多项选择题
Your company has an organizational unit named Production. The Production organizational unit has a child organizational unit named R&D You create a GPO named Software Deployment and link it to the Production organizational unit. You create a shadow group for the R&D organizational unit. You need to deploy an application to users in the Production organizational unit. You also need to ensure that the application is not deployed to users in the R&D organizational unit. What are two possible ways to achieve this goal（）
A.Configure the Enforce setting on the software deployment GPO.
B.Configure the Block Inheritance setting on the R&D organizational unit.
C.Configure the Block Inheritance setting on the Production organizational unit.
D.Configure security filtering on the Software Deployment GPO to Deny Apply group policy for the R&D security group.
相关考题
-
单项选择题
Your company, Contoso, Ltd., has a main office and a branch office. The offices are connected by a WAN link. Contoso has an Active Directory forest that contains a single domain named ad.contoso.com. The ad. contoso.com domain contains one domain controller named DC1 that is located in the main office. DC1 is configured as a DNS server for the ad.contoso.com DNS zone. This zone is configured as a standardprimary zone. You install a new domain controller named DC2 in the branch office. You install DNS on DC2. You need to ensure that the DNS service can update records and resolve DNS queries in the event that a WAN link fails. What should you do（）
A.Create a new stub zone named ad.contoso.com on DC2.
B.Configure the DNS server on DC2 to forward requests to DC1.
C.Create a new standard secondary zone named ad.contoso.com on DC2.
D.Convert the ad.contoso.com zone on DC1 to an Active Directory-integrated zone. -
单项选择题
YourcompanyhasanActiveDirectorydomain.Auserattemptstologontothedomainfromaclientcomputerandreceivesthefollowingmessage："ThisuseraccounthasexpiredAskyouradministratortoreactivatetheaccount."Youneedtoensurethattheuserisabletologontothedomain.Whatshouldyoudo（）
A.Modify the properties of the user account to set the account to never expire.
B.Modify the properties of the user account to extend the Logon Hours setting.
C.Modify the properties of the user account to set the password to never expire.
D.Modify the default domain policy to decrease the account lockout duration. -
单项选择题
Yourcompanyhires10newemployees.YouwantthenewemployeestoconnecttothemainofficethroughaVPNconnection.YoucreatenewuseraccountsandgrantthenewemployeestheAllowReadandAllowExecutepermissionstosharedresourcesinthemainoffice.Thenewemployeesareunabletoaccesssharedresourcesinthemainoffice.YouneedtoensurethatusersareabletoestablishaVPNconnectiontothemainofficeWhatshouldyoudo（）
A.Grant the new employees the Allow Full control permission.
B.Grant the new employees the Allow Access Dial-in permission.
C.Add the new employees to the Remote Desktop Users security group.
D.Add the new employees to the Windows Authorization Access security group.
