Exam AZ-800 topic 1 question 36 discussion

Shouldn’t be: “Policydefinitions” and DC1 and DC2 (each domain has his own set of gp)

I have tested this in my lab. Each domain needs it's own central policy store. so: 1. PolicyDefinisions 2. DC1 & DC2

Identify the forest root domain - DC1 (Contains schema master & domain naming master roles) Create Central Store called PolicyDefinitions in the SYSVOL folder of the forest root domain (DC1) This will automaticall replicate to all other domain controllers within the forest making templates accessible across both contoso.com and east.contoso.com PolicyDefinitions DC1

1. Policy Definitions 2. DC1 Per https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store: 1. To create a Central Store for .admx and .adml files, create a new folder named PolicyDefinitions 2. The files that are in the Central Store are replicated to all domain controllers in the domain

Answer is Policydefinitions and DC1.

I'm wondering between (2, 2) and (2, 4). While we can technically create the PolicyDefinitions folder on either domain controller, it's common practice to perform such changes on the domain controller holding the PDC Emulator role. The PDC Emulator is considered the primary domain controller for processing GPO updates and other important tasks. Therefore, making changes or updates on the domain controller with the PDC Emulator role could be seen as a best practice. But... in our case, we should maintain a separate PolicyDefinitions folder in the SYSVOL directory for each domain controller if they are in different domains within the forest. This approach ensures that each domain can manage its GPOs independently while allowing for the possibility of having domain-specific administrative templates. So rather (2, 4), what do you think?

To create a folder for the Central Store to manage Group Policy template files for the entire forest, you should use the following options: Name: 2. PolicyDefinitions Server: 1. DC1 Only You should name the folder "PolicyDefinitions" and create it on DC1, as DC1 in the contoso.com domain holds the schema master role, which is required to update the schema for Group Policy Central Store.

PolicyDefinitions, DC1 and DC2. See https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

Correct answer should be: PolicyDefinitions DC1 and DC2 * Policy definitions are domain-specific and are not shared between domains. Therefore Contoso and East Contoso would need to have their own set of Policies. https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store

https://learn.microsoft.com/en-us/troubleshoot/windows-client/group-policy/create-and-manage-central-store#the-central-store

To take advantage of the benefits of .admx files, you must create a Central Store in the sysvol folder on a Windows domain controller. The Central Store is a file location that is checked by the Group Policy tools by default. The Group Policy tools use all .admx files that are in the Central Store. The files that are in the Central Store are replicated to all domain controllers in the domain. We suggest keeping a repository of any ADMX/L files that you have for applications that you may want to use. For example, operating system extensions like Microsoft Desktop optimization Pack (MDOP), Microsoft Office, and also third-party applications that offer Group Policy support. To create a Central Store for .admx and .adml files, create a new folder named PolicyDefinitions in the following location (for example) on the domain controller: \\contoso.com\SYSVOL\contoso.com\policies\PolicyDefinitions