Your network contains an Active Directory domain named contoso.com. The domain
contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced
GPOs.
The domain contains a top-level organizational unit (OU) for each department. A group
named Group1 contains members from each department.
You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to apply settings to Group1 only.
What should you use?
A.
Dcgpofix
B.
Get-GPOReport
C.
Gpfixup
D.
Gpresult
E.
Gpedit. msc
F.
Import-GPO
G.
Restore-GPO
H.
Set-GPInheritance
I.
Set-GPLink
J.
Set-GPPermission
K.
Gpupdate
L.
Add-ADGroupMember
Explanation:
Set-GPPermission grants a level of permissions to a security principal (user, security group,
or computer) for one GPO or all the GPOs in a domain. You use the TargetName and
TargetType parameters to specify a user, security group, or computer for which to set the
permission level.
-Replace <SwitchParameter>
Specifies that the existing permission level for the group or user is removed before the new
permission level is set. If a security principal is already granted a permission level that is
higher than the specified permission level and you do not use the Replace parameter, no
change is made.
http: //technet. microsoft. com/en-us/library/ee461038. aspx
but the answer is J.
yes it is… i guess jst a problem wif his scripting on the site
f
set-gppermission
J ist right!
but there’s a funny quirky way to get it done with gpedit.msc also:
https://technet.microsoft.com/en-us/library/cc736591%28v=ws.10%29.aspx
=> start it using switch /gpobject, and then open the properties and modify the security settings