Your network contains an Active Directory domain named contoso.com. The domain
contains 100 servers. The servers are contained in an organizational unit (OU) named
ServersOU.
You need to create a group named Group1 on all of the servers in the domain.You must
ensure that Group1 is added only to the servers.
What should you configure?
A.
A Restricted Groups setting in a Group Policy linked to ServersOU
Enable the global catalog server.
B.
A Local Users and Groups preferences setting in a Group Policy linked to the Domain
Controllers OU
Install the DNS Server role.
C.
A Local Users and Groups preferences setting in a Group Policy linked to ServersOU
allows you to centrally manage local users and groups on domain member computers
and is this is the correct OU for the GPO change
References:
http://technet.microsoft.com/en-us/library/cc957640.aspx
http://technet.microsoft.com/en-us/library/cc731972.aspx
Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Objective 5.3 Create
and manage Active Directory groups and Organization units, Chapter 5: Install and
Administer Active Directory, p. 289-291, 293, 328
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10: Implement
Group Policy, p. 507
QUESTION 42
Your network contains an Active Directory forest named contoso.com. All domain controllers
currently run Windows Server 2008 R2.
You plan to install a new domain controller named DC4 that runs Windows Server 2012 R2.
The new domain controller will have the following configurations:
• Schema master
• Global catalog server
• Active Directory Federation Services server role
• Active Directory Certificate Services server role
You need to identify which configuration can be fulfilled by using the Active Directory Domain
Services Configuration Wizard.Which configuration should you identify?
Install the Active Directory Certificate Services role.
D.
A Restricted Groups setting in a Group Policy linked to the domain
Transfer the schema master.
C.
A Local Users and Groups preferences setting in a Group Policy linked to ServersOU
allows you to centrally manage local users and groups on domain member computers
and is this is the correct OU for the GPO change
References:
http://technet.microsoft.com/en-us/library/cc957640.aspx
http://technet.microsoft.com/en-us/library/cc731972.aspx
Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Objective 5.3 Create
and manage Active Directory groups and Organization units, Chapter 5: Install and
Administer Active Directory, p. 289-291, 293, 328
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10: Implement
Group Policy, p. 507
QUESTION 42
Your network contains an Active Directory forest named contoso.com. All domain controllers
currently run Windows Server 2008 R2.
You plan to install a new domain controller named DC4 that runs Windows Server 2012 R2.
The new domain controller will have the following configurations:
• Schema master
• Global catalog server
• Active Directory Federation Services server role
• Active Directory Certificate Services server role
You need to identify which configuration can be fulfilled by using the Active Directory Domain
Services Configuration Wizard.Which configuration should you identify?
Install the Active Directory Certificate Services role.
A.
A Restricted Groups setting in a Group Policy linked to ServersOU
Enable the global catalog server.
B.
A Local Users and Groups preferences setting in a Group Policy linked to the Domain
Controllers OU
Install the DNS Server role.
C.
A Local Users and Groups preferences setting in a Group Policy linked to ServersOU
allows you to centrally manage local users and groups on domain member computers
and is this is the correct OU for the GPO change
References:
http://technet.microsoft.com/en-us/library/cc957640.aspx
http://technet.microsoft.com/en-us/library/cc731972.aspx
Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Objective 5.3 Create
and manage Active Directory groups and Organization units, Chapter 5: Install and
Administer Active Directory, p. 289-291, 293, 328
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10: Implement
Group Policy, p. 507
QUESTION 42
Your network contains an Active Directory forest named contoso.com. All domain controllers
currently run Windows Server 2008 R2.
You plan to install a new domain controller named DC4 that runs Windows Server 2012 R2.
The new domain controller will have the following configurations:
• Schema master
• Global catalog server
• Active Directory Federation Services server role
• Active Directory Certificate Services server role
You need to identify which configuration can be fulfilled by using the Active Directory Domain
Services Configuration Wizard.Which configuration should you identify?
Install the Active Directory Certificate Services role.
D.
A Restricted Groups setting in a Group Policy linked to the domain
Transfer the schema master.
Lets first reformat this question so we can actually read it.
Your network contains an Active Directory domain named contoso.com. The domain contains 100 servers. The servers are contained in a organizational unit (OU) named ServersOU. You need to create a group named Group1 on all of the servers in the domain.
You must ensure that Group1 is added only to the servers.
What should you configure?
A. A Restricted Groups setting in a Group Policy linked to ServersOU
B. A Local Users and Groups preferences setting in a Group Policy linked to the Domain Controllers OU
C. A Local Users and Groups preferences setting in a Group Policy linked to ServersOU
D. A Restricted Groups setting in a Group Policy linked to the domain
The correct answer is C I believe because Restricted Groups are designed for the management of Local Groups, not the management of Active Directory groups.
1
0
It is not restricted group:
Managing membership of Domain Groups by using Restricted GroupsMicrosoft does not support using Restricted Groups in this scenario. Restricted Groups is a client configuration means and cannot be used with Domain Groups. Restricted Groups is designed specifically to work with Local Groups. Domain objects have to be managed within traditional AD tools. Therefore, we do not plan currently to add or support using Restricted Groups as a way to manage Domain Groups
http://support.microsoft.com/kb/279301
0
0
The question is referring to groups located ON each of the 100 servers. The questions states: “You need to create a group named “Group1″ on each of the servers”. That is not talking about domain groups. The question is referring to the creation of a local group called “Group1” on each of the 100 servers in the ServersOU OU.
The correct answer is A.
0
0
This link is for Server 2003. Last I checked, this is an exam for Server 2012/2012 R2.
0
0
Tricky because creating groups through “Local users and groups preferences” is not part of exam objectives however “restricted groups” is. If it’s just to create a group then A would be my answer. If it also included setting users then it would be C.
0
0
Restricted groups cant create new group, but only manage current. IMHO.
0
0
restricted group policy is incorrect. That is used to control the members of a group (e.g. local admins members).
The answer is C.
https://technet.microsoft.com/en-us/library/cc732525.aspx
0
0
Restricted groups would not add the group if the group is not avaiable. Restricted Groups controls the membership of a existing Group such as the Local
Administrators.
So the answer should be C.
0
0
As i’ve understood it both C and A should do the trick here.
But, after i’ve tried this in lab it seams you are right. Dont matter what i do, the Restricted GPO wont create any new groups. Only uppdate existing once…
The preferences creates the group as desierd in this senario tho..
0
0
Correct answer is : C
Local Users and Groups preferences setting in a Group Policy linked to ServersOU
0
0
On a side note, technically, almost all MS exam questions may be invalid. They almost all state that “”you” have an Active Directory Domain named Contoso.com””. You, yourself, can’t have one named that because it is already taken. Contoso.com is just an alias for Microsoft.com. So unless you work for Microsoft, there is no way you can have a domain with that name. Maybe all questions are hypothetically saying you are a MS employee. Who knows.
0
0