Exam MD-100 All Questions

View all questions & answers for the MD-100 exam

Exam MD-100 topic 3 question 25 discussion

Actual exam question from Microsoft's MD-100

Question #: 25
Topic #: 3

HOTSPOT -
You have a workgroup computer named Computer1 that runs Windows 10. Computer1 has the users accounts shown in the following table:

Computer1 has the local Group Policy shown in the following table.

You create the Local Computer\Administrators policy shown in the following table.

You create the Local Computer\Non-Administrators policy shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-vista/cc766291(v=ws.10)

by tonytones at March 17, 2021, 4:11 p.m.

Comments

Submit Cancel

mx677

Highly Voted 4 years, 4 months ago

Yes,No,Yes To summarize, Windows applies Local Group Policy objects first, then the Administrators or Non-Administrators Local Group Policy objects, and finally the user-specific Local Group Policy objects.

upvoted 23 times

adeshtall

3 years, 7 months ago

So you mean all policy run at same times or if 1 policy run the the others want run .

upvoted 2 times

...

flabezerra

2 years, 11 months ago

If you follow reads on the information from the link added this question and follow up the scenarios examples made from Microsoft in that article you will conclude that Windows continues to use the "Last Writer Wins" method for conflict resolution. So the answer given to this question is correct. People get wrong of interpretation with second and third statements of this question. So Yes, No, No.

upvoted 2 times

flabezerra

2 years, 10 months ago

Here some lights: 1 - Create a file.txt > Rename it LogonNonAdministrator.vbs *Inside this file you'll type: Msgbox "This is a Non Administrator" 2 - After creating a snap-in Local Computer Policy\Non-Administrators Policy, navegate to User Configuration/Windows Settings/Scripts (Logon/Logoff) 3- Choose logon and save that vbs script out there. Signs in with a User from only the Users group. Switch the message box as you move the User to only the Administrators group. (This is not the full answer) (Here comes more of that later in this post)

upvoted 1 times

flabezerra

2 years, 10 months ago

1 - Duplicate the VBS file three times 2 - Edit the file and the Msgbox to identify each group 3 - Put a copy of each one in the LGPO/AdminGPO/NonAdminGPO I don't think you will need to use any other script for shutdowns or logoffs to get your answers. One good observation: User2 will get the message of AdminGPO and LGPO, but won't get the NonAdminGPO. And this answers the second statement. This one question got me wrong. So the tru final answer is YES NO YES.

upvoted 1 times

flabezerra

2 years, 10 months ago

The processing order is this (Last writer wins) Local Group Policy, Administrator and Non-Administrators Group Policy, and user specific Local Group Policy. And after testing for your self, the results you'll conclude is that between Admin and Non-Admin, Admin takes precedence of the conflict.

upvoted 1 times

...

AVP_Riga

Highly Voted 4 years, 4 months ago

YES, NO, YES. 1. True. 2. User can't be member of both groups from permission point of view. Administrators group wins. 3. I agree with YES, because user is a member of Non-Administrators group. 3.

upvoted 16 times

...

Henry78

Most Recent 3 years ago

The processing order and layer of multiple local GPOs in workgroup: local admin or non-admin user-specific Answer: yes no no If user1 shuts down, script A2 will run If user2 signs in, scripts A3 and B1 will run If user3 signs out, scripts A4 and C2 will run

upvoted 1 times

boscos

3 years ago

So by your answer, it would be yes no yes. The 3rd answer says "scripts ScriptC2 and ScriptA4 will run"

upvoted 2 times

Henry78

2 years, 11 months ago

Correct. I thought the order would be a problem.

upvoted 1 times

...

raduM

3 years, 1 month ago

just tested this now it is yes no yes.

upvoted 1 times

...

Tommo

3 years, 5 months ago

AVP is correct. YES, NO, YES. 1. True. 2. User can't be member of both groups from permission point of view. Administrators group wins. 3. I agree with YES, because user is a member of Non-Administrators group.

upvoted 1 times

...

adeshtall

3 years, 7 months ago

It depends on how did he log in , as admin or non admin or may be he have both password and he is having new machine taking both password. Im confussed.com

upvoted 2 times

99redeyeflight

3 years, 4 months ago

thats not how it works, there is only one SID for an account. if an account is part of user group and admin group, they get admin rights on logon every time unless removed from that admin group

upvoted 2 times

...

adeshtall

3 years, 7 months ago

Is user2 sign is as an administrative or as local user .? that will determine which script will be run if im not wroung.

upvoted 1 times

...

mikl

3 years, 10 months ago

I would go for YES, NO, YES. Since user2 is member of the Administrator group - ScriptC1 wont run.

upvoted 3 times

...

CARIOCA

3 years, 11 months ago

Is the final answer correct or not?

upvoted 1 times

...

luciaalvesnog

3 years, 11 months ago

Alguém poderia confirmar a resposta YES NO YES? Can anyone confirmed the answer YES NO YES?

upvoted 2 times

...

CARIOCA

4 years ago

Essa questão ficou muito dividida no gabarito, afinal qual seria a resposta e qual a justificativa? Após um debate de 10 comentários, o gabarito é o mesmo ou não?

upvoted 1 times

...

lauroramos

4 years, 1 month ago

I think the second statement is NO because it' will run ScriptB1 OR ScriptC1, not both, those are same level/layer policies. Now, the third statement, except i'm getting caught by running order, it is YES. Can someone confirm?

upvoted 1 times

lauroramos

4 years, 1 month ago

Yeah, i would go for YES, NO and NO just because the policy apply order.

upvoted 2 times

...

jorlloen

4 years, 3 months ago

For me Yes,yes,yes, you can configure and apply multiple logon/logoff/startup/shutdown scripts on multiple GPOs, and the scripts are executed in order the GPO ara applied. I've configured something like this in a production environment.

upvoted 4 times

Hisandy

4 years, 3 months ago

My answer is Yes, Yes, Yes too.

upvoted 2 times

mikl

3 years, 10 months ago

wrong. User is both member of users and administrators - and therefore non administrator user script wont run.

upvoted 2 times

...

JJJJJJames123

4 years, 2 months ago

The question says it is non-administrator policy to run scriptC1. User 2 is an Administrator so it won't be run.

upvoted 2 times

...

configmike

4 years, 4 months ago

Yes, no, yes. Both the non-admin and computer shut down scripts will run.

upvoted 3 times

...

Cisco

4 years, 4 months ago

Can someone explain why this is? I thought first one was Yes, but not sure of other two especially if a user is both admin and user? Does Admin or user apply? And last one I thought seemed a simple yes, computer logoff script runs and so does User one but apparently not.

upvoted 2 times

badguytoo

4 years, 4 months ago

The processing order for MLGPO are: Local Group Policy > Admin & Non-Admin > User specific.

upvoted 4 times

...