Your network consists of one Active directory domain. All domain controllers run Windows Server
2008. The network contains both portable and desktop computers. Your company has two
departments named Sales and Engineering. You create one organizational unit (OU) for each
department. You move all user and computer accounts to their respective OUs. You need to prepare
the environment for the deployment of Group Policy objects (GPO) to meet the following
requirements:
Remote users in the Sales department must be able to save documents to any USB flash drive.
Remote users in the Engineering department must be able to save documents only to USB flash
drives supplied by the company.
Local network users from both departments must be able to use a USB mouse and a USB keyboard.
What should you do?
A.
Create a single GPO for both OUs.
B.
Modify the Default Domain Policy. Create a new GPO for each OU.
C.
Create a new OU for all desktop computers. Create a GPO for the new OU.
D.
Modify the Default Domain Controllers Policy. Create a new GPO for each OU.
Explanation:
Every Default Domain Policy setting configured in that GPO apply to every user and computer
account in the domain unless these settings are overwritten by other domain GPOs having higher
precedence or by GPOs linked to OUs. Therefore, you need to first modify the Default Domain Policy
to not include any settings except account policies and then create a new GPO for Sales
organizational unit (OU) to allow the remote users of the Sales department to save documents to
any USB flash drive and a new GPO for Development OU to allow the remote users of Development
department to save documents only to USB flash drives supplied by the company. Beside you need
to configure both the GPOs to allow the local network users from both the departments to be able
to use a USB mouse and a USB keyboard.
Caution with Default Domain Policy
http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/Admin/Cautio
nwithDefaultDomainPolicy.html