Microsoft 70-410 Sacriestory - Exam D Question 10

Discussion in '70-410 Exam files' started by Bradiss69, Jan 20, 2016.

  1. Bradiss69

    Bradiss69 Member
    Member

    Joined:
    Jan 13, 2016
    Messages:
    4
    Likes Received:
    0
    Could someone clarify this answer?

    You work as an administrator at ABC.com. The ABC.com network consists of a single domain named ABC.com. All servers in the ABC.com domain, including domain controllers have Windows Server 2012 R2 installed. ABC.com's user accounts are located in an organizational unit (OU) names ABCStaff. ABC.com's managers belong to a group named ABCManagers. You have been instructed to create a a new Group Policy (GPO) that should be linked to the ABCStaffOU but not affect ABC.com's managers.

    A. You should consider removing the user accounts of the managers from the ABCStaff OU.
    B. You should consider configuring the new GPO's WMI filter.
    C. You should consider adding the user accounts of ABC.com's managers to the Admins group.
    D. you should consider adding the user accounts of ABC.com's managers to the local Administrators group.

    The answer is A but wouldn't this affect the managers accounts? :confused:

    Thanks
     
  2. kaboemm

    kaboemm Member
    Member

    Joined:
    Nov 17, 2015
    Messages:
    9
    Likes Received:
    4
    Hello Bradiss69,

    The policy is linked to the ABCStafff OU. In the OU are all the users (including the managers). For the policy to stay on the ABCStaff OU and not affect the managers, you move the managers accounts out of the ABCStaff OU.

    The group named ABCManagers is just there for distraction. You also don't know where the ABCManagers group is placed in the AD.

    Hope that clears things up a bit.
     

Share This Page