ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MD-102 All Questions

View all questions & answers for the MD-102 exam
Go to Exam

Exam MD-102 topic 1 question 92 discussion

Actual exam question from Microsoft's MD-102
Question #: 92
Topic #: 1
[All MD-102 Questions]

You have a hybrid deployment of Azure AD that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Intune.

You discover that Group Policy settings override the settings configured in Microsoft Intune policies.

You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings.

What should you do?

  • A. From Group Policy Management Editor, configure the Computer Configuration settings in the Default Domain Policy.
  • B. From the Microsoft Intune admin center, create a custom device profile.
  • C. From the Microsoft Intune admin center, create an Administrative Templates device profile.
  • D. From Group Policy Management Editor, configure the User Configuration settings in the Default Domain Policy.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by picho707 at Sept. 18, 2023, 8:15 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ExamKiller020
Highly Voted 1 year, 9 months ago
Selected Answer: B
Given answer is correct. REF: https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict#mdmwinsovergp
upvoted 11 times
yoha1558
1 year, 8 months ago
tested in intune !
upvoted 1 times
smart008
1 year, 4 months ago
Have you checked Administrative templates? If you are unable to find override group policy settings feature in administrative template, then you can choose custom.
upvoted 1 times
...
...
...
VirtualJP
Highly Voted 1 year, 9 months ago
Selected Answer: C
Here's why: Administrative Templates device profiles in Microsoft Intune allow you to configure a wide range of settings, similar to Group Policy settings. When applied, these profiles can take precedence over Group Policy settings on enrolled devices.
upvoted 8 times
conartistique
1 year, 8 months ago
That's it, you can look it up in Intune > Device Configuration Profiles > Administrative Templates > Turn off Local Group Policy Objects processing.
upvoted 2 times
...
MR_Eliot
1 year, 4 months ago
B is correct: This policy setting prevents Local Group Policy Objects (Local GPOs) from being applied. By default, the policy settings in Local GPOs are applied before any domain-based GPO policy settings. These policy settings can apply to both users and the local computer. You can disable the processing and application of all Local GPOs to ensure that only domain-based GPOs are applied. If you enable this policy setting, the system does not process and apply any Local GPOs. If you disable or do not configure this policy setting, Local GPOs continue to be applied. Note: For computers joined to a domain, it is strongly recommended that you only configure this policy setting in domain-based GPOs. This policy setting will be ignored on computers that are joined to a workgroup. Setting type: Device
upvoted 2 times
...
...
Besxp
Most Recent 2 weeks, 5 days ago
Selected Answer: B
🔑 Why? You must configure the MDMWinsOverGP setting (via Settings Catalog or custom OMA-URI) to let Intune take priority over Group Policy. Administrative Templates (Option C) can’t configure this setting. GPO settings (Options A & D) only reinforce Group Policy, not fix the conflict.
upvoted 1 times
...
Knight_Of_Peace
4 months ago
Selected Answer: B
Intune --> Devices --> Configuration --> Create New Policy --> Windows 10- and later --> Setting catalog --> Create --> Add settings --> search for (Control Policy Conflict) --> Tick (MDM Wins Over GP) --> Select (The MDM policy is used and the GP policy us blocked).
upvoted 2 times
...
sorinaccio
4 months, 2 weeks ago
Selected Answer: C
C. From the Microsoft Intune admin center, create an Administrative Templates device profile. Administrative Templates device profiles in Microsoft Intune allow you to configure a wide range of settings, similar to Group Policy settings. When applied, these profiles can take precedence over Group Policy settings on enrolled devices.
upvoted 1 times
...
Seek12
6 months, 2 weeks ago
Selected Answer: A
GPO: Computer Configuration > Administrative Templates > Windows Components > MDM > "MDM Policy Refresh" > "Enable MDM Wins Over GPO"
upvoted 1 times
...
yhano
7 months, 3 weeks ago
As of now there is available in settings catalogue already, but since not in the option then I would go on the custom. B.
upvoted 2 times
59c6be3_111
7 months ago
Agreed, just checked. It's not in the Administrative Templates, but it is available in the settings catalogue.
upvoted 1 times
...
...
1655b71
8 months ago
C Therefore, creating an Administrative Templates device profile in Intune is the best option to attempt to override conflicting Group Policy settings with Intune policies.
upvoted 2 times
...
Cezt
11 months, 2 weeks ago
currently found in settings catalog
upvoted 1 times
...
oopspruu
11 months, 3 weeks ago
Selected Answer: B
The option where MDM wins over GP is not found in Settings Catalogue > Administrative Templates but instead in Settings Catalogue > Control Policy Conflict. So in the given options, B is the correct answer.
upvoted 3 times
...
Prasis
12 months ago
To ensure that the settings configured in Microsoft Intune override the Group Policy settings, you should create a custom device profile from the Microsoft Intune admin center (Option B). In this custom device profile, you need to define a custom policy named ControlPolicyConflict/MDMWinsOverGP
upvoted 1 times
...
CJL324
1 year, 1 month ago
C. From the Microsoft Intune admin center, create an Administrative Templates device profile. Functionality: Administrative Templates in Intune are similar to Group Policy settings and allow you to manage settings on Windows 10 devices through Intune. Overrides Group Policy: By configuring these settings in Intune, you can ensure they take precedence over local Group Policy settings The other options do not override GPOs
upvoted 1 times
...
MR_Eliot
1 year, 4 months ago
Selected Answer: B
B is correct.
upvoted 2 times
MR_Eliot
1 year, 4 months ago
https://www.anoopcnair.com/mdm-wins-over-gpo-group-policy-intune-policy/
upvoted 1 times
...
...
Darkfire
1 year, 4 months ago
Selected Answer: B
B is correct Sign in to the Microsoft Endpoint Manager admin center (Endpoint.Microsoft.coom) Select Devices -> Windows -> Configuration profiles > Create profile. In Create Profile, You can select Platform: Windows 10 and later and Profile: Select Settings catalog (preview). Click on Create button. In Configuration Settings, select Add settings and use the following search keyword “MDM Wins Over GP.” You need to choose the MDM Wins Over GP policy from the list. https://www.anoopcnair.com/mdm-wins-over-gpo-group-policy-intune-policy/#:~:text=Option%20%231%20(New%20Method)%20%E2%80%93%20Intune%20Settings%20Catalog%20%7C%20Create%20MDM%20Wins%20Over%20GPO%20Policy
upvoted 2 times
...
smart008
1 year, 4 months ago
Selected Answer: C
In my viewpoint, custom profile can do more than just over-ride GPO settings. However, our first priority will be using the built-in features which you can already find in Administrative templates and even you can then see the stats such as which GPOs were implemented, which were not or which made conflict. I would say custom profiles should be used if we can't find the settings we require all in one place or is not available in the built-in options.
upvoted 1 times
...
Merrybob
1 year, 5 months ago
Selected Answer: B
B. From the Microsoft Intune admin center, create a custom device profile. Ref: https://www.anoopcnair.com/mdm-wins-over-gpo-group-policy-intune-policy/#:~:text=Option%20%231%20(New%20Method)%20%E2%80%93%20Intune%20Settings%20Catalog%20%7C%20Create%20MDM%20Wins%20Over%20GPO%20Policy
upvoted 1 times
...
BJS78
1 year, 6 months ago
The key is the wording here: "You need to ensure that the settings configured in Microsoft Intune override the Group Policy settings." This means GPO setting MUST be applied but when it conflicts with Intune, Intune should prevail. Option "C" can "Turn off Local Group Policy Objects processing." which stops ALL GPO to be processed, so this NOT what the scenario describes here. (mdmwinsovergp can be set via Settings Catalog as well btw)
upvoted 4 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel