MS-721 · Question #266
Your on-premises network contains an Active Directory Domain Services (AD DS) domain. You have a Microsoft Teams deployment that contains Teams Rooms on Windows devices. You create an organizational u
The correct answer is D. Set GPO1 to Enforced.. When a GPO is enforced, it ensures that its settings are applied across all users and computers within its scope, regardless of any other conflicting GPOs linked to parent containers. Note: Enforced GPOs Determine if there are any policy settings that must always be enforced for
Question
Options
- AConfigure block inheritance for OU1.
- BRun the Group Policy Modeling Wizard for OU1.
- CLink GPO1 to the domain.
- DSet GPO1 to Enforced.
How the community answered
(22 responses)- A5% (1)
- B14% (3)
- C5% (1)
- D77% (17)
Explanation
When a GPO is enforced, it ensures that its settings are applied across all users and computers within its scope, regardless of any other conflicting GPOs linked to parent containers. Note: Enforced GPOs Determine if there are any policy settings that must always be enforced for particular groups of users or computers. Create GPOs that contain these policy settings, link them to the appropriate site, domain, or OU, and designate these links as enforced. By setting this option, you enforce a higher-level GPO’s policy settings by preventing GPOs in lower-level Active Directory containers from overriding them. For example, if you define a specific GPO at the domain level and set the enforced option, the policies that the GPO contains apply to all OUs under that domain. GPOs linked to the lower-level OUs can't override that enforced domain Group Policy. If multiple GPOs are linked at the same site, domain, or OU and have the enforced option set, the highest GPO link set to enforced takes precedence. https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/manage/group-policy/group- policy-processing#enforced-gpos
Topics
Community Discussion
No community discussion yet for this question.