Your network contains an Active Directory domain named contoso.com. The domain contains 20
computer accounts that reside in an organizational unit (OU) named OU1.
A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to assign several user rights
to a user named User1.
In the Users container, you create a new user named User2.
You need to ensure that User2 is assigned the same user rights as User1 on all of the client
computers in OU1.
What should you do?
A.
Modify the settings in GPO1.
B.
Modify the link of GPO1.
C.
Link a WMI filter to GPO1.
D.
Move User2 to OU1.
Explanation:
The GPO is linked to OU1. By moving User2 to OU1 the GPO will be applied to this user.
The answer shown is wrong. To assign user rights you navigate to Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\User Rights Assignment. Computer settings only apply to computer objects in an OU. Moving User2 to OU1 would have no effect, as the computer settings of GPO1 would not apply to him.
Sadly, you would have to modify the settings in GPO1.
0
0
answer is A. GPO1 is set to user 2, settings of GPO1 would need to apply to user accounts to accommodate user2. only then would answer D apply.
0
0
INHO it is right and answer is D
0
0
IMO A is correct
User rights are assigned to individual users or groups through the computer configuration side of a GPO therefore moving user 2 does not achieve the desired result and B or C make no sense in this scenario
I recreated this scenario in my home lab and the only way to get the user rights (“deny log on locally” in my test) originally assigned to user1, applied to user 2 as well, is to modify the settings in GPO1. (ie add user 2, either individually or in a group, to the security policy settings of the “deny log on locally” user rights assignment)
0
0
D has no sense – I can add 100 users to ou1 but gpo1 will work only with assign user – user1,
I need to modify gpo1 to assign to 2 users
correct is A
0
0