Your network contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1. The File Server Resource Manager role service is installed on Server1. All
servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains
Server1. The following graphic shows the configured settings in GPO1.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You attempt to configure access-denied assistance on Server1, but the Enable access-denied
assistance option cannot be selected from File Server Resource Manager.
You need to ensure that you can configure access-denied assistance on Server1 manually by using
File Server Resource Manager.
Which two actions should you perform?
A.
Set the Enable access-denied assistance on client for all file types policy setting to Disabled for
GPO1.
B.
Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1.
C.
Set the Enable access-denied assistance on client for all file types policy setting to Enabled for
GPO1.
D.
Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.
Explanation:
C)To configure access-denied assistance for all file types by using Group Policy
Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy
Management.
Right-click the appropriate Group Policy, and then click Edit.
Click Computer Configuration, click Policies, click Administrative Templates, click System, and then
click Access-Denied Assistance.
Right-click Enable access-denied assistance on client for all file types, and then click Edit.
Click Enabled, and then click OK.
D)To configure access-denied assistance by using Group Policy (see step 5)
Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy
Management.
Right-click the appropriate Group Policy, and then click Edit.
Click Computer Configuration, click Policies, click Administrative Templates, click System, and then
click Access-Denied Assistance.
Right-click Customize message for Access Denied errors, and then click Edit.
Select the Enabled option.Etc
Deploy Access-Denied Assistance (Demonstration Steps)
http://technet.microsoft.com/en-us/library/hh831402.aspx
Tested in my Lab.
Answer should be B only. But since it needs two, C or A had no effect on configuring access denied assistance manually.
0
0
yea true, i searched in others dumps, also this questin appears in 70 417, But asking just one answer. I think that C would be better then A.
0
0
I believe it needs to be B and C. The reason why is that you need to configure using FRMS. If you enable custom message GPO then you customise the message in the GPO and not in FRMS.
0
0
If it asked for one answer only : B
If it asked for two answers: B – C
0
0
Picking up a comment i posted on a similar question:
“Ok since i wasn’t sure about this answer, i tried it in lab.
After applying answer B, the Access-Denied Assistance tab on FSRM is now available, before it was greyed out. So i think you would only need one answer, and in this case would be B. If the real exam asks for 2 answers then i’ll pick B and C, since those 2 answers are the only ones that don’t grey out the Access-Denied Assistance tab on FSRM.”
http://www.aiotestking.com/microsoft/which-two-actions-should-you-perform-594/
0
0
Provided answer is correct. If it was set to not configured and it previous manual state was disabled, it wil stay disabled.
See also:
https://www.experts-exchange.com/questions/28063571/What's-the-difference-in-gpo-for-not-configured-enabled-disabled.html
0
0