Your network consists of a single Active Directory domain. The domain contains three organizational units (OUs) named Test, Application, and Database.
You need to redesign the layout of the OUs to support the following requirements:
– Prevent Group Policy objects (GPOs) that are linked to the domain from applying to computers located in the Applications OU
– Minimize the number of GPOs
– Minimize the number of Ous
What should you include in your design?
A.
Create a Starter GPO.
B.
Create a Windows Management Instrumentation (WMI) filter.
C.
Delegate permissions on the Application OU.
D.
Configure block inheritance on the Application OU.
Explanation:
MCITP Self-Paced Training Kit Exam 70-646 Windows Server AdministrationUnderstanding Group Policy
You already know that Group Policy settings contained in Group Policy objects (GPOs) can be linked to OUs, and that OUs can either inherit settings from parent OUs or block inheritance and obtain their specific settings from their own linkedGPOs. You also know that some policiesspecifically, security policiescan be set tono override so that they cannot be blocked or overwritten and force child OUs to inherit the settings from their parents.