Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2. The domain contains two organizational units (OUs) named OU1 and
OU2 in the root of the domain. Two Group Policy objects (GPOs) named GPO1 and GPO2 are
created. GPO1 is linked to OU1. GPO2 is linked to OU2.
OU1 contains a client computer named Computer1. OU2 contains a user named User1.
You need to ensure that the GPOs Applied to Computer1areApplied to User1 when User1 logs on.
What should you configure?
A.
Item-level targeting
B.
Block Inheritance
C.
GPO links
D.
The Enforced setting
It’s certainly no A, B, or D. The only way C is right is if they mean link GPO1 to OU2, but that is problematic on it’s own.
Item level targeting applies to PREFERENCES ONLY. There are a great deal of GPO settings that are not preferences. Additionally, you can not specify users as a factor for computer preferences, though you can use computers for user preferences.
To apply GPO settings from a COMPUTER policy to a user, you have to use loopback processing.
http://blogs.technet.com/b/askds/archive/2013/02/08/circle-back-to-loopback.aspx
0
0
Yeah i agree with you. When i was reading the question, the first thing that came to my mind was, this has to be done with Loopback Processing mode, but then i read the available answers and none of them were related to that.
Loopback Processing mode should have been the answer: https://technet.microsoft.com/pt-pt/library/cc757470(v=ws.10).aspx
These answers aren’t for this question. Correct me if i’m wrong.
0
0
I agree that loopback processing would have been the better answer. Of the available answers I think GPO links is the better choice. With Item level targeting you would still have to have the GPO linked to the OU where the user account resides.
0
1
You can use item-level targeting to change the scope of individual preference items, so they apply only to selected users or computers. Within a single Group Policy object (GPO), you can include multiple preference items, each customized for selected users or computers and each targeted to apply settings only to the relevant users or computers…
…Configuring a targeting item
To target an existing preference item so it applies only to specific users or computers..
step 5: Select Item-level targeting , and then click Targeting …
…Types of targeting items
You can configure the following types of targeting items:
….User Targeting
https://msdn.microsoft.com/en-us/library/cc733022(v=ws.11).aspx
User Targeting
Updated: September 29, 2014
Applies To: Windows 7, Windows 8, Windows 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2
A User targeting item allows a preference item to be applied to users only if the processing user is the user specified in the targeting item.
https://msdn.microsoft.com/en-us/library/cc753576(v=ws.11).aspx
0
0
Correct answer is A. Item-level targeting
Did this in my lab. Created 6 users and 2 VM’s (VM1 and VM2 with windows 7) (user1 thru 6) and separated them into two OU’s then created two GPO’s. Then assigned the GPO’s to each OU1 and OU2. I used Item-Level targeting to select user1 from OU2, ran gpupdate /force on VM1 and logged back on as user1 and viola! The GPO worked.
https://www.dell.com/support/article/us/en/04/sln285439/windows-server–using-item-level-targeting-with-group-policy-preferences?lang=en
1
0
we all know that works, we don’t need a lab. The problem is that nowhere is it mentioned that the GPO only contains preferences. If it also contains clasic GPO settings, then the answer is not correct.
1
1