| Author |
Tue 70-217 Question of the Day
|
|
| wbafrank 2002-08-06, 9:43 am |
|  And today's poser is ....
Q25. You have configured Group Policies for your company's network but the results that you notice are not what you had expected. You would like to review your Group Policy configuration and arrive at a reason why you are not seeing the intended effects.
You currently have a single-domain network with three organizational units (OUs). They are named Sales, Marketing and Operations and are all at the root level of the domain.
All of the servers are running Windows 2000 Server and all of the clients are running Windows 2000 Professional. You have applied a Group Policy called SalesConfig to the Sales OU.
The Sales OU contains the following accounts:
-Pavlov (user account)
-Dejavue (user account)
-Alison (user account)
-freak (user account)
-Sales (global security group)
-Sales Resources (domain local security group)
All of the users are members of the Sales group and the Sales group is a member of the Sales Resources group. In addition, you have two other users (Unreal and Slinky) who are members of the Sales group. Their accounts are located in the Users container.
When you test the policies you realize that the SalesConfig policy is not being applied to the Unreal or Slinky accounts. You are attempting to determine why.
Which of the following is the best possible explanation for why the policy is not being applied to these accounts?
A. Local policies that have been configured for the computers which Unreal and Slinky work from are overriding the policies configured at the OU level.
B. An administrator has configured Block Inheritance for the SalesConfig policy.
C. The policy has not been refreshed. This must be done through use of the secedit command.
D. An administrator has configured No Override for any policies set at the domain level.
E. The user accounts are not located in the Sales OU and therefore do not have the policies applied to them.
Good Luck .... see you tomorrow for the answer!! | |
| Deja-vue 2002-08-06, 10:34 am |
| Going with C.
I had this Problem this weekend.
To refresh Group Policy,go to a Command Prompt, type secedit /refreshpolicy MACHINE_POLICY
or secedit /refreshpolicy USER_POLICY
hmmmm... but then D looks good, too.
Stay with C. final answer. | |
| NetChild1985 2002-08-06, 11:18 am |
| "C" - Run secedit /refreshpolicy USER_POLICY | |
| Slinky 2002-08-06, 1:25 pm |
| Definately E. I have a link but I'm not goint to post it yet.  | |
| frazang 2002-08-06, 4:44 pm |
| E
But C is appealing...
have to go with the 1st instinct and then pray (just like in an exam) - E
| |
| unreal 2002-08-06, 6:43 pm |
| It should be 'E'- being the users not located in the Sales OU. Just a hunch | |
| Tech Ranger 2002-08-06, 8:12 pm |
| Of course it's E. If you're not in it, you can't win it. | |
|
| I would have to go with E.
Even though slinky and unreal are members of the sales group the policy is applied to the Sales OU and not the Users container thus its not applied to any object under that container.
Greetings everyone, I need some tech talk in my life so I thought I would give this a try. | |
| claudio rivas 2002-08-07, 10:27 am |
| For me E is the correct answer
The Smiles must have a scream! | |
| wbafrank 2002-08-07, 10:47 am |
| quote:
Originally posted by wbafrank
And today's poser is ....
Q25. You have configured Group Policies for your company's network but the results that you notice are not what you had expected. You would like to review your Group Policy configuration and arrive at a reason why you are not seeing the intended effects. You currently have a single-domain network with three organizational units (OUs). They are named Sales, Marketing and Operations and are all at the root level of the domain. All of the servers are running Windows 2000 Server and all of the clients are running Windows 2000 Professional. You have applied a Group Policy called SalesConfig to the Sales OU. The Sales OU contains the following accounts:
-Pavlov (user account)
-Dejavue (user account)
-Alison (user account)
-freak (user account)
-Sales (global security group)
-Sales Resources (domain local security group)
All of the users are members of the Sales group and the Sales group is a member of the Sales Resources group. In addition, you have two other users (Unreal and Slinky) who are members of the Sales group. Their accounts are located in the Users container. When you test the policies you realize that the SalesConfig policy is not being applied to the Unreal or Slinky accounts. You are attempting to determine why. Which of the following is the best possible explanation for why the policy is not being applied to these accounts?
A. Local policies that have been configured for the computers which Unreal and Slinky work from are overriding the policies configured at the OU level.
B. An administrator has configured Block Inheritance for the SalesConfig policy.
C. The policy has not been refreshed. This must be done through use of the secedit command.
D. An administrator has configured No Override for any policies set at the domain level.
E. The user accounts are not located in the Sales OU and therefore do not have the policies applied to them.
And the answer is ....
Correct Answer: E
Group Policy Objects (GPOs) are applied only to the users and computers that are members of the organizational unit. Even though these two accounts are members of a group that is located in the OU that has the policy applied to it, they will not receive the policy. | |
| Deja-vue 2002-08-07, 12:57 pm |
| what am i doing in 217 anyways? |
|
|
|