Your network contains an Active Directory domain named contoso.com. The domain contains 20 computer
accounts in an organizational unit (OU) named OU1. A user account named User1 is in an OU named OU2.
You are configuring a Group Policy object (GPO) named GPO1. You need to assign User1 the Back up files
and directories user right to all of the computer accounts in OU1.
Which two actions should you perform? (Each correctanswer presents part of the solution.
Choose two.)
A.
Link GPO1 to OU1.
B.
Link GPO1 to OU2.
C.
Modify the Delegation settings of GPO1.
D.
From User Configuration in GPO1, modify the security settings.
E.
From Computer Configuration in GPO1, modify the security settings.
Explanation:
A: You have to Link a GPO to an object in order forit to be App1ied to that object B: Wrong object tolink the
GPO
C: Delegation settings refer to delegating control over the properties of the GPO D: User Configuration typically
contains subitems for Software Settings, Windows Settings, and AdministrativeTemplates
E: Backup Files and Directories are found in Computer Configuration\Windows Settings\Local Policies\User
Rights Assignment
Back up files and directories – This user right determines which users can bypass file and directory, registry,and
other persistent object permissions for the purposes of backing up the system.
Specifically, this user right is similar to granting the following permissions to the user or group inquestion on
allfiles and folders on the system:
Traverse Folder/Execute File
List Folder/Read Data
Read Attributes
Read Extended Attributes
Read Permissions
Caution:
Assigning this user right can be a security risk. Since there is no way to be sure that a user is backing up data,
stealing data, or copying data to be distributed, only assign this user right to trusted users.
Default on workstations and servers: Administrators, Backup Operators. Default on domain controllers:
Administrators,BackupOperators,Server Operators http://www.microsoft.com/en-us/download/details.aspx?
id=25250
What about linking the GPO to user1 that step is missing.
The correct answer is B and D.
I agree, B & D
Answer is correct
A and E
B isn’t correct. This would give local backup rights to the computers in OU2 not OU1.
The Local Rights is a computer setting. The answer is A and E.
A, E
Backup Files and Directories are found in Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Back up files and directories – This user right determines which users can bypass file and directory, registry,and other persistent object permissions for the purposes of backing up the system
Answer is A,an E. We link policy to OU1 because all computers are in OU1 and Computer Configuration because we want to apply policy on computers not on users. and we set security filters in GPO that user1 allow to execute GPo
A and E
http://www.aiotestking.com/microsoft/which-two-actions-should-you-perform-752/