Your network contains an Active Directory domain named contoso.com. The domain contains 100
servers. The servers are contained in an organizational unit (OU) named Servers OU.
You need to create a group named Group1 on all of the servers in the domain. You must ensure that
Group1 is added only to the servers.
What should you configure?
A.
a Local Users and Groups preferences setting in a Group Policy linked to the Domain Controllers
OU
B.
a Restricted Groups setting in a Group Policy linked to the domain
C.
a Local Users and Groups preferences setting in a Group Policy linked to ServersOU
D.
a Restricted Groups setting in a Group Policy linked to Servers OU
Explanation:
A)
This would add the group to the wrong OU
B)
This would affect the whole domain and would effect member of the group
C)
allows you to centrally manage local users and groups on domain member computers and is this is
the correct OU for the GPO change
D)
Restricted Groups defines what member or groups should exist as part of a group Why use Group
Policy preferences?
Unlike Group Policy settings, which App1y to both local computer policy and Active Directory policy,
Group Policy preferences only App1y to Active Directory policy.
You use preferences to configure many areas of the OS, including:
System devices, such as USB ports, floppy drives and removable media Network shares and mapping
network shares to drive letters System and user environment variables
User and group accounts for the local computer
VPN and dial-up networking connections
Printer configuration and mapping
Registry settings, schedule tasks and system servicesSettings for Folder Options, Internet Options and Regional and Language Options Settings for power
schemes and power management
Start Menu properties and menu items
C
Why is the answer not D? It seems like according to this article, the answer would be D.
https://technet.microsoft.com/en-us/library/cc785631(v=ws.10).aspx
Specifically, it says “You can use Restricted Groups policy to control group membership.”
thats confusing…
I think that the correct is the D, once the Restricted Groups, because you can create groups there right? Am i losing something? thanks guys
restrict groups
https://www.youtube.com/watch?v=9INahehBtVI
local group manag
https://www.youtube.com/watch?v=aSkLv25A4zI
it seems to me that both are equal, and restricted groups override the local group managment, so once again what would be the correct question?
https://www.youtube.com/watch?v=aSkLv25A4zI
After watching this, I feel the answer is C
Correct answer is C
In Restricted Groups you can only restrict existing group
You need to create a new group, Group1, and that can only be done using CS > Preferences > control panel settings > Local Users and Groups
C. A Local Users and Groups preferences setting in a Group Policy linked to ServersOU
The correct answer is C I believe because Restricted Groups are designed for the management of Local Groups, not the management of Active Directory groups.