Your network contains an Active Directory domain named contoso.com. The domain contains a user account
named User1 that resides in an organizational unit (OU) named OU1.
A Group Policy object (GPO) named GPO1 is linked toOU1. GPO1 is used to publish several Applications to a
user named User1.
In the Users container, you create a new user namedUser2.
You need to ensure that the same Applications are published to User2.
What should you do?
A.
Modify the security of GPO1.
B.
Modify the settings in GPO1.
C.
Link a WMI filter to GPO1.
D.
Move User2 to OU1.
I think it’s D.
nope
Yes, I think it´s D
and nope
Why you ask? if you move the user to the OU1 the security of the GOP1 will still not apply to user2 now if this was a 2 answer question then it was be D followed by A. since its not A clearly then the only way would be to use WMI, but i dont know how that would work.
my opinion:
1) WMI filters didn’t work
2) where’s written that there’s a security filtering on OU1 ?
If (and that’s the Default) the autenticated users are still on the security filtering tab, then the only possible answer is to move user2 to OU1.
btw: check this out:
http://www.examcollection.com/microsoft/Microsoft.Certkiller.70-410.v2013-10-09.by.ANGELA.174q.vce.file.html
http://technet.microsoft.com/en-us/library/cc728301(v=ws.10).aspx
“For example, if you want only a subset of users within an OU to receive a GPO, remove the Authenticated Users from Security Filtering. Instead, add a new group with Security Filtering permissions that contains the subset of users who are to receive the GPO. Only members of this group that are within the site, domain, or OU where the GPO is linked receive the GPO; members of the group in other sites, domains, or OUs do not receive the GPO”
I saw another explanation on D, “Moving user2 to OU1 will give him the same access as User1”
Grant, can you verify?
Grant is wrong it is “D”
The correct answer is “D. Move User2 to OU1” because WMI filter will be applied among the objects contains in the OU that the GPO linked to, so definitely User2 will not get the police because he is outside OU1.
To apply the policy on User1, it should be moved to OU1.
The correct answer is “A. Modify the security of GPO1” by adding User2 and give allow permission for read and apply.
Wrong answers:
Move User2 to OU1 will provide User2 with all policies that User1 is getting if more than one GPO is created for OU1.
Link a WMI filter will be applied among the objects contains in the OU that the GPO linked to, so definitely User2 will not get the police because he is outside OU1.
Too bad that despite being allowed to read the policy, the user still doesn’t get the policy because he is not in the OU!
D.
You must Move User Account to OU.
In the Users container, you create a new user namedUser2.
You need to ensure that the same Applications are published to User2.
Applying Group Policy to New User and Computer Accounts
New user and computer accounts are created in the CN=Users and CN=Computers containers by default.
It is not possible to apply Group Policy directly to these containers, although they inherit GPOs linked to the domain.
D
The answer is A
If you move the User to the OU, the user then inherits all security and group permissions that are associated with that OU, the user may lose the security and group permissions from its previous container.
Will moving the user into the OU work…Yes, but it is not a valid option when you look at the possible effects outside of group policies.
You’re thinking too much into it. The question does not state that the user must keep its current group policies. It just states that you have to deploy the app to that user and since the App is deployed to OU1, it would make sense to move the user to that OU. In a perfect scenario,you would create a security group and deploy it to the Sec group,then add the user to that group, this way the user keeps their current GP makeup.
So I concur, D makes the most sense.
Answer A is not correct. The only explainable answer is D.
The question says:
“GPO1 is used to publish several Applications to a user named User1”
NOT
“GPO1 is used to publish several Applications ONLY to a user named User1”
The fact that User2 is created in the Users container means that User2 needs to be MOVED to OU1 in order to get the applications. This is reason #1 why User2 doesn’t get the policies. Maybe the GPO1 has security settings too. Could be….but you first have to drop User2 in OU1 to find that out.
You could also ask yourself if the applications are presented to User2 if you choose for answer A. That is a big NO bc the User2 doesn’t receive the policy.
Here are some links to websites that we link to simply because we feel they are worth visiting.
I’m super new to all this, as I just started studying… but so far, it seems like the devil is in the details when it comes to how MS specifically words things.
does this sentence stand out to anyone else?
“GPO1 is used to publish several Applications to a user named User1.”
Kiiinda sounds like it was specifically written to publish to User1 and the whole “linked to OU1” bit is a red herring…
Or am I way off in left field?
Vote D !!
Many people say A – but if User2 stay in USERS container han GPO could be applied??
First we should move User2 to GPO and another step we can change security if we need.
D!!!
User2 must be in ou1 in order to apply GPO1