Your network contains an Active Directory forest named contoso.com. The functional level of the
forest is Windows Server 2008 R2.
All of the user accounts in the marketing department are members of a group named
Contoso\MarketingUsers. All of the computer accounts in the marketing department are members
of a group named Contoso\MarketingComputers.
A domain user named User1 is a member of the Contoso\MarketingUsers group. A computer named
Computer1 is a member of the Contoso\MarketingComputers group.
You have five Password Settings objects (PSOs). The PSOs are defined as shown in the following
table.
When User1 logs on to Computer1 and attempts to change her password, she receives an error
message indicating that her password is too short.
You need to tell User1 what her minimum password length is.
What should you tell User1?
A.
10
B.
11
C.
12
D.
14
Explanation:
One PSO has a precedence value of 2 and the other PSO has a precedence value of 4. In this case,
the PSO that has the precedence value of 2 has a higher rank and, hence, is applied to the object.
Missing link. Link please.
0
0
Exhibit : http://cdn.aiotestking.com/wp-content/uploads/70-411-v8/63.png
0
0
PSO precedence only matters if you have PSO’s applied to multiple Global groups that the user is a member of. The lower the precedence number is the one that applies.
When you have a PSO applied directly to a user, as is the case here, that PSO will ALWAYS take precedence.
1
0
So you are saying that if the Precedence on PSO5 was 21, the correct answer would still be “user 1”?
0
0
Yes.
“If multiple PSOs are linked to a user or group, the resultant PSO that is applied is determined as follows:
A PSO that is linked directly to the user object is the resultant PSO. If no PSO is linked to the user object, the global security group memberships of the user—and all PSOs that are applicable to the user based on those global group memberships—are compared. The PSO with the lowest msDS-PasswordSettingsPrecedence value is the resultant PSO.
If no PSO is obtained from the preceding conditions, the Default Domain Policy is applied.”
https://technet.microsoft.com/en-us/library/cc754544(v=ws.10).aspx
3
0
As we previously talked about you can apply multiple PSO objects to the same user / group. When this occurs, the PSO with the highest precedence (lowest priority number) wins. If they are the same the GUID is used to calculate which PSO to apply.
0
0
“If one or more PSOs are linked directly to the user, PSOs linked to groups are ignored, regardless of their precedence.”
So PSO5 wins – Answer A !
0
0