Which of the following actions should you take?

You work as an administrator at ABC.com. The ABC.com network consists of a single domain
named ABC.com. All servers in the ABC.com domain, including domain controllers, have Windows
Server 2012 installed.
ABC.coms user accounts are located in an organizational unit (OU), named ABCStaff. ABC.coms
managers belong to a group, named ABCManagers.
You have been instructed to create a new Group Policy object (GPO) that should be linked to the
ABCStaff OU, but not affect ABC.coms managers.
Which of the following actions should you take?

A.
You should consider removing the user accounts of the managers from the ABCStaff OU.

B.
You should consider configuring the new GPO�s WMI filter.

C.
You should consider adding the user accounts of ABC.com�s managers to the Admins group.

D.
You should consider adding the user accounts of ABC.com�s managers to the
localAdministrators group.

Show Hint

← Previous question

Next question →

Leave a Reply 9

Eugene

It should be a Security Filter, not WMI filter..

MancaMulas

Agree with you, although you could also decide to remove the group from the OU.

Jose Llama

Correct is A
Security filters are not exclusive, you cant specify which user or group to exclude, you only can include users/groups in security filter.
Recommended by Microsoft is to remove administrators from OU used to apply GPOs to the domain users.
http://technet.microsoft.com/en-us/library/cc728301(v=ws.10).aspx

Justin

“By default, a GPO affects all users and computers contained in the linked site, domain, or OU. However, you can use Security Filtering on a GPO to modify its effect to apply only to a specific user or the members of a security group by modifying the permissions on the GPO. By combining Security Filtering with appropriate placement in OUs, you can target any given set of users.” This came directly out of the site you listed in the first paragraph to dispute the answer yet it points directly to the suggested answer. The correct answer would be to use filtering. WMI technically would be right and could be used in conjunction with Security filters or just use security filters. Here is a link you could use with the one you suggested. http://technet.microsoft.com/en-us/library/cc758471(v=ws.10).aspx