Question
Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com.
You create the resources shown in the following table.
| Name | Type | Member of | In organizational unit (OU) |
|--------|-----------------|-----------|-----------------------------|
| User1 | User | None | Contoso.com\OU1 |
| User2 | User | Group1 | Contoso.com\OU1 |
| User3 | User | Group1 | Contoso.com\OU2 |
| Group1 | Group | None | Contoso.com\OU1 |
| Comp1 | Client computer | Group1 | Contoso.com\OU2 |
You create the Group Policy Objects (GPOs) shown in the following table.
| Name | Linked to |
|------|-----------|
| GPO1 | OU1 |
| GPO2 | OU2 |
You configure the Group Policy Preferences shown in the following table.
| GPO | Setting |
|------|---------|
| GPO1 | Computer Configuration: Add a shortcut named Link1 to the desktop<br>User Configuration: Add a shortcut named Link2 to the desktop |
| GPO2 | Computer Configuration: Add a shortcut named Link3 to the desktop<br>User Configuration: Add a shortcut named Link4 to the desktop |
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Explanation
Statement 1 (No): Link4 comes from the User Configuration of GPO2, which is linked to OU2. User settings follow the location of the user object, and User1 is in OU1, so User1 receives GPO1's user setting (Link2), not Link4. Because Comp1 is in OU2, it receives only GPO2's computer setting (Link3). Loopback processing is not configured, so GPO2's user settings do not apply to User1 on Comp1.
Statement 2 (Yes): User2's account is in OU1, so GPO1's User Configuration applies whenever User2 signs in, including on Comp1, and the Link2 shortcut appears.
Statement 3 (No): User3's account is in OU2, so User3 receives GPO2's user setting (Link4), not Link2. Membership in Group1 does not matter: a GPO linked to an OU applies to the user and computer objects in that OU, not to members of a group that happens to be stored there.
