GPO

You have a Microsoft Entra Domain Services domain named contoso.com

For the contoso.com domain, you need to configure the password settings.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains 500 Windows client devices.

You need to deploy apps and enforce security settings on the Windows client devices. The solution must minimize administrative effort.

What should you use?

Your network contains an Active Directory Domain Services (AD DS) domain. The domain contains five domain controllers that run Windows Server and 500 Windows client devices.

You need to enforce minimum password requirements by using Group Policy.

Which two actions achieve the goal? Each correct answer presents a complete solution.

Overview
Contoso, Ltd. is a company that has a main office in Seattle and two branch offices in Los Angeles and Montreal.
Existing Environment
AD DS Environment
The network contains an on premises Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains two domains named contoso.com and canada.contoso.com.
The forest contains the domain controllers shown in the following table.

You have a Group Policy Object (GPO) named GPO1 that contains user settings only.
You plan to apply GPO1 to a global security group named Group1.
You link GPO1 to the domain, and you remove all the permissions granted to the Authenticated Users group.
You need to configure permissions for GPOI to meet the following requirements:
✑ GPO1 must apply only to the users in Group1.
✑ The solution must use the principle of least privilege.
Which permissions should you grant to Group1 and the Domain Computers group? To answer, select the appropriate options in the answer area.

You have a Microsoft Entra Domain Services domain named contoso.com.
You need to provide an administrator with the ability to manage Group Policy Objects (GPOs). The solution must use the principle of least privilege.
To which group should you add the administrator?

You need to create a Group Policy Object (GPO) named GPO1 that only applies to a group named MemberServers.

To complete this task, sign in the required computer or computers.

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains the users shown in the following table.



The domain has the Group Policy Objects (GPOs) shown in the following table.

You use a Group Policy preference to map \\dc1.contoso.com\install as drive H for all users. If a user already has an existing drive mapping for H, the new drive mapping must take precedence.

To complete this task, sign in to the required computer or computers.

Your network contains an Active Directory domain named contoso.com. The domain contains the computers shown in the following table.



On Server3, you create a Group Policy Object (GPO) named GPO1 and link GPO1 to contoso.com. GPO1 includes a shortcut preference named Shortcut1 that has item-level targeting configured as shown in the following exhibit.