Question
Your network contains an Active Directory Domain Services (AD DS) domain. The network also contains 20 domain controllers, 100 member servers, and 100 client computers.
You have a Group Policy Object (GPO) named GPO1 that contains Group Policy preferences.
You plan to link GPO1 to the domain.
You need to ensure that the preference in GPO1 apply only to domain member servers and NOT to domain controllers or client computers. All the other Group
Policy settings in GPO1 must apply to all the computers. The solution must minimize administrative effort.
Which type of item level targeting should you use?
- A. Domain
- B. Operating System Correct
- C. Security Group
- D. Environment Variable
Explanation
An Operating System targeting item can match on the computer role of the processing computer: Workstation, Member Server, or Domain Controller. Setting Computer role to Member Server makes the preference items in GPO1 apply only to domain member servers, while the other settings in GPO1 still apply to every computer the GPO is linked to. Nothing has to be created or maintained. Security Group targeting would need a group of member servers that you create and keep current, which is more administrative effort. Domain targeting cannot tell the computer types apart, because all computers are in the same domain. Environment Variable targeting would need a variable to be set on each member server first.
