Your network consists of three Active Directory forests. Forest trust relationships exist between all
forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2. Your
company has three network administrators. Each network administrator manages a forest and the
Group Policy objects (GPOs) within that forest. You need to create standard GPOs that the network
administrators in each forest will use. The GPOs must meet the following requirements:
• The GPOs must only contain settings for either user configurations or computer
configurations.
• The number of GPOs must be minimized.
Which two actions should you perform? (Each correct answer presents part of the solution. Choose
two.)
A.
Export the new GPOs to .cab files. Ensure that the .cab files are available to the network
administrator in each forest.
B.
Create two new GPOs. Configure both GPOs to use the required user configurations and the
required computer configurations.
C.
Create two new GPOs. Configure one GPO to use the required user configuration. Configure the
other GPO to use the required computer configuration.
D.
Back up the Sysvol folder that is located on the domain controller where the new GPOs were
created. Provide the backup to the network administrator in each forest.
Explanation:
http ://technet.microsoft.com/en-us/library/ee390958.aspx
http ://www.petri.co.il/working_with_group_policy.htm
Export a GPO to a File
Applies To: Windows 7, Windows Server 2008, Windows Server 2008 R2
You can export a controlled Group Policy object (GPO) to a CAB file so that you can copy it to a
domain in another forest and import the GPO into Advanced Group Policy Management (AGPM) inthat domain. For information about how to import GPO settings into a new or existing GPO, see
Import a GPO from a File.
A user account with the Editor or AGPM Administrator (Full Control) role or necessary permissions in
Advanced Group Policy Management (AGPM) is required to complete this procedure. Review the
details in “Additional considerations” in this topic.
To export a GPO to a file
1. In the Group Policy Management Console tree, click Change Control in the forest and domain in
which you want to manage GPOs.
2. On the Contents tab, click the Controlled tab to display the controlled GPOs.
3. Right-click the GPO, and then click Export to.
4. Enter a file name for the file to which you want to export the GPO, and then click Export. If the file
does not exist, it is created. If it already exists, it is replaced.
Additional considerations
• By default, you must be an Editor or an AGPM Administrator (Full Control) to perform this
procedure. Specifically, you must have List Contents, Read Settings, and Export GPO permissions for
the GPO.
Group Policy sections
Each GPO is built from 2 sections:
• Computer configuration contains the settings that configure the computer prior to the user logon
combo-box.
• User configuration contains the settings that configure the user after the logon. You cannot choose
to apply the setting on a single user, all users, including administrator, are affected by the settings.
