Your network contains an Active Directory domain named contoso.com. The domain
contains 20 computer accounts that reside in an organizational unit (OU) named OU1.
A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to assign
several user rights to a user named User1.
In the Users container, you create a new user named User2.
You need to ensure that User2 is assigned the same user rights as User1 on all of the client
computers in OU1.
What should you do?
A.
Modify the settings in GPO1.
B.
Modify the link of GPO1.
C.
Link a WMI filter to GPO1.
D.
MoveUser2toOU1.
Explanation:
The GPO is linked to OU1. By moving User2 to OU1 the GPO will be applied to this user.
Lets say the GPO does something simple, like add a named user to the local admins group. In this case, the GPO would state “User1” to be added to the local admin group.
Now along comes User2, they want be the same access as User1, that is be put in the local admins group on all the PC’s in OU1.
What do you do? You change the GPO to include User2!
What don’t you do, move a user to a OU that only contains Computers. Why not? 1, its messy, 2 it will have no effect.
0
0
Modify the security settings of GPO1
You need to apply GPO to computers and configure User Rights Assignment as same as User1
You need to modify GPO under Computer node > Windows settings > Security settings > Local policies > User Rights Assignment
0
0
So we agree, it’s A.
0
0
But if that´s linked to OU and single user is not stated per se, then we might assume the GPO is set to add rights to all users of OU1. Therefore it´s D as it applies to OU1 and not User 1. That would need that security options are modified to apply only to User1
0
0
As Jony wrote – the “User Rights Assignment” is under the Computer Node, hence GPO will only be “executed” by Computers in OU1. No matter which users are in OU1 or not.
If the the setting would be under the “User Configuration” node you would be right,
but that’s not the case. It’s just the content inside the GPO and not about the scope.
Same with AppLocker rules which contain Users or Groups, but the GPO is applied to computers.
0
0
A!!!
Like this question:
https://www.aiotestking.com/microsoft/you-need-to-ensure-that-user2-is-assigned-the-same-user-rights-as-user1-on-all-of-the-client-computersin-ou1/
0
0
Sorry with this question it’s A: Modify the settings in GPO1.
0
0