Your network contains an Active Directory domain named contoso.com.
All user accounts for the marketing department reside in an organizational unit (OU) named OU1. All
user accounts for the finance department reside in an organizational unit (OU) named OU2.
You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU2. You configure the
Group Policy preference of GPO1 to add a shortcut named Link1 to the desktop.
You discover that when a user signs in, the Link1 is not added to the desktop.
You need to ensure that when a user signs in, Link1 is added to the desktop.
What should you do?
A.
Enforce GPO1.
B.
Enable loopback processing in GPO1.
C.
Modify the Link1 shortcut preference of GPO1.
D.
Modify the Security Filtering settings of GPO1.
Explanation:
Security filtering is a way of refining which users and computers will receive and apply the settings in
a Group Policy object (GPO). Using security filtering, you can specify that only certain security
principals within a container where the GPO is linked apply the GPO. Security group filtering
determines whether the GPO as a whole applies to groups, users, or computers; it cannot be used
selectively on different settings within a GPO.
I tend to think C. In preferences for the shortcut, you can force it to be created every time someone logs in.
https://technet.microsoft.com/en-us/library/cc753580.aspx?f=255&MSPPError=-2147217396
0
0
I agree.
http://s11.postimg.org/oai8986wz/link.png
0
0
I agree. It’s C
0
0
It says a user…does not say the user is in the finance department. The GPO is only linked to the OU that contains users in the finance department. So if a user in another department log in they will not get the link since the GPO is only linked to OU2.
To ensure all users get it link it to the other OU or….answer D.
Correct answer is D
1
0
I wish Microsoft would just ask us questions related to the information we are being tested on and not give us damn trick questions like this where we have to figure out if the ‘a user’ is actually in the finance department based on syntax, I mean… damn.
Anyway, Cribb’s logic sound right. If we don’t know which OU their in, then it would be security filtering.
0
0
How you ensure get link for other OU by “Modify the Security Filtering settings of GPO1”
? 🙂
1
0
Security filters do not work like that. If the gpo is linked to ou2 users in ou1 for example won’t get the link. You got to think of gpos as trickle downs from where they start they kind of ooze down to other users and computers to where they are linked. So unless they have security filtering on and its linked at the top the domain, The correct answer here is C
1
0
No, I disagree. If you link the GPO to OU2, then only the Finance users will have the GPO applied. If ‘a user’ is to mean those in the Marketing group, then the answer would be to link the GPO to the domain. As that is not a choice in the answers, then we need to assume that ‘a user’ is to mean a Finance user in the OU in which the GPO is applied. We also have to assume that the default security filtering is applied, meaning the GPO is being applied to Authenticated Users. The Finance user isn’t getting the shortcut applied, so the settings in the preference need to be changed.
I say the answer is actually ‘C’.
2
0
I agree. It’s C
0
0
I believe C is correct because it implies that any user, not just one are not getting the Link, so something is messed up with the GPP Shortcut link policy.
0
0
security filtering only applies to the gpo and what it’s linked to, just like the Link1 shortcut preferences, which will actually ensure that the shortcut is applied. C. I’ve also seen this question formatted a lot better in other dumps.
0
0