Exam 70-742 All Questions

View all questions & answers for the 70-742 exam

Exam 70-742 topic 1 question 30 discussion

Actual exam question from Microsoft's 70-742

Question #: 30
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2016. The computer account for Server1 is in organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1 and link GPO1 to OU1.
You need to add a domain user named User1 to the local Administrators group on Server1.
Solution: From the Computer Configuration node of GPO1, you configure the Local Users and Groups preference.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: A 🗳️
to add uses to the Local Administrator built In group on all the computers using Group Policy, open group policy editor and create or edit existing GPO. Go to User
Configuration -> Preferences -> Control Panel Settings -> Local users and groups.
References:
https://www.ntweekly.com/2015/01/10/how-to-add-users-to-local-admin-group-using-group-policy-windows-server-2012/

by paprda at Aug. 5, 2019, 6:58 p.m.

Comments

Submit Cancel

MrRiver

Highly Voted 5 years, 8 months ago

Guy's the Explation is wrong becaue it says User config. But the Answer states: computer configuration. In the Computer configuration -> preference -> control panel -> loal users and group -> you can add users to local group I have tested this and it works ... so Answers is correct

upvoted 15 times

lbs

5 years, 2 months ago

I agree. The answer is correct.

upvoted 2 times

lbs

5 years ago

There is a typo in the answer given. It should be to add uses to the Local Administrator built In group on all the computers using Group Policy, open group policy editor and create or edit existing GPO. Go to COMPUTER CONFIGURATION -> Preferences -> Control Panel Settings -> Local users and groups.

upvoted 1 times

lbs

5 years ago

Based on Microsoft doc, it can be USER CONFIGURATION-> Preferences -> Control Panel Settings -> Local users and groups as well. https://technet.microsoft.com/en-us/library/cc731972.aspx https://technet.microsoft.com/en-us/library/cc732525.aspx

upvoted 1 times

...

coleman

Highly Voted 5 years, 6 months ago

right ,A.yes is the correct answer https://technet.microsoft.com/en-us/library/cc731972.aspx https://technet.microsoft.com/en-us/library/cc732525.aspx Local Group preference items allow you to centrally create, delete, and rename local groups. Also, you can use these preference items to change local group memberships. Update Rename or modify settings, including group membership, of an existing group. This action differs from Replace in that it updates the settings defined within the preference item. All other settings remain as they were previously configured. If the local group does not exist, then the Update action creates a new local group.

upvoted 6 times

...

LovMi21

Most Recent 4 years, 5 months ago

This explains it better... http://woshub.com/add-domain-users-local-admin-group-gpo/

upvoted 1 times

...

lofzee

4 years, 5 months ago

couldnt get it to work in my lab for some reason but ill go with the majority here. Yes.

upvoted 1 times

...

NickTim

4 years, 7 months ago

"Set-AdComputer" only modify a computer object. "Local User and Groups" Preference is part of "User Configuration" and is not used for that. "Account Policies settings" is used for account policy. I don't see the correct answer here that should be something like: From the Computer Configuration node of GPO1, you configure the "Restricted Groups". (This policy let you add several users to a specific group)

upvoted 1 times

NickTim

4 years, 7 months ago

Sorry, my bad. this is also correct. tested in lab. A. From the Computer Configuration node of GPO1, you configure the Local Users and Groups preference.

upvoted 2 times

...

promaster

4 years, 10 months ago

For a single domain user, it seems more correct to use the "User configuration >"

upvoted 1 times

...

HaroldY

4 years, 10 months ago

Definitely right

upvoted 1 times

...

Kamikazekiller

4 years, 11 months ago

Answer is: A. YES This is a trick question.

upvoted 1 times

...

Nhan

5 years, 4 months ago

The solution is from the computer configuration and the given explanation is from the user configuration, basically, the right answer is B which is NO

upvoted 1 times

...

Nhan

5 years, 4 months ago

The answer is NO, the answer explanation and the answer is not relevant

upvoted 1 times

...

panda

5 years, 6 months ago

I agree with coleman that A.yes is the correct answer. I read the link he proposed. It says that to create a new Local Group preference item in the console tree under Computer Configuration or User Configuration....... So, it could be possible to do other operation such as adding new member.

upvoted 2 times

...

christovski

5 years, 7 months ago

I have labbed this and although this is a convoluted way of doing it, instead of using restricted groups, it works. Given answer is correct

upvoted 1 times

...

dan

5 years, 8 months ago

this solution and answer do not match the explanation - computer configuration would require restricted groups as part of the solution, user config can be done as explained. So the answer is NO!!!! based several peoples input and this link pointing out about computer config - preferences etc: https://richardstk.com/2013/11/26/adding-domain-users-to-the-local-administrators-group-using-group-policy/

upvoted 2 times

...

nomsboms

5 years, 8 months ago

I just added a user to: User Configuration -> Preferences -> Control Panel Settings -> Local users and groups --> and this User applied to my Local Administrators on my other Machine. Tested it in Computer Configuration and my User didnt apply. so i prefer NO

upvoted 2 times

...

Spud1993

5 years, 8 months ago

Please ignore my last comment this one is actually correct. https://www.windows-server-2012-r2.com/group-policy-objects-and-group-policy-preferences-under-windows-server-2012-r2.html

upvoted 2 times

...

Spud1993

5 years, 8 months ago

I dont think this is correct and answer should be B as to add someone to local admin group in the computer configuration section of GPO you do so in restricted accounts not local users and groups. this would work if it stated you went into user configuration

upvoted 2 times

...

dan

5 years, 8 months ago

the answer does not math the explanation - answer point to computer configuration and explanation point to user configuration - so answer is NO

upvoted 5 times

...

Load full discussion...