Your network contains an Active Directory domain named contoso.com.
You have an organizational unit (OU) named Sales and an OU named Engineering.
You need to ensure that when users log on to client computers, they are added
automatically to the local Administrators group. The users must be removed from the group
when they log off of the client computers.
What should you do?
A.
Modify the Group Policy permissions.
B.
Enable block inheritance.
C.
Configure the link order.
D.
Enable loopback processing in merge mode.
E.
Enable loopback processing in replace mode.
F.
Configure WMI filtering.
G.
Configure Restricted Groups.
H.
Configure Group Policy Preferences.
I.
Link the Group Policy object (GPO) to the Sales OU.
J.
Link the Group Policy object (GPO) to the Engineering OU.
Explanation:
http://daniel.streefkerkonline.com/managing-local-admins-using-gpp/
http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-localadministrator-groups/