Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
The domain contains a server named Server1 that runs Windows Server 2012 R2.
You need to ensure that when users log on to Server1, their user account is added automatically to a
local group named Group1 during the log on process.
Which Group Policy settings should you modify?

A.
User Rights Assignment

B.
Preferences

C.
Security Options

D.
Restricted Groups

Explanation:
With Preferences, local and domain accounts can be added to a local group without affecting the
existing members of the group
References:
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 8: File Services and
Storage, p. 361
http://technet.microsoft.com/en-us/library/cc785631(v=ws.10).aspx
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-localadministrator-groups/
http://technet.microsoft.com/en-us/library/cc780182(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/hh831424.aspx