As part of a Windows Server 2008 R2 Active Directory deployment, you are designing a Group Policy object
(GPO) hierarchy.
Client computers run Windows 7 and Windows XP. All client computers are in an organizational unit (OU)
named Client Computers. Additional Windows 7 and Windows XP client computers will be joined to the domain
over the next six months.
You have the following requirements:
Install the antivirus application on all Windows XPcomputers.
Do not install the antivirus application on the Windows 7 computers.
Do not make changes to the existing Active Directory logical structure.
You need to design a Group Policy strategy that meets the requirements.
Which GPO configuration should you recommend? (Morethan one answer choice may achieve the goal. Select
the BEST answer.)
A.
Publish the antivirus application to client computers. Link the GPO to the domain. Use security filtering to
prevent the Windows 7 client computers from receiving the GPO.
B.
Assign the antivirus application to client computers. Link the GPO to the Client Computers OU. Create a
WMI Filter that queries whether the client computer’s Win32_OperatingSystem caption contains “Windows
7″ . Associate the WMI filter with the GPO.
C.
Assign the antivirus application to client computers. Link the GPO to the domain. Place all the Windows 7
computers in a security group. Use security filtering to prevent the Windows 7 client computers from
receiving the GPO.
D.
Assign the antivirus application to client computers. Link the GPO to the Client Computers OU. Create a
WMI Filter that queries whether the client computer’s Win32_OperatingSystem caption contains “Windows
XP” . Associate the WMI Filter with the GPO.
Explanation:
WINDOWS MANAGEMENT INSTRUMENTATION FILTER
The WMI filter can be used to control the application of GPOs. EACHGPO can be linked to ONEWMI filter,
however, the same WMI filter can be linked to multiple GPOs. The WMI filter is evaluated on the destination
computer (running either Windows XP or later, or Windows Server 2003 or later) during processing of Group
Policy. The GPO will only apply if the WMI filter evaluates to TRUE. On Windows 2000-based computers, the
WMI filter is ignored and the GPO is always applied.
http://technet.microsoft.com/en-us/library/cc758471(v=WS.10).aspx