Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is
linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers.
You plan to unlink GPO1 from OU1.
You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked
from OU1.
Which two GPO settings should you identify? (Each correct answer presents part of the solution.
Choose two.)
A.
The managed Administrative Template settings
B.
The unmanaged Administrative Template settings
C.
The System Services security settings
D.
The Event Log security settings
E.
The Restricted Groups security settings
Explanation:
There are two kinds of Administrative Template policy settings: Managed and Unmanaged . The
Group Policy service governs Managed policy settings and removes a policy setting when it is no
longer within scope of the user or computer.
References:
httpHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”.
com/en-us/library/cc778402(v=wsHYPERLINK “http://technet.microsoft.com/enus/library/cc778402(v=ws.10).aspx#_blank”. 10)HYPERLINK “http://technet.microsoft.com/enus/library/cc778402(v=ws.10).aspx#_blank”. aspx
httpHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”. com/enus/library/bb964258HYPERLINK “http://technet.microsoft.com/enus/library/bb964258.aspx#_blank”. aspx
AE
http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/bb964258.aspx
There are two kinds of Administrative Template policy settings: Managed and Unmanaged
M I RONG?
managed
system services
unmanaged do not get removed by their own definition
restricted groups remain tatooed as they are applied only once
event logs tatooed althoguh not sure why
https://sdmsoftware.com/group-policy-blog/group-policy/cleaning-group-policy-when-removing-a-machine-from-the-domain/
agree
I agree with given answer A & D.
A, C, D, and E
Tested in lab!!!!
Question is bogus. I just went into a lab environment with a DC and a Client computer. I placed the client computer in an OU by itself and checked the default GPOs applied. I then created a GPO and applied it to the OU that the client computer was placed in. I configured the following:
System Services security settings to automatically start the App Readiness service
Event Log security settings to set the maximum log size of the application log to 16000MB
Restricted Groups security settings to add a user to the local administrator group
I then did a gpupdate /force and confirmed that the settings were applied. I also ran a gpresult to see the report that the GPO applied. Then I removed the link of the GPO to the OU the client was in and performed a gpupdate /force. Checked the settings and all 3 settings reverted back to the default. I also ran a gpresult and confirmed that the GPO was no longer applied.
In short, True answers would be A, C, D, and E. I would definitely include A in whatever answer you give if you get this question, I feel that Microsoft would be looking for A. As for the others, well, go with whatever you feel is the “Microsoft” Answer.