Home » Microsoft » 70-647 » What should you do?
Your network consists of one Active directory domain. All domain controllers run Windows Server 2008. The network contains both portable and desktop computers.
Your company has two departments named Sales and Engineering. You create one organizational unit (OU) for each department.
You move all user and computer accounts to their respective OUs.
You need to prepare the environment for the deployment of Group Policy objects (GPO) to meet the following requirements:
Remote users in the Sales department must be able to save documents to any USB flash drive.
Remote users in the Engineering department must be able to save documents only to USB flash drives supplied by the company.
Local network users from both departments must be able to use a USB mouse and a USB keyboard.
What should you do?
A. Create a single GPO for both OUs.
B. Modify the Default Domain Policy. Create a new GPO for each OU.
C. Create a new OU for all desktop computers. Create a GPO for the new OU.
D. Modify the Default Domain Controllers Policy. Create a new GPO for each OU.
Correct Answer: B
Explanation/Reference:
Explanation:
Every Default Domain Policy setting configured in that GPO apply to every user and computer account in the domain unless these settings are overwritten by other domain GPOs having higher precedence or by GPOs linked to OUs.
Therefore, you need to first modify the Default Domain Policy to not include any settings except account policies and then create a new GPO for Sales organizational unit (OU) to allow the remote users of the Sales department to save documents to any USB flash drive and a new GPO for
www.certify-me.co.uk 81
Microsoft 70-647 Exam
Development OU to allow the remote users of Development department to save documents only to USB flash drives supplied by the company. Beside you need to configure both the GPOs to allow the local network users from both the departments to be able to use a USB mouse and a USB keyboard.
Reference: Caution with Default Domain Policy
http://www.windowsnetworking.com/kbase/WindowsTips/Windows2003/AdminTips/Admin/Caution withDefaultDomainPolicy.html