Your network contains an Active Directory domain named contoso.com.
All user accounts reside in an organizational unit (OU) named OU1. All of the users in the
marketing department are members of a group named Marketing. All of the users in the
human resources department are members of a group named HR.
You create a Group Policy object (GPO) named GPO1. You link GPO1 to OU1. You
configure the Group Policy preferences of GPO1 to add two shortcuts named Link1 and
Link2 to the desktop of each user.
You need to ensure that Link1 only appears on the desktop of the users in Marketing and
that Link2 only appears on the desktop of the users inHR.
What should you configure?
A.
Security Filtering
B.
WMI Filtering
C.
Group Policy Inheritance
D.
Item-level targeting
Explanation:
You can use item-level targeting to change the scope of individual preference items, so they
apply only to selected users or computers. Within a single Group Policy object (GPO), you
can include multiple preference items, each customized for selected users or computers and
each targeted to apply settings only to the relevant users or computers.
http://technet.microsoft.com/en-us/library/cc733022.aspx
why not security filtering?
Mina – It is a single GPO, you would have to have 2 GPO’s for security filtering to work…
As a general rule, since MS like to promote its new technologies via certification exams, if it’s possible to achieve a goal both via classic GPOs and Group Policy Preferences, the exam answer will very likely involve Group Policy Preferences.