Your network consists of one Active directory domain. The functional level of the domain is Windows Server 2008. The domain is configured as shown in the exhibit.
You create four Group Policy objects (GPOs) as shown in the following table:
You need to link the new GPOs to meet the following requirements:
– All users must have access to a USB printer device.
– All users except the department managers must be denied access to USB flash drives.
– Both department managers must have access to USB flash drives and a USB printer device.
– Only users in the sales department must have the custom database application installed.
– Only users in the engineering department must have the line-of-business application installed.
– You must achieve this goal by using the minimum amount of administrative effort.
What should you do?
Exhibit:
A.
Link GPO1 to the Sales Users OU. Link GPO2 to the Engineering Users OU. Link GPO3 to the All Users OU. Link GPO4 to the Managers OU.
B.
Link GPO1 and GPO2 to the Sales Users OU and the Engineering Users OU. Link GPO3 to the domain and block inheritance for the Managers OU. Link GPO4 to the All Users OU.
C.
Link GPO1 and GPO2 to the Sales Users OU and the Engineering Users OU. Link GPO3 to the All Users OU. Link GPO4 to the domain and block inheritance for the All Users OU.
D.
Link GPO1 to the Sales Users OU. Link GPO2 to the Engineering Users OU. Link GPO3 to the All Users OU and block inheritance for the Managers OU. Link GPO4 to the Managers OU.
Supposedly the manager GPO will override all user GPO, so no block inheritance is required
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx
https://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx
https://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx
As the manager GPO may override all user GPO, so block inheritance may not required.
As the manager GPO may override all user GPO, so block inheritance may not required.
https://technet.microsoft.com/en-us/library/cc785665(v=ws.10).aspx
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/15/understanding-the-structure-of-a-group-policy-object-part-2.aspx