Which two GPO settings should you identify?

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is
linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers.
You plan to unlink GPO1 from OU1.
You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked
from OU1.
Which two GPO settings should you identify? (Each correct answer presents part of the solution.
Choose two.)

Your network contains an Active Directory domain named contoso.com. All domain controllers run
Windows Server 2012 R2.
You have a Group Policy object (GPO) named GPO1 that contains hundreds of settings. GPO1 is
linked to an organizational unit (OU) named OU1. OU1 contains 200 client computers.
You plan to unlink GPO1 from OU1.
You need to identify which GPO settings will be removed from the computers after GPO1 is unlinked
from OU1.
Which two GPO settings should you identify? (Each correct answer presents part of the solution.
Choose two.)

A.
The managed Administrative Template settings

B.
The unmanaged Administrative Template settings

C.
The System Services security settings

D.
The Event Log security settings

E.
The Restricted Groups security settings

Explanation:
There are two kinds of Administrative Template policy settings: Managed and Unmanaged . The
Group Policy service governs Managed policy settings and removes a policy setting when it is no
longer within scope of the user or computer.
References:
httpHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/cc778402(v=ws.10).aspx#_blank”.
com/en-us/library/cc778402(v=wsHYPERLINK “http://technet.microsoft.com/enus/library/cc778402(v=ws.10).aspx#_blank”. 10)HYPERLINK “http://technet.microsoft.com/enus/library/cc778402(v=ws.10).aspx#_blank”. aspx
httpHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”:
//technetHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”.
microsoftHYPERLINK “http://technet.microsoft.com/en-us/library/bb964258.aspx#_blank”. com/enus/library/bb964258HYPERLINK “http://technet.microsoft.com/enus/library/bb964258.aspx#_blank”. aspx



Leave a Reply 5

Your email address will not be published. Required fields are marked *


Bas

Bas

Tested in lab and can confirm that C, D and E all revert to the original values when the GPO is unlinked from the OU. So C, D and E could all be right answers.

pikapoka

pikapoka

D is wrong, should be E

Tips for Restricted Groups
Here are some general tips to ensure that your implementation of Restricted Groups goes smoothly.

*Make sure that the GPOs are linked to OUs that contain computer accounts
*Make sure you don’t try to configure invalid group nesting rules
*When adding members to a group, you will need to add all members through the GPO
*Use the Restricted Groups to control membership of key administrative groups within Active Directory
*Test the implementation thoroughly before you deploy, to ensure you don’t prohibit a users capabilities or lock yourself out of a computer
http://techgenix.com/using-restricted-groups/

Fréd

Fréd

A + D
Link deleted = Managed will be affected
Link deleted = Event log does not stay

E is wrong.

Fung

Fung

tested in lab only B will stay