windows admin unit 11
The Block _________ setting enables you to prevent GPOs that are linked to parent containers from being applied at the lower level. a. Inheritance b. Policy c. OU d. Site
Answer A. A situation in which this might be useful is where the administrator of an OU wants to control all GPOs that apply to computers or users in the OU without inheriting settings from the site or parent domain.
The folder hierarchy is composed of the Group Policy __________ folder at the top and subfolders under it. This structure holds all the information for a given GPO. a. Templates b. Definitions c. Containers d. Objects
Answer A. Every domain has associated with it a folder hierarchy found in the domain controllers at the shared folder %systemroot%\SYSVOL\sysvol\\Policies.
Group policy is a group of policies that are applied together. It is a set of configuration settings that can be applied to one or more Active Directory Domain Services (AD DS) objects to define the behavior of the object and its ______________. a. Child objects b. Other container objects c. Domain d. None of the above
Answer A. The policies are contained in sets known as Group Policy objects (GPOs). In turn, the content of GPOs is stored in two different locations: Group Policy containers (GPCs), which are Directory Services objects that include subcontainers for machine and user Group Policy information, and Group Policy templates (GPTs), which are folder structures including a GPT folder and its subfolders that together contain all the Group Policy information including the actual policy settings for any particular GPO.
The subcontainer found under both the Computer and User Configuration Policies containers that holds most of the settings that control the appearance of the desktop environment is called ___________. a. Administrative templates b. Policies c. Preferences d. Windows Settings
Answer A. There is an All Settings subnode that provides a comprehensive list of all policy settings that you can sort according to name, state, comment, or path, or filter according to several criteria.
When you create a new GPO or edit an existing one, users affected by the GPO must _______. a. Log off and log back on again b. Reboot their computers c. Do nothing because the settings will automatically apply d. Refresh the desktop
Answer A. Users need only log off and log on for new settings to apply. If you have configured new settings in the Computer Configuration node, users must reboot their computers to receive the new settings.
All GPOs are identified by their ________. a. Names b. Globally Unique Identifier (GUID) c. Fully Qualified Domain Names d. PolicyIDs
Answer B. A GUID is a unique 128-bit number assigned when the GPO is first created. This number is stored as an attribute of the object and is used to identify it within the AD DS.
When you create a new GPO or edit an existing one, and if you have configured new settings in the Computer Configuration node, users affected by the GPO must _______. a. Log off and log back on again b. Reboot their computers c. Do nothing because the settings will automatically apply d. Refresh the desktop
Answer B. If you have configured new settings in the Computer Configuration node, users must reboot their computers to receive the new settings
By default, only members of the Domain Admins and Group Policy Creator Owners groups have permissions to ________. a. Manage GPOs b. Create GPOs c. View GPOs d. None of the above
Answer B. You can delegate control of Group Policy objects to users and groups to enable partial administrative control and ease the overall burden of administration.
Group Policy __________are objects that are defined within AD DS and are used to store the properties of GPOs, including attributes and version information. a. Templates b. Definitions c. Containers d. Objects
Answer C. Group Policy Containers contain subcontainers for user and computer Group Policy data. Information as to whether the GPO is enabled or disabled is also stored here. Being stored in AD DS, computers can access GPCs to locate GPTs, and domain controllers can access them to obtain version information, which verifies that they have the most recent edition of GPOs.
The section of Group Policy from which administrators can configure settings that are applied to users' desktops, specify programs that users can run, and so on is called ________. a. Group Policy Objects b. Server Policies c. Administrative Templates d. None of the above
Answer C. They apply changes to client computer Registry settings
It is possible to edit a GPO from any writable domain controller, or even to connect to a writable domain controller from a client computer running ________. a. Windows 8.1 Pro b. Windows 8.1 Enterprise c. Both Windows 8.1 Pro and Windows 8.1 Enterprise d. None of the above
Answer C. When you connect, you might want to specify which domain controller you are working against.
By default, which GPO is applied first? a. Site b. Domain c. Organizational Unit d. Local
Answer D. Because all computer-specific settings are applied before user logon and user-specific settings are applied after logon, any user-specific setting, even a local one, would override a conflicting computer-specific setting applied at any level.
If you can create a nested hierarchy of OUs, when more than one level of OU is present, policies linked to the parent OU are applied first, followed by _________________. a. Sites, Domains, and Child OUs in order b. Domains, Sites, and Child OUs in order c. Child OUs in order d. None of the above
Answer D. Consequently, the lowest-level OU policy becomes the determining factor should conflicts in the various GPOs arise.
The subcontainer found under both the subcontainer found under both the Computer and User Configuration Policies and Preferences containers that holds script and security settings is called _________. a. Administrative templates b. Policies c. Preferences d. Windows Settings
Answer D. The Windows Settings subcontainer contains other policy settings that affect the behavior of the Windows environment.
________ is the sole location for managing all aspects of Group Policy. a. Active Directory Users and Computers b. Group Policy Server Manager c. Role Manager d. Group Policy Management Console
Answer D. You perform all Group Policy administrative activities, including creating, editing, and applying GPOs from the GPMC.
Group Policy Object
Collection of policies that apply to a specific target, such as the domain itself (Default Domain Policy) or an OU
Root Container
Defines the focus of the Group Policy Management Editor by showing the GPO being edited plus the fully qualified domain name (FQDN) of the domain controller from which you are working
Group Policy Containers are sets of Group Policies
False—A Group Policy Object is a set of Group Policies.
All Group Policy Objects are identified by their PolicyIDs.
False—Group Policy Objects are identified by their GUIDS. A GUID is a unique 128-bit number assigned when the GPO is first created. This number is stored as an attribute of the object and is used to identify it within the AD DS.
The Block Policy setting enables you to prevent GPOs that are linked to parent containers from being applied at the lower level.
False—The Block Inheritance setting accomplishes this. A situation in which this might be useful is where the administrator of an OU wants to control all GPOs that apply to computers or users in the OU without inheriting settings from the site or parent domain.
Group Policy Templates are objects that are defined within AD DS and are used to store the properties of GPOs, including attributes and version information.
False—This describes Group Policy Containers, which contain subcontainers for user and computer Group Policy data. Information as to whether the GPO is enabled or disabled is also stored here. Being stored in AD DS, computers can access GPCs to locate GPTs, and domain controllers can access them to obtain version information, which verifies that they have the most recent edition of GPOs. .
The folder hierarchy composed of the Group Policy Containers folder at the top and subfolders under it holds all the information for a given GPO.
False—This describes the Group Policy Templates folder.
Group Policy Containers
Objects that are defined within AD DS and are used to store the properties of GPOs, including attributes and version information
Local, Site, Domain, OU
Order in which Group Policy is applied
Block Inheritance
Setting that enables you to prevent GPOs that are linked to parent containers from being applied at the lower level
Windows Settings
Subcontainer found under both the subcontainer found under both the Computer and User Configuration Policies and Preferences containers that holds script and security settings
Administrative templates
The principal means of administering the user environment and controlling the end user interface
Group Policy Management Console
The sole location for managing all aspects of Group Policy
Group Policy Templates
The top of the folder hierarchy with subfolders under it. This structure holds all the information for a given GPO
Computer policies are computer-specific and are applied when the computer starts up, and user policies are user-specific and are applied when the user logs on to the computer.
True— Group Policy can be applied to server and client computers running Windows 2000 and up and includes both computer and user settings.
The Administrative Templates subcontainer is found under both the Computer and User Configuration Policies containers and holds most of the settings that control the appearance of the desktop environment.
True— There is an All Settings subnode that provides a comprehensive list of all policy settings that you can sort according to name, state, comment, or path, or filter according to several criteria.
Group Policy is a set of configuration settings that can be applied to one or more Active Directory Domain Services (AD DS) objects to define the behavior of the object and its child objects.
True—Group Policy is a set of configuration settings that can be applied to one or more Active Directory Domain Services (AD DS) objects to define the behavior of the object and its child objects.
The GPMC is installed when you install AD DS.
True—You can also install the GPMC on a member server by accessing the Add Features Wizard in Server Manager. GPMC is also included in the Remote Server Administration Tools package, which you can install on a client computer running Windows 8.1 Pro or higher.
Group Policy Management Console is included by default with Windows Server 2012 R2 and is the sole location for managing all aspects of Group Policy.
True—You perform all Group Policy administrative activities, including creating, editing, and applying GPOs from the GPMC.
Globally Unique Identifier (GUID)
Used to identify GPOs
