Your network contains an Active Directory domain named contoso.com. The domain contains more than 100
Group Policy objects (GPOs). Currently, there are no enforced GPOs.
The domain contains a top-level organizational unit (OU) for each department. A group named Group1
contains members from each department.
You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to apply settings to Group1 only.
What should you use?
A.
Dcgpofix
B.
Get-GPOReport
C.
Gpfixup
D.
Gpresult
E.
Gpedit. msc
F.
Import-GPO
G.
Restore-GPO
H.
Set-GPInheritance
I.
Set-GPLink
J.
Set-GPPermission
K.
Gpupdate
L.
Add-ADGroupMember
Explanation:
Set-GPPermission grants a level of permissions to a security principal (user, security group, or computer) for
one GPO or all the GPOs in a domain. You use the TargetName and TargetType parameters to specify a user,
security group, or computer for which to set the permission level.
-Replace <SwitchParameter>
Specifies that the existing permission level for the group or user is removed before the new permission level is
set. If a security principal is already granted a permission level that is higher than the specified permission level
and you do not use the Replace parameter, no change is made.
http: //technet. microsoft. com/en-us/library/ee461038. aspx
Answer is J.
Set-GPPermission
0
0
if y want gpo to use security filtering, the only way is gpuedit
0
1
Answer is J
Add-ADGroupMember
Adds one or more members to an Active Directory group.
Gpupdate
Refreshes local and Active Directory-based Group Policy settings, including security settings
0
0
J ist right!
but there’s a funny quirky way to get it done with gpedit.msc also:
https://technet.microsoft.com/en-us/library/cc736591%28v=ws.10%29.aspx
=> start it using switch /gpobject, and then open the properties and modify the security settings
0
0