Exam AZ-800 topic 1 question 6 discussion

Actual exam question from Microsoft's AZ-800

Question #: 6
Topic #: 1

HOTSPOT -
You have an Azure Active Directory Domain Services (Azure AD DS) domain.
You create a new user named Admin1.
You need Admin1 to deploy custom Group Policy settings to all the computers in the domain. The solution must use the principle of least privilege.
What should you include in the solution? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy https://docs.microsoft.com/en-us/azure/active-directory-domain-services/create-ou

by olnn at April 28, 2022, 9 a.m.

Comments

Submit Cancel

nefaxto

Highly Voted 1 year, 8 months ago

AAD DC Administrators Modifying AADDC Computers GPO https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy The GPO can be linked on UO not to the domain

upvoted 32 times

...

olnn

Highly Voted 1 year, 9 months ago

bad: 1 ok but 2 creating a new GPO

upvoted 14 times

Josty

1 year, 5 months ago

the group policy can't be linked to the domain only to a OU -> so Modifying AADDC Computers GPO is the correct one

upvoted 6 times

93831b0

1 week, 2 days ago

GPOs linked to the domain level apply to all users and computers in the entire domain. GPOs linked to an OU apply only to the users and computers within that specific OU and any of its child OUs (unless inheritance is blocked). So, yes GPOs absolutely can be linked to the domain level.

upvoted 1 times

...

stonwall12

Most Recent 7 months, 1 week ago

Asnwer: 1. AAD DC Administrators 2. Create a new GPO linked to domain 1. This is the required group for managing Group Policy in Azure AD DS. 2. While you can modify the built-in GPOs (AADDC Users and AADDC Computers), creating a custom GPO provides better management and control and is the recommended approach as per Microsoft documentation for implementing custom policies. https://learn.microsoft.com/en-us/entra/identity/domain-services/manage-group-policy

upvoted 4 times

...

tanoj

9 months, 2 weeks ago

deploy custom Group Policy settings to all the COMPUTERS in the domain. Answer : SO when you create a new gpo and link to the domain it will be applied to both users and computers. As it is required only for the computers in the domain you need to modify the existing Computers GPO which is the fit answer.

upvoted 1 times

...

syu31svc

10 months, 3 weeks ago

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy A user account that's a member of the Azure AD DC administrators group in your Azure AD tenant (Before you begin) hese built-in GPOs can be customized to configure specific group policies on your managed domain. Right-select one of the GPOs, such as AADDC Computers GPO, then choose Edit.... (Open the Group Policy Management Console and edit an object) Answer is correct

upvoted 2 times

...