You work as an administrator at ABC.com. The ABC.com network consists of a single domain named
ABC.com. All servers in the ABC.com domain, including domain controllers, have Windows Server
2012 R2 installed.
ABC.com’s user accounts are located in an organizational unit (OU), named ABCStaff. ABC.com’s
managers belong to a group, named ABCManagers.
You have been instructed to create a new Group Policy object (GPO) that should be linked to the
ABCStaffOU, but not affect ABC.com’s managers.
Which of the following actions should you take?
A.
You should consider removing the user accounts of the managers from the ABCStaff OU.
B.
You should consider configuring the new GPO’s WMI filter.
C.
You should consider adding the user accounts of ABC.com’s managers to the Admins group.
D.
You should consider adding the user accounts of ABC.com’s managers to the local Administrators
group.
For sure? http://www.aiotestking.com/microsoft/which-of-the-following-actions-should-you-take-421/
Whats the right answer?
A
A. B (WMI) applies only to computers. You do not know anything about their computers. You should there fore consider moving them to another OU and redesign your OU structure.
The correct answer would be to go to the GPO in group policy management, click on it , click on delegation tab on right , click on advanced button , and add the abcmanagerm group to the list there and tick the Deny box next to “apply group policy”
A. is the answer.
http://www.certifychat.com/threads/microsoft-70-410-sacriestory-exam-d-question-10.613/
The policy is linked to the ABCStafff OU. In the OU are all the users (including the managers). For the policy to stay on the ABCStaff OU and not affect the managers, you move the managers accounts out of the ABCStaff OU.
The group named ABCManagers is just there for distraction. You also don’t know where the ABCManagers group is placed in the AD.