Your network contains an Active Directory domain named contoso.com.
The domain contains four global groups named Group].., Group2, Group3, and Group4.A user named User1 is a member of Group3.
You have an organizational unit (OU) named OU1 that contains computer accounts.
A Group Policy object (GPO) named GPO1 is linked to OU1. OU1 contains a computer account named
Computer1.
GPO1 has the User Rights Assignment configured as shown in the following table:

You need to ensure that User1 can access the shares on Computer1. What should you do?

A.
Modify the membership of Group1.

B.
In GPO1, modify the Access this computer from the network user right

C.
Modify the Deny access to this computer from the network user right.

D.
Modify the Deny log on locally user right

Explanation:
You need to ensure that User1 can access the shares on Computer1, from network.
If not from network, where would you access a shared folder from? from Mars? from Space? from toilet?
Moreover, this question has explicitly state User1 is a member of Group3, and hence it is not possible for User1
to logon Computer1 locally to touch those shared
folders on NTFS file system.
Only these two policies to be considered “Access this computer from network”, “Deny access to this computer
from network”.1
There’s no option to modify the group member ship of “Group2”, “Administrators”, or “Backup Operators”,
so we have to add a 4th entry “User1” to this policy setting “Access this computer from network”.