Your network contains an Active Directory domain named adatum.com.
The computer accounts for all member servers are located in an organizational unit (OU) named Servers.
You link a Group Policy object (GPO) to the ServersOU.
You need to ensure that the domain’s Backup Operators group is a member of the local Backup Operators
group on each member server. The solution must not remove any groups from the local Backup Operators
groups.
What should you do?
A.
Add a restricted group named adatum\Backup Operators. Add Backup Operators to the This group is a
member of list.
B.
Add a restricted group named adatum\Backup Operators. Add Backup Operators to the Members of this
group list.
C.
Add a restricted group named Backup Operators. Add adatum\Backup Operators to the This group is a
member of list.
D.
Add a restricted group named Backup Operators. Add adatum\Backup Operators to the Members of this
group list.
Explanation:
A: The Member Of list specifies which other groups the restricted group should belong to B: Needs to be added
to member of list
C: Wrong group
D: Wrong group
Restricted groups allow an administrator to define two properties for security-sensitive groups (that
is,”restricted” groups).
The two properties are Members and Member Of . The Members list defines who should and should not
belongto the restricted group. The Member Of list specifies which other groups the restricted group should
belong to.
When a restricted Group Policy is enforced, any current member of a restricted group that is not on
theMembers list is removed. Any user on the Memberslist which is not currently a member of the
restrictedgroup is added.
The Restricted Groups folder is available only in Group Policy objects associated with domains, OUs,and sites.
The Restricted Groups folder does not appear in theLocal Computer Policy object.
If a Restricted Group is defined such that it has no members (that is, the Members list is empty), then
allmembers of the group are removed when the policyis enforced on the system. If the Member Of list is
emptyno changes are made to any groups that the restricted group belongs to. In short, an empty Members
listmeans the restricted group should have no members while an empty Member Of list means “don’t care”
whatgroups the restricted group belongs to.
http://technet.microsoft.com/en-us/library/cc957640.aspx
