nerdexam
Microsoft

MS-721 · Question #266

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. You have a Microsoft Teams deployment that contains Teams Rooms on Windows devices. You create an organizational u

The correct answer is D. Set GPO1 to Enforced.. When a GPO is enforced, it ensures that its settings are applied across all users and computers within its scope, regardless of any other conflicting GPOs linked to parent containers. Note: Enforced GPOs Determine if there are any policy settings that must always be enforced for

Configure and manage Teams Rooms and devices

Question

Your on-premises network contains an Active Directory Domain Services (AD DS) domain. You have a Microsoft Teams deployment that contains Teams Rooms on Windows devices. You create an organizational unit (OU) named OU1 and join the devices to the domain. You create a Group Policy Object (GPO) named GPO1 and link GPO1 to OU1. You need to ensure that only the settings configured in GPO1 apply to the devices. What should you do?

Options

  • AConfigure block inheritance for OU1.
  • BRun the Group Policy Modeling Wizard for OU1.
  • CLink GPO1 to the domain.
  • DSet GPO1 to Enforced.

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    14% (3)
  • C
    5% (1)
  • D
    77% (17)

Explanation

When a GPO is enforced, it ensures that its settings are applied across all users and computers within its scope, regardless of any other conflicting GPOs linked to parent containers. Note: Enforced GPOs Determine if there are any policy settings that must always be enforced for particular groups of users or computers. Create GPOs that contain these policy settings, link them to the appropriate site, domain, or OU, and designate these links as enforced. By setting this option, you enforce a higher-level GPO’s policy settings by preventing GPOs in lower-level Active Directory containers from overriding them. For example, if you define a specific GPO at the domain level and set the enforced option, the policies that the GPO contains apply to all OUs under that domain. GPOs linked to the lower-level OUs can't override that enforced domain Group Policy. If multiple GPOs are linked at the same site, domain, or OU and have the enforced option set, the highest GPO link set to enforced takes precedence. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/group-policy/group- policy-processing#enforced-gpos

Topics

#Group Policy#Active Directory#Teams Rooms#Device Management

Community Discussion

No community discussion yet for this question.

Full MS-721 Practice