Your network contains an Active Directory domain named contoso.com. The domain contains 20
computer accounts that reside in an organizational unit (OU) named OU1.
A Group Policy object (GPO) named GPO1 is linked to OU1. GPO1 is used to assign several user rights
to a user named User1.
In the Users container, you create a new user named User2.
You need to ensure that User2 is assigned the same user rights as User1 on all of the client
computers in OU1.
What should you do?
A.
Modify the settings in GPO1.
B.
Modify the link of GPO1.
C.
Link a WMI filter to GPO1.
D.
Move User2 to OU1.
Explanation:
The GPO is linked to OU1. By moving User2 to OU1 the GPO will be applied to this user.
Move User2 to OU1 — WHY???
Can anyone explain this?
User2 shoudl have the same permissions as User1. Nowhere is said that User1 is in OU1. So why would User2 need to be in OU1?
Why not A -Modify the settings in GPO1?
The GPO is linked to OU1. Since there is no other information about how that GPO is applied, and it gives permissions to User1, we can only assume that User1 is in OU1 and by putting User2 in the same OU, then User2 eill have the GPO applied to them. Personally I think this is a poorly written question.
the answer is D
The question does say that User1 is in OU1, but not directly.
GPO1 is linked to OU1, and GPO1 is used to assign rights to User1. Since we aren’t being told that GPO1 is linked to any other OUs, User1 must be in OU1.
It seems that you need to look at a lot of these questions with a “what are they not telling us” mindset.
OU1, only contain computers. Not Users. I think A is the correct one-
I believe answer should be A.
User rights are found under Computer Configuration:
Computer Configuration>Policies>Windows Settings>Security Settings>Local Policy>User Rights Assignment.
If you add User2 to any rights in this Policy that is being applied to computers in OU1 than User2 will have rights on all these computers.
Moving User2 to OU1 will not effect anything, as stated above User rights are under computer Configuration which do not apply to Users.