nerdexam
CompTIA

220-802 · Question #499

Despite objections, the Chief Executive Officer (CEO) wanted all managers to have administrator rights to their workstations. After a few months, the CEO was replaced. A technician is assigned the…

The correct answer is B. gpedit.msc. Group Policy (gpedit.msc) is the correct domain-level tool for changing user account rights and group memberships across multiple domain workstations simultaneously.

Hardware and network troubleshooting

Question

Despite objections, the Chief Executive Officer (CEO) wanted all managers to have administrator rights to their workstations. After a few months, the CEO was replaced. A technician is assigned the task of changing the managers to power users on the domain. Which of the following is the BEST choice to complete this task?

Options

  • Arstrui.exe
  • Bgpedit.msc
  • Clusrmgr.msc
  • Dusergroup.exe

How the community answered

(42 responses)
  • A
    17% (7)
  • B
    71% (30)
  • C
    5% (2)
  • D
    7% (3)

Why each option

Group Policy (gpedit.msc) is the correct domain-level tool for changing user account rights and group memberships across multiple domain workstations simultaneously.

Arstrui.exe

rstrui.exe launches System Restore and is used to roll back system state; it has no capability to manage user accounts or group memberships.

Bgpedit.mscCorrect

The Group Policy Editor (gpedit.msc) allows administrators to configure Restricted Groups settings under Computer Configuration, which enforces domain-wide group membership changes on all targeted machines at the next policy refresh. This is the most efficient and authoritative method for altering user privileges across multiple domain-joined workstations at once.

Clusrmgr.msc

lusrmgr.msc is the Local Users and Groups Manager, which only applies changes to the local machine and cannot be used to push group membership changes across domain workstations.

Dusergroup.exe

usergroup.exe is not a valid Windows system utility and does not exist as a standard tool.

Concept tested: Group Policy Restricted Groups for domain-wide privilege management

Source: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-rights-assignment

Topics

#Group Policy#user rights management#domain administration#gpedit.msc

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice