Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains user accounts and computer accounts.
A Group Policy object (GPO) named GP1 is linked to the domain. GP1 contains Computer Configuration settings and User Configuration settings.
You need to prevent the User Configuration settings in GP1 from being applied to users. The solution must ensure that the Computer Configuration settings in GP1 are applied to all client computers.
What should you configure?
A. The GPO Status
B. The Block Inheritance feature
C. The Group Policy loopback processing mode
D. The Enforced setting
Explanation:
You can disable a part of the GPO by blocking the Computer Configuration or User Configuration settings, or both, and don-t allow them to be applied. You can enable and disable policies partially or entirely by following these steps:
- In the GPMC, select the container for the site, domain, or OU with which you want to work.
- Select the policy object you want to work with, and then click the Details tab in the right pane.
- Choose one of the following status settings from the GPO Status list and click OK when prompted to confirm that you want to change the status of this GPO:
- All Settings Disabled Disallows processing of the policy object and all its settings.
- Computer Configuration Settings Disabled Disables processing of Computer Configuration settings. This means that only User Configuration settings are processed.
- Enabled Allows processing of the policy object and all its settings.
- User Configuration Settings Disabled Disables processing of User Configuration settings. This means that only Computer Configuration settings are processed.
Incorrect Answers:
B: By default settings in Group Policy Objects (GPOs) get applied in the following order: Local system policies first, then policies on the Active Directory Domain level, then policies on the Active Directory Site level and then the policies for all the Organization Units the computer and user are members of, starting at the root of the domain. The settings that are last applied are the settings in effect.
The Block Inheritance feature affects higher-level GPOs so that they dont apply to the OU with the block inheritance feature. Only those GPOs that are configured directly on the OU will apply and inheritance will continue to child OUs, starting at the parent OU where the blocking is in effect.
C: The Group Policy loopback processing mode directs the system to apply the set of Group Policy objects for the computer to any user who logs on to a computer affected by this policy
D: By default settings in Group Policy Objects (GPOs) get applied in the following order: Local system policies first, then policies on the Active Directory Domain level, then policies on the Active Directory Site level and then the policies for all the Organization Units the computer and user are members of, starting at the root of the domain. The settings that are last applied are the settings in effect.
When a GPO is enforced it means the settings in the GPO cannot be overruled by a GPO which is link enabled on an Organizational Unit below the Organizational Unit with the enforced GPO.
References:
https://blogs.technet.microsoft.com/grouppolicy/2012/11/29/group-policy-in-windows-server-2012-infrastructure-status/
https://blogs.technet.microsoft.com/musings_of_a_technical_tam/2012/02/15/group-policy-basics-part-2-understanding-which-gpos-to-apply/
https://technet.microsoft.com/en-us/library/cc978513.aspx
https://technet.microsoft.com/en-us/library/dd673616.aspx