PrepAway - Latest Free Exam Questions & Answers

You need to ensure that the minimum password length of the local user accounts on the research servers in the

Your network contains an Active Directory domain named contoso.com. All servers run Windows
Server 2012 R2.
An organizational unit (OU) named ResearchServers contains the computer accounts of all research
servers.
All domain users are configured to have a minimum password length of eight characters.
You need to ensure that the minimum password length of the local user accounts on the research
servers in the ResearchServers OU is 10 characters.
What should you do?

PrepAway - Latest Free Exam Questions & Answers

A.
Configure a local Group Policy object (GPO) on each research server.

B.
Create and link a Group Policy object (GPO) to the ResearchServers OU.

C.
Create a universal group that contains the research servers. Create a Password Settings object
(PSO) and assign the PSO to the group.

D.
Create a global group that contains the research servers. Create a Password Settings object (PSO)
and assign the PSO to the group.

Explanation:
For a domain, and you are on a member server or a workstation that is joined to the domain
1. Open Microsoft Management Console (MMC).
2. On the File menu, click Add/Remove Snap-in, and then click Add.

3. Click Group Policy Object Editor, and then click Add.
4. In Select Group Policy Object, click Browse.
5. In Browse for a Group Policy Object, select a Group Policy object (GPO) in the appropriate domain,
site, or organizational unit–or create a new one, click OK, and then click Finish.
6. Click Close, and then click OK.
7. In the console tree, click Password Policy.
Where?
Group Policy Object [computer name] Policy/Computer Configuration/Windows Settings/Security
Settings/Account Policies/Password Policy
8. In the details pane, right-click the policy setting that you want, and then click Properties.
9. If you are defining this policy setting for the first time, select the Define this policy setting check
box.
10. Select the options that you want, and then click OK.

4 Comments on “You need to ensure that the minimum password length of the local user accounts on the research servers in the

  1. Kuba says:

    The correct answer is B for sure. Confirmed that in book: Exam Ref 70-411 by MS Press. See the below fragment from Chapter 5, Objective 5.4 Delegating password settings management:
    “The local user password policy is inherited from the Default Domain Policy and can’t be overridden for domain joined computers. If you have to set a different local user password policy for a subset of computers, place those computers in a separate OU and define the password policy for that OU.”




    1



    0
  2. asd says:

    B.

    Not A because MS is pushing AD automated group policy, not manually editing local group policy, which is time consuming and inefficient. Question also states they’re in an OU, easy to make it once and apply it to OU.

    Not PSO’s because they are for domain accounts, local accounts would indeed by set via GP for computers local accounts.




    1



    0

Leave a Reply