A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 10 Enterprise. A client computer named COMPUTER1 has a shared printer named PRINTER1 installed and Remote Desktop enabled.
A user named Intern is a member of a security group named Sales. The Sales group is a member of the Remote Desktop Users group on COMPUTER1. Only the Sales group has access to PRINTER1.
You need to configure COMPUTER1 to meet the following requirements:
Allow all members of the Sales group other than Intern to establish Remote Desktop connections to COMPUTER1. Allow Intern to print to PRINTER1.
What should you do?
A. Remove the Sales group from the Remote Desktop Users group.
B. Assign Intern the Deny log on through Remote Desktop Services user right.
C. Assign Intern the Deny access to this computer from the network user right. Assign the Sales group the Allow log on locally user right.
D. Remove Intern from the Sales group.
B) is the right answer
The Deny log on through Remote Desktop Services user right on COMPUTER1 will prevent In- tern from establishing a Remote Desktop connection to
COMPUTER1. This will override the user rights assigned to Intern through his or her membership of the Sales group.