You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All the servers on the network run Windows Server 2008 and all client computers run Windows Vista.
The company has recently appointed 5 support technicians to provide support to network users. You have been asked to provide the support technicians a GPO that contains the preconfigured settings, which they can used to create new GPOs.
Which of the following options would you choose to ensure that support technicians can create Group Policy objects (GPOs) in the domain using the preconfigured GPO? (Select two. Each selected option will present a part of the answer.)
A.
Add the support technicians to the Account Operators group.
B.
Add the support technicians to the Group Policy Creator Owners group.
C.
Delegate control on the Domain Controllers organizational unit (OU).
D.
Delegate control on the Users container.
E.
Assign permissions on the Sysvol folder.
F.
Create a new Starter GPO.
G.
Create an ADMX file.
H.
Create an ADML file.
Explanation:
To ensure that support technicians can create Group Policy objects (GPOs) in the domain using the preconfigured GPO, you need to add the support technicians to the Group Policy Creator Owners group. Create a new Starter GPO.
The GPMC 2.0 provides a new (empty) container called “Starter GPOs”. This new container can hold “templates” for creating new GPOs – with the limitation that only “Administrative Templates” settings are available – from both ‘Computer Configuration’ and ‘User Configuration’. Settings like “Software Settings” (software installation) and “Windows Settings” (scripts, account policies, user rights, software restriction policies, etc.) are NOT available in Starter GPOs. The users who are added to Group Policy Creator Owners group would be allowed to use the Starter GPO to make required configurations.
Reference: Group Policy related changes in Windows Server 2008 – Part 1: What are Starter GPOs?
http://www.windowsecurity.com/articles/Group-Policy-related-changes-Windows-Server-2008-Part1.html