You need to configure GPO1 to apply settings to Group1 only

Your network contains an Active Directory domain named contoso.com. The domain contains more
than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.
The domain contains a top-level organizational unit (OU) for each department. A group named
Group1 contains members from each department.
You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to apply settings to Group1 only.
What should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains more
than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.
The domain contains a top-level organizational unit (OU) for each department. A group named
Group1 contains members from each department.
You have a GPO named GPO1 that is linked to the domain.
You need to configure GPO1 to apply settings to Group1 only.
What should you use?

A.
Dcgpofix

B.
Get-GPOReport

C.
Gpfixup

D.
Gpresult

E.
Gpedit. msc

F.
Import-GPO

G.
Restore-GPO

H.
Set-GPInheritance

I.
Set-GPLink

J.
Set-GPPermission
K.
Gpupdate
L.
Add-ADGroupMember

Explanation:
Set-GPPermission grants a level of permissions to a security principal (user, security group, or
computer) for one GPO or all the GPOs in a domain. You use the TargetName and TargetType
parameters to specify a user, security group, or computer for which to set the permission level.
-Replace <SwitchParameter>
Specifies that the existing permission level for the group or user is removed before the new
permission level is set. If a security principal is already granted a permission level that is higher than
the specified permission level and you do not use the Replace parameter, no change is made.

httpHYPERLINK “http://technet.microsoft.com/en-us/library/ee461038.aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/ee461038.aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/ee461038.aspx#_blank”. com/enus/library/ee461038HYPERLINK “http://technet.microsoft.com/enus/library/ee461038.aspx#_blank”. aspx



Leave a Reply 4

Your email address will not be published. Required fields are marked *

twenty − 10 =


flitter

flitter

Defo GP-Link (i)

https://technet.microsoft.com/en-gb/library/ee461022.aspx

“Specifies the link order for the GPO link. You can specify a number that is between one and the current number of GPO links to the target site, domain, or OU, plus one.

The link order specifies the order of precedence with which GPOs linked to the same Active Directory container are applied. When Group Policy is processed, GPOs with a higher link order number are processed before GPOs with a lower link order number. Therefore, when two GPOs contain conflicting settings, the settings in the GPO with the lower link order number, because it is processed last, overwrites those of the GPO with the higher link order number. A lower number indicates higher precedence.”

By default, the GPO link is added at the lowest precedence (with a link order equal to the number of GPO links to the container, plus one). Link order is a dynamic value because the value may change as GPO links are added and deleted from the container.

flitter

flitter

ignore above, got confused with another question!