Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2.
Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects (GPOs) within that forest.
You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements:
– The GPOs must only contain settings for either user configurations or computer configurations.
– The number of GPOs must be minimized.
Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A.
Export the new GPOs to .cab files. Ensure that the .cab files are available to the network administrator in each forest.
B.
Create two new GPOs. Configure both GPOs to use the required user configurations and the required computer configurations.
C.
Create two new GPOs. Configure one GPO to use the required user configuration. Configure the other GPO to use the required computer configuration.
D.
Back up the Sysvol folder that is located on the domain controller where the new GPOs were created. Provide the backup to the network administrator in each forest.
Explanation:
http://technet.microsoft.com/en-us/library/ee390958.aspx
http://www.petri.co.il/working_with_group_policy.htmExport a GPO to a File
Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2
You can export a controlled Group Policy object (GPO) to a CAB file so that you can copy it to a domain in another forest and import the GPO into Advanced Group Policy Management (AGPM) in that domain. For information about how to import GPO settings into a new or existing GPO, see Import a GPO from a File.
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the details in “Additional considerations” in this topic.
To export a GPO to a file
1. In the Group Policy Management Console tree, click Change Control in the forest and domain in which you want to manage GPOs.
2. On the Contents tab, click the Controlled tab to display the controlled GPOs.
3. Right-click the GPO, and then click Export to.
4. Enter a file name for the file to which you want to export the GPO, and then click Export. If the file does not exist, it is created. If it already exists, it is replaced.
Additional considerations
By default, you must be an Editor or an AGPM Administrator (Full Control) to perform this procedure. Specifically, you must have List Contents, Read Settings, and Export GPO permissions for the GPO.Group Policy sections
Each GPO is built from 2 sections:
Computer configuration contains the settings that configure the computer prior to the user logon combo-box.
User configuration contains the settings that configure the user after the logon. You cannot choose to apply the setting on a single user, all users, including administrator, are affected by the settings.