Exam MD-100 topic 3 question 19 discussion

Answer is Correct : Local Group Policy, navigate to User Configuration > Administrative Templates > System. Under System, on the right pane, find out and double click Don’t run specified Windows applications to modify its Properties. Then in Don’t run specified Windows applications window, tick the option Not Configured. And then hit Apply and OK to save changes.

Azure AD is just there to make you confused.

正解はBです。 Dは間違っています。このPCはActive Directoryに登録されていないため、GPOは利用できません。

Maybe being silly, but what is the difference between group policy preference and a local group policy ?

Is the final answer correct or is it D?

This one is ingrained now

Answer B. is correct https://www.thewindowsclub.com/restrict-access-to-control-panel

The answer is right but the explanation false. You can prohibit the access to control panel with local group policy : Navigate to the User Configuration > Administrative Templates > Control Panel option from the left sidebar. Next, double-click the “Prohibit access to Control Panel and PC settings” If you test it you will have the same error message when you launch control.exe

Answer D is correct. For "Don't run specific Windows application" the following is stated... This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs, such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.