You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers in the ABC.com domain, including
domain controllers, have Windows Server 2012 R2 installed.
ABC.com’s user accounts are located in an organizational unit (OU), named ABCStaff. ABC.com’s managers belong to a group, named ABCManagers.
You have been instructed to create a new Group Policy object (GPO) that should be linked to the ABCStaffOU, but not affect ABC.com’s managers.
Which of the following actions should you take?
A.
You should consider removing the user accounts of the managers from the ABCStaff OU.
B.
You should consider configuring the new GPO’s WMI filter.
C.
You should consider adding the user accounts of ABC.com’s managers to the Admins group.
D.
You should consider adding the user accounts of ABC.com’s managers to the local Administrators group.
WMI filter only applies to computer settings.
Best answer for this question would be A since you dont want to affect ABCManagers group by the GPO you need to move it out of the OU where the GPO was linked.
0
0
Better way would be Security Filtering but not in any answer, so A is the one but not best one
0
0
A. is the answer.
http://www.certifychat.com/threads/microsoft-70-410-sacriestory-exam-d-question-10.613/
The policy is linked to the ABCStafff OU. In the OU are all the users (including the managers). For the policy to stay on the ABCStaff OU and not affect the managers, you move the managers accounts out of the ABCStaff OU.
The group named ABCManagers is just there for distraction. You also don’t know where the ABCManagers group is placed in the AD.
0
0
A is the correct answer.
http://www.microsoft4shared.com/new-updated-microsoft-mcsa-70-410-real-exam-questions-and-answers-download-241-250.html
0
0
I think A
0
0