You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All the domain controllers on the network run Windows Server 2008 and all client computers run Windows Vista. The functional level of the domain is Windows Server 2008.
A corporate policy exists for the company. According to which, a legal notice should appear when any user logs on to the domain. Which of the following options would you choose to enforce the corporate policy by using the minimum amount of administrative effort?
A.
Run the Delegation of Control Wizard for the domain and modify the Default Domain Controller policy.
B.
Run the Delegation of Control Wizard for the domain and configure the Local Computer policy on a reference computer.
C.
Create a new organizational unit (OU), place all computer accounts in the new OU, and then run the Delegation of Control Wizard for the new OU.
D.
Create, link and enforce a new GPO to the domain.
E.
None of the above
Explanation:
To enforce the corporate policy by using the minimum amount of administrative effort, you need to create a GPO and link the GPO to the domain and then configure the GPO to be enforced.
Group policy settings are an integral part of any Windows-based IT environment. The number of desktop lockdown settings available to group policy administrators is enormous. They can prevent you from doing anything from changing your desktop appearance and start menu to running certain applications.
http://blogs.technet.com/markrussinovich/archive/2005/04/30/circumventing-group-policy-settings.aspx