You are an intern at Wide World Importers and help manage 1000 workstations. All the workstations are members of an Active Domain.
You need to push out an internal certificate to Internet Explorer on all workstations.
What is the quickest method to do this?
A. Local policy
B. Logon script
C. Windows Update
D. Group policy
A is correct, An intern don’t have admin privilege to apply GPO.
An intern can have any job if the role is given to them. The Question specifically says it is a member of a domain and you are making the change on 1000 workstations. If you do a Group Policy this is one change. If you do a local policy this is a 1000 changes on a 1000 devices.
? / I would do it with an group policy:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/distribute-certificates-to-client-computers-by-using-group-policy