Exam 70-744 topic 1 question 75 discussion

Actual exam question from Microsoft's 70-744

Question #: 75
Topic #: 1

Your network contains an Active Directory domain named contoso.com.
The domain contains four global groups named Group1, Group2, Group3, and Group4. A user named User1 is a member of Group3.
You have an organizational unit (OU) named OU1 that contains computer accounts. A Group Policy object (GPO) named GPO1 is linked to OU1. OU1 contains a computer account named Computer1.
GPO1 has the User Rights Assignment configured as shown in the following table.

You need to ensure that User1 can access the shares on Computer1. What should you do?

A. Modify the membership of Group3.
B. Modify the membership of Group2.
C. Modify the membership of Group1.
D. Modify the membership of Group4.
E. In GPO1, modify the Allow log on locally user right.

Show Suggested Answer

Suggested Answer: B 🗳️

by Kamikazekiller at Aug. 9, 2020, 2:57 p.m.

Comments

Submit Cancel

Kamikazekiller

Highly Voted 4 years, 10 months ago

Correct

upvoted 5 times

...

Beitran

Most Recent 4 years, 5 months ago

I'm very confused: "A user named User1 is a member of Group3." So what does that have to do with Group2?

upvoted 1 times

BruceVolcanoShark

4 years, 5 months ago

User1 needs to be added to Group2 because he is only in Group3. In the GPO, the User Rights Assignments list Group2 as being allowed to access the computer form the network (ie shares). It does not list Group3, therefor the user either needs to be in Group2 or Group3 needs to be added to the GPO, but that is not an option.

upvoted 4 times

...

SamsOtro

4 years, 6 months ago

Correct

upvoted 4 times

...