You need to redesign the layout of the OUs to support the following requirements: Prevent Group Policy objects (GPOs)…?

Your network consists of a single Active Directory domain. The domain contains three organizational units
(OUs) named Test, Application, and Database.
You need to redesign the layout of the OUs to support the following requirements:
Prevent Group Policy objects (GPOs) that are linkedto the domain from applying to computers located in
the Application OU
Minimize the number of GPOs
Minimize the number of OUs
What should you include in your design?

Your network consists of a single Active Directory domain. The domain contains three organizational units
(OUs) named Test, Application, and Database.
You need to redesign the layout of the OUs to support the following requirements:
Prevent Group Policy objects (GPOs) that are linkedto the domain from applying to computers located in
the Application OU
Minimize the number of GPOs
Minimize the number of OUs
What should you include in your design?

A.
Create a Starter GPO.

B.
Create a Windows Management Instrumentation (WMI)filter.

C.
Delegate permissions on the Application OU.

D.
Configure block inheritance on the Application OU.

Explanation:
GROUP POLICY & BLOCK INHERITANCE
You can block inheritance for a domain or organizational unit. Blocking inheritance prevents Group Policy
objects (GPOs) that are linked to higher sites, domains, or organizational units from being automatically
inherited by the child-level.
As a GPO contains “separated” settings for COMPUTER and USER, there is no need to isolate computer
accounts in Application OU to a new OU,
http://technet.microsoft.com/en-us/library/cc731076.aspx



Leave a Reply 2

Your email address will not be published. Required fields are marked *


Sunny Jim

Sunny Jim

HMMM…IF THERE ARE ANY USERS ACCOUNTS OR GROUPS IN THE APPLICATION OU, WON’T THIS BLOCK THE INHERRITENCE FOR THEM ALSO?

ccc

ccc

It would. It also wouldn’t work on any enforced GPOs, granted the question doesn’t include enforcement or say users would be in the app OU… so yeah D.