERLINK “http://technet.microsoft.com/enus/library/ee461044.aspx#_blank”.comHYPERLINK “http://technet.microsoft.com/enus/library/ee461044.aspx#_blank”/en-us/library/ee461044HYPERLINK
“http://technet.microsoft.com/en-us/library/ee461044.aspx#_blank”.HYPERLINK
“http://technet.microsoft.com/en-us/library/ee461044.aspx#_blank”aspx
GPO3 ?
0
0
The application control policy is not there under the user config in group policy. I believe it is best practice to apply computer settings to computer OUs and User settings to User OUs.
So there for GPO3.
Someone correct me if I am wrong.
0
0
GPO3 -> edit -> Computer Configuration -> Policies -> Windows settings -> Security Settings -> Local Policy -> User Rights Assigment -> Allow logon locally -> [v] Define these policy settings -> Add user or Group.
The answer is correct!
0
0
Application Control Policies settings
https://technet.microsoft.com/en-us/library/hh125923(v=ws.10).aspx
The increased use of networks and the Internet in daily business computing means that it is more likely than ever that an organization’s users will encounter malicious software. Application control policies can help organizations protect themselves because they provide another layer of defense against viruses, Trojan horses, and other types of malicious software.
Application control policies specify which programs are allowed to run on the local computer and which are not.
You can configure the Application Control Policies settings in the following location within the Group Policy Management Console (GPMC):
Computer Configuration\Windows Settings\Security Settings\Application Control Policies
0
0
Application Control policies only apply to computers, so GPO3 is correct.
0
0