Exam MD-101 topic 3 question 45 discussion

Actual exam question from Microsoft's MD-101

Question #: 45
Topic #: 3

You have a hybrid deployment of Azure Active Directory (Azure AD) that contains 50 Windows 10 devices. All the devices are enrolled in Microsoft Endpoint
Manager.
You discover that Group Policy settings override the settings configured in Microsoft Endpoint Manager policies.
You need to ensure that the settings configured in Microsoft Endpoint Manager override the Group Policy settings.
What should you do?

A. From the Microsoft Endpoint Manager admin center, create an Administrative Templates device profile
B. From Group Policy Management Editor, configure the Computer Configuration settings in the Default Domain Policy
C. From the Microsoft Endpoint Manager admin center, create a custom device profile
D. From Group Policy Management Editor, configure the User Configuration settings in the Default Domain Policy

Show Suggested Answer

Suggested Answer: C 🗳️
Creating the policy -
Let's create a new policy in Intune to control the GP vs. MDM winner
1. Navigate to portal.azure.com and locate Intune
2. Select ג€Device configuration ֳ Profiles ֳ Create profileג€
3. Under Platform select Windows 10 and later
4. Under Profile type select ג€customג€ and ג€addג€
5. Name the custom setting with something intuitive
6. For OMA-URI add the policy OMA-URI string: ./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP
7. For Data type select Integer and add the number
Note: The following describes which policy wins according to Windows 10 version.
Windows 10 versions 1709 and earlier Group Policy will override MDM policies, even if an identical policy is configured in MDM.
Windows 10 version 1803 and beyond there is a new Policy CSP (configuration service provider) setting called ControlPolicyConflict that includes the policy of
MDMWinsOverGP, where the preference of which policy wins can be controlled, i.e. Microsoft Intune MDM policy.
Note 2: the ControlPolicyConflict policy allows the IT admin to control which policy will be used whenever both the MDM policy and its equivalent Group Policy
(GP) are set on the device.
Reference:
https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-csp-controlpolicyconflict https://uem4all.com/2018/04/02/windows-10-group-policy-vs-intune-mdm-policy-who-wins/

by PersoDaniels at June 30, 2021, 11:02 p.m.

Comments

Submit Cancel

PersoDaniels

Highly Voted 3 years, 10 months ago

C. is correct. https://docs.microsoft.com/en-us/archive/blogs/cbernier/windows-10-group-policy-vs-intune-mdm-policy-who-wins

upvoted 14 times

...

moobdoob

Highly Voted 3 years, 3 months ago

C. Navigate to portal.azure.com and locate Intune Select “Device configuration à Profiles à Create profile” Under Platform select Windows 10 and later Under Profile type select “custom” and “add” Name the custom setting with something intuitive For OMA-URI add the policy OMA-URI string: ./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP For Data type select Integer and add the number 1

upvoted 5 times

...

NeilSays

Most Recent 1 year, 3 months ago

there is now a specific setting sin device configuration profile Settings catalogue for MDM wins over gpo's

upvoted 1 times

...

Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 3 question 45 discussion

Comments

PersoDaniels

moobdoob

NeilSays

SY0-701