Note: This question-is part of a series of questions that present the same scenario. Each question-in the series contains a unique solution that might meet the stated goals. Some question-sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named User1 to the local Administrators group on Server1.
Solution: From a domain controller, you run the Set-AdComputer cmdlet.
Does this meet the goal?
A. Yes
B. No
54given answer B.NO is correct.
This question is tricky, although you can use Set-ADComputer Server1 -ManagedBy “CN=User1” to modify the “Managed By” attribute setting of Server1 account and grant administrative rights to User1 on Server1, however, this cmdlet did NOT achieve the objective stated by the question “add a domain user named User1 to the local Administrators group on Server1”
therefore, it did not meet the goal.
Solution: From the Computer Configuration node of GPO1, you configure the Local Users and Groups preference
&
Solution: From the Computer Configuration node of GPO1, you configure the Restricted Groups settings.
are also correct.