Your network contains an Active Directory domain named contoso.com.
The domain contains the organization units (OUs) configured as shown in the following
table.
Users and computers at the company change often.
You create a Group Policy object (GPO) named GPO6. GPO6 contains user settings.
You need to ensure that GPO6 applies to users when they log on to the kiosk computers
only. The solution must minimize administrative effort.
What should you do?
A.
Link GPO6 to OU4 and configure loopback processing in GPO6.
B.
Link GPO6 to OU1 and configure WMI filtering on GPO3.
C.
Link GPO6 to OU1 and configure loopback processing in GPO6.
D.
Link GPO6 to OU1 and configure loopback processing in GPO5.
Explanation:
As we know group policy has two main configurations, user and computer. Accordingly, the computer policy is applied to the computer despite of the logged user and the user configuration is applied to the user despite of the computer he is logged on.
For example we have a Domain, this Domain has two different organizational units (OU) Green and Red, Green OU contains a Computer account and Red OU contains User account. The Green policy, which has settings “Computer Configuration 2” and “User Configuration 2” is applied to the OU with the computer account. The Red policy, which has settings “Computer Configuration 1” and “User Configuration 1”, is applied to the OU with the User account. If you have a look at the picture below it will become clearer.
0
0
We would have to configure loopback processing on GPO6 in “replace” mode. If we would configure “merge”, well it would “merge” the Settings with the ones applied to the user object, which is not what we want here.
0
0