Which of the following options would you choose to ensure that the users from the Engineering global group …

Exhibit:
You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All the servers on the network run Windows Server 2008 and all client computers run Windows Vista. The functional level of the domain is Windows Server 2008.
The company consists of three departments: Sales, Finance, and Engineering. The Organizational Units (OU) called Employees, Managers, and Staff exists in the AD domain. The relevant portion of the Active Directory domain is shown in the diagram.
The Staff OU contains all user accounts except for the managers user accounts. The ManagersOU contains the managers user accounts and the Sales, Finance, and Engineering global groups. You have recently created a new Group Policy object (GPO) named GPO1, and then link it to the Employees OU.
After this configuration, the users from the Engineering global group report that they are unable to access the Run command on the Start menu. On troubleshooting, you discovered that the GPO1 settings are causing this problem.
Which of the following options would you choose to ensure that the users from the Engineering global group are able to access the Run command on the Start menu?

Exhibit:

You are an Enterprise administrator for contoso.com. The corporate network of the company consists of a single Active Directory domain. All the servers on the network run Windows Server 2008 and all client computers run Windows Vista. The functional level of the domain is Windows Server 2008.
The company consists of three departments: Sales, Finance, and Engineering. The Organizational Units (OU) called Employees, Managers, and Staff exists in the AD domain. The relevant portion of the Active Directory domain is shown in the diagram.

The Staff OU contains all user accounts except for the managers user accounts. The ManagersOU contains the managers user accounts and the Sales, Finance, and Engineering global groups. You have recently created a new Group Policy object (GPO) named GPO1, and then link it to the Employees OU.

After this configuration, the users from the Engineering global group report that they are unable to access the Run command on the Start menu. On troubleshooting, you discovered that the GPO1 settings are causing this problem.

Which of the following options would you choose to ensure that the users from the Engineering global group are able to access the Run command on the Start menu?

A.
Under the Employees OU, create a new child OU for Engineering department and then move the Engineering global group to the new Engineering OU.

B.
On the Managers OU, configure Block Policy Inheritance.

C.
For the Engineering global group, configure Group Policy filtering on GPO1.

D.
Configure GPO1 to use the Enforce Policy option.

E.
None of the above

Explanation:

To ensure that the users from the Engineering global group are able to access the Run command on the Start menu, you need to configure Group Policy filtering on GPO1 for the Engineering global group
If you’ve been administering Group Policies for just a short period of time you have probably noticed that there is no search option for specific policy settings. Search is not referred to as “search” within GPME, it’s still called “filtering” like the limited functionality we had in previous versions – but it’s much more advanced now. You’ll be able to see that as soon as you select the “Filter Options” from the View menu. You can use filtering to access the Run command on the Start menu for specific global groups.

Reference: Group Policy related changes in Windows Server 2008 – Part 2: GPMC Version 2 Filtering to search

http://www.windowsecurity.com/articles/Group-Policy-related-changes-Windows-Server-2008-Part2.html



Leave a Reply 0

Your email address will not be published. Required fields are marked *