Перейти до основного вмісту
Answer confirmed
Question

Your network contains an Active Directory Domain Services (AD DS) forest named contoso.com. The forest contains a child named east.contoso.com and the servers shown in the following table.



You need to create a folder for the Central Store to manage Group Policy template files for the entire forest.

What should you name the folder, and on which server should you create the folder? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Proposed answer

Suggested answer

Correct answer

The suggested answer is incorrect

  • Name:  PolicyDefinitions
  • Server: DC1 and DC2 only

A Central Store is a per-domain concept. As the central store exists in the SYSVOL, and SYSVOL is only replicated among Domain Controllers within the domain, and it does not replicate to Domain Controllers in the other domains within same forest, it can be safely concluded that the Central Store is only available for each domain.

 

Comments
skycrap

Highly Voted 1 year, 5 months ago 

Shouldn’t be: “Policydefinitions” and DC1 and DC2 (each domain has his own set of gp)

upvoted 14 times 

skycrap

1 year, 5 months ago 

A Central Store is a per-domain concept. As the central store exists in the SYSVOL, and SYSVOL is only replicated among Domain Controllers within the domain, and it does not replicate to Domain Controllers in the other domains within same forest, it can be safely concluded that the Central Store is only available for each domain.

upvoted 6 times 

cao75rgl

1 year, 5 months ago 

Correcto, cada dominio tiene su propio conjunto de GPO. Pero segun a pregunta esta pidiendo una carpeta donde guardar los template, por lo que el nombre deberia ser "TemplateDefinition", y en DC1 y DC2

upvoted 1 times 

MR_Eliot

Highly Voted 1 year, 1 month ago 

I have tested this in my lab. Each domain needs it's own central policy store. so: 1. PolicyDefinisions 2. DC1 & DC2

upvoted 12 times 

KXNG

Most Recent 3 days, 1 hour ago 

Identify the forest root domain - DC1 (Contains schema master & domain naming master roles) Create Central Store called PolicyDefinitions in the SYSVOL folder of the forest root domain (DC1) This will automaticall replicate to all other domain controllers within the forest making templates accessible across both contoso.com and east.contoso.com PolicyDefinitions DC1

upvoted 1 times 

KXNG

3 days, 1 hour ago 

Apologies - I was wrong The correct answers are: Policy Definitions DC1 & DC2

upvoted 1 times 

2892e28

1 week, 2 days ago 

1. Policy Definitions 2. DC1 Per https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store: 1. To create a Central Store for .admx and .adml files, create a new folder named PolicyDefinitions 2. The files that are in the Central Store are replicated to all domain controllers in the domain

upvoted 1 times 

Ksk08

3 weeks, 6 days ago 

Answer is Policydefinitions and DC1.

upvoted 1 times 

MichalGr

7 months, 1 week ago 

I'm wondering between (2, 2) and (2, 4). While we can technically create the PolicyDefinitions folder on either domain controller, it's common practice to perform such changes on the domain controller holding the PDC Emulator role. The PDC Emulator is considered the primary domain controller for processing GPO updates and other important tasks. Therefore, making changes or updates on the domain controller with the PDC Emulator role could be seen as a best practice. But... in our case, we should maintain a separate PolicyDefinitions folder in the SYSVOL directory for each domain controller if they are in different domains within the forest. This approach ensures that each domain can manage its GPOs independently while allowing for the possibility of having domain-specific administrative templates. So rather (2, 4), what do you think?

upvoted 2 times 

afridi43

1 year, 2 months ago 

To create a folder for the Central Store to manage Group Policy template files for the entire forest, you should use the following options: Name: 2. PolicyDefinitions Server: 1. DC1 Only You should name the folder "PolicyDefinitions" and create it on DC1, as DC1 in the contoso.com domain holds the schema master role, which is required to update the schema for Group Policy Central Store.

upvoted 1 times 

Tiago_MP

1 year, 3 months ago 

PolicyDefinitions, DC1 and DC2. See https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

upvoted 4 times 

DonChevoDeLaPaca

1 year, 4 months ago 

Correct answer should be: PolicyDefinitions DC1 and DC2 * Policy definitions are domain-specific and are not shared between domains. Therefore Contoso and East Contoso would need to have their own set of Policies. https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

upvoted 6 times 

ahenriquez02

1 year, 5 months ago 

https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store#the-central-store

upvoted 1 times 

wouter0121

1 year, 4 months ago 

Can you elaborate? The question is a bit unclear. We have 2 domains, so they both would have their own policydefinitions. Id say the question is invalid and wouldnt know what to answer

upvoted 1 times 

ahenriquez02

1 year, 5 months ago 

To take advantage of the benefits of .admx files, you must create a Central Store in the sysvol folder on a Windows domain controller. The Central Store is a file location that is checked by the Group Policy tools by default. The Group Policy tools use all .admx files that are in the Central Store. The files that are in the Central Store are replicated to all domain controllers in the domain. We suggest keeping a repository of any ADMX/L files that you have for applications that you may want to use. For example, operating system extensions like Microsoft Desktop optimization Pack (MDOP), Microsoft Office, and also third-party applications that offer Group Policy support. To create a Central Store for .admx and .adml files, create a new folder named PolicyDefinitions in the following location (for example) on the domain controller: \\contoso.com\SYSVOL\contoso.com\policies\PolicyDefinitions

upvoted 2 times 

NadirAwan

1 year, 3 months ago 

That means Option A "DC1" is the right answer ?

upvoted 1 times