Your network contains an Active Directory domain named contoso.com. The domain contains 20 computer
accounts that reside in an organizational unit (OU)named OU1.
A Group Policy object (GPO) named GPO1 is linked toOU1. GPO1 is used to assign several user rights toa
user named User1.
In the Users container, you create a new user namedUser2.
You need to ensure that User2 is assigned the same user rights as User1 on all of the client computersin OU1.
What should you do?
A.
Move User2 to OU1.
B.
Modify the settings in GPO1.
C.
Modify the link of GPO1.
D.
Link a WMI filter to GPO1.
Wouldn’t placing User2 in OU1 have the same effect?
No it would not. Remember OU1 only contains computers and moving User2 there will not have any effect on the user. The answer is correct
Student: What might have confused you is the previous similar question that had user1 in ou1. This time the computers are in it.
A
This is confusing. Moving the user to OU1 doesn’t do anything. However modifying the GPO doesnt seem like it would effect user either… because GPO’s only apply to OU’s, not containers.
The answer is A.
The question never states that user settings are disabled for GPO1. And that GPO1 is already assigning rights to User1.
It can’t be (B) because modifying the settings of GPO1 would only change the settings that get pushed down to the clients.
You can also do this adding user2 to the security filtering of the GPO but that’s not one of the choices.
B is correct. With any user right, you can specify individual users or groups. To assign User2 the same user right as User1, simply add User2 to the corresponding list of the user right. Moving User2 to OU1 is incorrect, because the GPO needs to be applied to the client computers in OU1.
B is correct because the user right is applied by the Group Policy Object itself:
Group Policy Manager> Group Policy Management Editor> Computer Configuration>Policies>Windows Settings> Security Settings> Local Policy > User Rights Assignment.
I vote for B – reason the same as above.
even the user1 is not in OU1 ,how can A be right?
the correct answer is B
user right assigne GPO only have computer setting ,not user setting .
when doing the setting in GPO ,you add user and assign right.
if you want User2 have the same right ,you should add user2 and assign right.
So the answer is modify setting in GPO1
B!!!