Yournetwork contains an Active Directory domain named contoso.com. The domain contains a file
server named Server1. The File Server Resource Manager role service is installed on Server1. All
servers run Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains
Server1. The following graphic shows the configured settings in GPO1.

Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You attempt to configure access-denied assistance on Server1, but the Enable access-denied
assistance option cannot be selected from File Server Resource Manager.
You need to ensure that you can configure access-denied assistance on Server1 manually by using
File Server Resource Manager.
Which two actions should you perform?

A.
Set the Enable access-denied assistance on client for all file types policy setting to Disabled for
GPO1.
From Windows Explorer,modify the Sharing properties of Sync1.

B.
Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1.
Run the Set-SyncServerSetting cmdlet.

C.
Set the Enable access-denied assistance on client for all file types policy setting to Enabled for
GPO1.
From File and Storage Services in Server Manager, modify the properties of Sync1.

D.
Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.
To configure access-denied assistance by using Group Policy (see step 5)
1. Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy
Management.
2. Right-click the appropriate Group Policy, and then click Edit.
3. Click Computer Configuration, click Policies, click Administrative Templates, click System,
and then click Access-Denied Assistance.
4. Right-click Customize message for Access Denied errors, and then click Edit.
5. Select the Enabled option.
Etc Deploy Access-Denied Assistance (Demonstration Steps)
http://technet.microsoft.com/en-us/library/hh831402.aspx
QUESTION 124
Yournetwork contains an Active Directory forest named contoso.com. The forest contains four
domains. All servers run Windows Server 2012 R2.
Each domain has a user named User1.
Youhave a file server named Server1 that is used to synchronize user folders by using the Work
Folders role service.
Server1 has a work folder named Sync1.
Youneed to ensure that each user has a separate folder in Sync1.
What should you do?
Run the Set-SyncShare cmdlet.

D.
Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.
To configure access-denied assistance by using Group Policy (see step 5)
1. Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy
Management.
2. Right-click the appropriate Group Policy, and then click Edit.
3. Click Computer Configuration, click Policies, click Administrative Templates, click System,
and then click Access-Denied Assistance.
4. Right-click Customize message for Access Denied errors, and then click Edit.
5. Select the Enabled option.
Etc Deploy Access-Denied Assistance (Demonstration Steps)
http://technet.microsoft.com/en-us/library/hh831402.aspx
QUESTION 124
Yournetwork contains an Active Directory forest named contoso.com. The forest contains four
domains. All servers run Windows Server 2012 R2.
Each domain has a user named User1.
Youhave a file server named Server1 that is used to synchronize user folders by using the Work
Folders role service.
Server1 has a work folder named Sync1.
Youneed to ensure that each user has a separate folder in Sync1.
What should you do?
Run the Set-SyncShare cmdlet.

A.
Set the Enable access-denied assistance on client for all file types policy setting to Disabled for
GPO1.
From Windows Explorer,modify the Sharing properties of Sync1.

B.
Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1.
Run the Set-SyncServerSetting cmdlet.

C.
Set the Enable access-denied assistance on client for all file types policy setting to Enabled for
GPO1.
From File and Storage Services in Server Manager, modify the properties of Sync1.

D.
Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.
To configure access-denied assistance by using Group Policy (see step 5)
1. Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy
Management.
2. Right-click the appropriate Group Policy, and then click Edit.
3. Click Computer Configuration, click Policies, click Administrative Templates, click System,
and then click Access-Denied Assistance.
4. Right-click Customize message for Access Denied errors, and then click Edit.
5. Select the Enabled option.
Etc Deploy Access-Denied Assistance (Demonstration Steps)
http://technet.microsoft.com/en-us/library/hh831402.aspx
QUESTION 124
Yournetwork contains an Active Directory forest named contoso.com. The forest contains four
domains. All servers run Windows Server 2012 R2.
Each domain has a user named User1.
Youhave a file server named Server1 that is used to synchronize user folders by using the Work
Folders role service.
Server1 has a work folder named Sync1.
Youneed to ensure that each user has a separate folder in Sync1.
What should you do?
Run the Set-SyncShare cmdlet.

Explanation:
C)
To configure access-denied assistance for all file types by using Group Policy
1. Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy
Management.
2. Right-click the appropriate Group Policy, and then click Edit.
3. Click Computer Configuration, click Policies, click Administrative Templates, click System,
and then click Access-Denied Assistance.
4. Right-click Enable access-denied assistance on client for all file types, and then click Edit.
5. Click Enabled, and then click OK.

The Set-SyncShare cmdlet modifies the settings for a sync share.
Example: Modify a sync share to add a user group
This example modifies settings on the share named Share01, and enables the user group named
ContosoEngGroup to access the share.
The first command uses the Get-SyncShare cmdlet to retrieve the sync share for Share01, and
assigns the results to the variable $Current.
The second command uses the Set-SyncShare cmdlet to modify the sync share and add the current
user and the ContosoEngGroup to the list of users allowed to access the share.
PS C:\> $Current = Get-SyncShare Share01
PS C:\> Set-SyncShare Share01 -User $Current.user,”ContosoEngGroup”
PS C:\> Get-SyncShare Share01 // See %username below% !!
ConflictResolutionPolicy : KeepLatest
Description :
DevicePolicy : Share01
Enabled : True
ExclusiveAccessToUser : False
Name : Share01
Path : K:\Share01
StagingFolder : K:\EcsStagingArea\Share01
StagingQuota : 1099511627776
StagingQuotaPerUser : 10737418240
Type : User Data
User : {HRGroup, EngGroup}
UserFolderName : %username% // <– This line!!
PSComputerName Set-SyncShare
http://technet.microsoft.com/en-US/library/dn296649.aspx