Your network contains an Active Directory domain named contoso.com.
An organizational unit (OU) named OU1 contains the computer accounts for laptops and
desktop computers.
A Group Policy object (GPO) named GP1 is linked to OU1.
You need to ensure that the configuration settings in GP1 are applied only to a user named
User1.
What should you do?
A.
Modify the security settings of OU1.
B.
Modify the GPO Status of GP1.
C.
Modify the security settings of GP1.
D.
Configure the WMI Filter of GP1.
Explanation:
WMI filtering
Windows Management Instrumentation (WMI) filters allow you to dynamically determine the
scope of Group Policy objects (GPOs) based on attributes of the target computer.
When a GPO that is linked to a WMI filter is applied on the target computer, the filter is
evaluated on the target computer. If the WMI filter evaluates to false, the GPO is not applied
(except if the client computer is running Windows Server, in which case the filter is ignored
and the GPO is always applied). If the WMI filter evaluates to true, the GPO is applied.
References:
Training Guide: Installing and Configuring Windows Server 2012 R2: Chapter 10:
Implementing Group Policy, p. 470, 482
http://technet.microsoft.com/en-us/library/jj134176
WMI filtering using GPMC
Acredito que a resposta esteja errada pois a pergunta é relacionada a usuários não filtros WMI acredito que a resposta correta deveria ser a letra (C).
security setting is for users and groups while wmi filter applies only to target computers.. so answer is c
Local policies enable administrators to set user privileges on the local computer that govern what users can do on the computer and determine if the system should track user activities in an event log.
The Local Policies node of a GPO, found under Security Settings, has three subordinate nodes: Audit Policy, User Rights Assignment, and Security Options.
References:
Exam-Ref 70-410 pg 329
the correct answer is C
Wouldn’t modifying the security settings of GP1 only provide or deny User1 rights to edit GP1? The only option I see that would ensure that only one user gets the GPO applied is D. Configure the WMI Filter of GP1.
The answer is C.
Simplest example of WMI Filtering: Apply this GPO to this PC if and only if this PC has 8GM or RAM.
8GB of RAM. Excuse my typing. 🙂
On past exams for similar questions the answer has been C. Modify the security settings of the GPO.
Regarding D. WMI Filtering, this applies to Computer objects, hardware, settings, configuration, etc.
Since W2008, Item-level Targeting in Group Policy Preferences can be used to apply GPO to a single user as per this exam question.
http://blogs.technet.com/b/grouppolicy/archive/2009/07/30/security-filtering-wmi-filtering-and-item-level-targeting-in-group-policy-preferences.aspx
Also note that the OU only has COMPUTER ACCOUNTS in it. So applying Security Filters to USERs will not achieve anyhting as they are out of the scope here. I agree with D as the answer especially seeing and reading the link Adam posted as well. Also a good read was this link http://www.windowsnetworking.com/articles-tutorials/windows-server-2008/Top-10-Reasons-Why-Group-Policy-Fails-to-Apply-Part1.html
It is for server 2008 but still good to read as concepts. Point 5 has out of scope example
As Help mentioned, the OU named OU1 only has Computer/Laptop accounts in it. There is no way to target a user with a computer configuration policy, therefore you must identify a way to have the GPO apply to the user’s workstation.
The only way of doing this is via WMI Filtering.
D is correct.
I still having confused between C and D.
Which one is the correct answer for this question?
tested its C
C.of coz
correct answer should be security settings which is always applied to users and groups.
answer is “C”
D. C is wrong because it says security “settings” not security filtering.
I need to do this exam before May, so i don’t understand if it’s correct or not. In the Vce file says D incorrect but the explanation describe as if it were correct…
ha sup marco
GUYS, LISTEN… The question is WRONG.
You should read:
“You need to ensure that the configuration settings in GP1 are applied only to the laptops in OU1.”
instead of:
“You need to ensure that the configuration settings in GP1 are applied only to a user named
User1.”
(see http://www.mcseanswers.com/latest-mcse-70-410-real-exam-download-141-150.html)
So, to select only laptops, use WMI Filtering !
Look, i think everyone is wrong and the answer may be “B” (Modify the GPO Status).
My reasoning is, the question states that the OU has Computers and Laptops in it BUT they want the GPO to ONLY affect User1.
In GPO Status you can set “computer configuration settings” to Disabled so it only affects USERS; in this case, User1 is affected
The question doesnt necessarily talk about other users… then again it says “Only”…
I really hate Microsoft and their bullshit word trickery.
The correct answer is C: Because need to ensure that the configuration settings in GP1 are applied only to a user named
User1. It’s applied on Security Filtering in GPO Scope.