Which two GPO settings should you identify?

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is
linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers.
You plan to unlink GPO1 from OU1.
You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked
from OU1.
Which two GPO settings should you identify? (Each correct answer presents part of the solution.
Choose two.)

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is
linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers.
You plan to unlink GPO1 from OU1.
You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked
from OU1.
Which two GPO settings should you identify? (Each correct answer presents part of the solution.
Choose two.)

A.
The managed Administrative Template settings

B.
The unmanaged Administrative Template settings

C.
The System Services security settings

D.
The Event Log security settings

E.
The Restricted Groups security settings

Explanation:
There are two kinds of Administrative Template policy settings: Managed and Unmanaged . The
Group Policy service governs Managed policy settings and removes a policy setting when it is no
longer within scope of the user or computer.
References:
httpHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”.
com/en-us/library/cc778402(v=wsHYPERLINK “http://technet.microsoft.com/enus/library/cc778402(v=ws.10).aspx#_blank”. 10)HYPERLINK “http://technet.microsoft.com/enus/library/cc778402(v=ws.10).aspx#_blank”. aspx
httpHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”. com/enus/library/bb964258HYPERLINK “http://technet.microsoft.com/enus/library/bb964258.aspx#_blank”. aspx



Leave a Reply 5

Your email address will not be published. Required fields are marked *

1 × three =


Nelson

Nelson

I tested the Restricted group option on my lab:
– Added 1 local user to Backup Operators by a new GPO on target OU.
– unlinked the GPO
– update GPO’s and restart target machine.
– user was removed from Backup Operators members.

I Think A and E.

I checked the answer on “Microsoft.70-411.v2015-09-30.by.Sacriestory_Aikonfx” and they also say A and E.

Jeff

Jeff

I believe the answer is A & E, so Nelson is correct.

This article seems to say that Event Log would stay enforced.

https://sdmsoftware.com/group-policy-blog/group-policy/cleaning-group-policy-when-removing-a-machine-from-the-domain/

“This process I’ve described has some caveats. Not all policy settings are removed just because the GPO that delivered them no longer applies. In fact, while most if not all Admin Template settings will get removed using this method, many security settings will not. For example, Security Options, User Rights Assignment, Audit Policy and Event Logs, to name just a few, will remain as they were set in the domain, even though the GPOs that delivered them no longer apply to the machine.”

This article seems to say it is restricted group that will revert:

https://sdmsoftware.com/group-policy-blog/security-policy/restricted-groups-policy/

PeterN

PeterN

I think it is A & E as well, but I can’t find anything to back up E, but then I can’t find anything to say why D is correct either