Your network contains an Active Directory domain named contoso.com. All domain
controllers run Windows Server 2012 R2.
The domain contains a server named Server1 that runs Windows Server 2012 R2.
You need to ensure that when users log on to Server1, their user account is added
automatically to a local group named Group1 during the log on process.
Which Group Policy settings should you modify?
A.
User Rights Assignment
B.
Preferences
C.
Security Options
D.
Restricted Groups
Explanation:
With Preferences, local and domain accounts can be added to a local group without affecting
the existing members of the group
References:
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 8: File
Services and Storage, p. 361
http://technet.microsoft.com/en-us/library/cc785631(v=ws.10).aspx
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-localadministrator-groups/
http://technet.microsoft.com/en-us/library/cc780182(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/hh831424.aspx
that should be C
https://technet.microsoft.com/en-us/library/cc747484(v=ws.10).aspx
Open Server Management.
In the console tree, click Advanced Management, right-click Group Policy Management Console (GPMC), and then click Add forest.
In the Add forest dialog box, enter the domain name. When prompted Do you want to add this forest with this domain?, click Yes.
In the GPMC tree, click Forest:ForestName, click Domains, right-click DomainName, and then click Create and Link a GPO Here.
In the New GPO dialog box, in the New box, type the name that you want to use for this policy (for example, Rename administrator account), and then click OK.
In the GPMC tree, click Group Policy Objects located under the Windows Small Business Server domain name, right-click the Rename administrator account Group Policy object that you created, and then click Edit.
In Group Policy Object Editor, click Computer Configuration, click Windows Settings, click Security Settings, click Local Policies, and then click Security Options.
In the details pane, double-click Accounts: Rename administrator account.
Select the Define this policy setting check box, and then type the new name for the Administrator account.
Click OK, and then close Group Policy Object Editor.
Close the Group Policy Management Console.
After changing the Administrator account name, you need to log off and then use the new name to log back on as an administrator on the server.
0
0
Under preferences, control panel, local user users and groups you can add domain accounts and groups to local groups. I think the answer is B.
0
0
answer is B. It’s done through group policy preferences:
https://technet.microsoft.com/en-ca/library/cc732525.aspx
0
0