Your network contains an Active Directory domain named contoso.com. The domain contains 20 computer
accounts in an organizational unit (OU) named OU1. A user account named User1 is in an OU named OU2.
You are configuring a Group Policy object (GPO) named GPO1. You need to assign User1 the Back up files
and directories user right to all of the computer accounts in OU1.
Which two actions should you perform? (Each correctanswer presents part of the solution.
Choose two.)

A.
Link GPO1 to OU1.

B.
Link GPO1 to OU2.

C.
Modify the Delegation settings of GPO1.

D.
From User Configuration in GPO1, modify the security settings.

E.
From Computer Configuration in GPO1, modify the security settings.

Explanation:
A: You have to Link a GPO to an object in order forit to be App1ied to that object B: Wrong object tolink the
GPO
C: Delegation settings refer to delegating control over the properties of the GPO D: User Configuration typically
contains subitems for Software Settings, Windows Settings, and AdministrativeTemplates
E: Backup Files and Directories are found in Computer Configuration\Windows Settings\Local Policies\User
Rights Assignment
Back up files and directories – This user right determines which users can bypass file and directory, registry,and
other persistent object permissions for the purposes of backing up the system.

Specifically, this user right is similar to granting the following permissions to the user or group inquestion on
allfiles and folders on the system:
Traverse Folder/Execute File
List Folder/Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Caution:
Assigning this user right can be a security risk. Since there is no way to be sure that a user is backing up data,
stealing data, or copying data to be distributed, only assign this user right to trusted users.
Default on workstations and servers: Administrators, Backup Operators. Default on domain controllers:
Administrators,BackupOperators,Server Operators http://www.microsoft.com/en-us/download/details.aspx?
id=25250