Your network contains an Active Directory domain named contoso.com. The domain contains a file server
named Server1. The File Server Resource Manager role service is installed on Server1. All servers run
Windows Server 2012 R2.
A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1. Thefollowing graphic shows the configured settings in GPO1.
Server1 contains a folder named Folder1. Folder1 is shared as Share1.
You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance
option cannot be selected from File Server Resource Manager.
You need to ensure that you can configure access-denied assistance on Server1 manually by using File Server
Resource Manager.
What should you do?
A.
Set the Customize message for Access Denied errors policy setting to Enabled for GPO1.
B.
Set the Enable access-denied assistance on client for all file types policy setting to Disabled for GPO1.
C.
Set the Enable access-denied assistance on client for all file types policy setting to Enabled for GPO1.
D.
Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1.
Explanation:
Ensure that you can configure access-denied assistance
http://technet.microsoft.com/en-us/library/hh831402.aspx#BKMK_1
c and D
0
0
Just D
1
0
Right 😉
0
0
Why not C?
To configure access-denied assistance for all file types by using Group Policy
Open Group Policy Management. In Server Manager, click Tools, and then click Group Policy Management.
Right-click the appropriate Group Policy, and then click Edit.
Click Computer Configuration, click Policies, click Administrative Templates, click System, and then click Access-Denied Assistance.
Right-click Enable access-denied assistance on client for all file types, and then click Edit.
Click Enabled, and then click OK.
0
0
Right answer is A and C. Enable is denied by previous policy and should be overriden first so it can be enabled manually. Furthermore it states that manual con figuration should be possible, so the current disabled state for that as shown in the current policy should be overriden with a enable policy as well.
0
0
Correction to make it more clear:First should be overriden so it IS enabled, an unconfigured will not do that, second so it is configurable.
If you search you will find this same question with those 2 as answer
0
0
Note that just setting unconfigured will not work if an option was disabled by an previous policy and thus grayed out as unconfigured will not do anything at all. Hope this makes sense 🙂
0
0