Exam MD-100 topic 2 question 52 discussion

Actual exam question from Microsoft's MD-100

Question #: 52
Topic #: 2

You have a Windows 10 device named Device1 that contains the users shown in the following table.

Device1 contains the local Group Policy Objects (GPOs) shown in the following exhibit.

You need to configure Device1 to meet the following requirements:

• Deny User1 the right to sign in locally.
• Ensure that a logon script runs only when User2 signs in to Device1.
• Ensure that no login scripts run when User1 or Admin1 sign in to Device1.

Which two policies should you modify? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Local Computer\User1 Policy
B. Local Computer Policy
C. Local Computer\User2 Policy
D. Local Computer\Non-Administrators Policy
E. Local Computer\Admin1 Policy
F. Local Computer\Administrators Policy

Show Suggested Answer

Suggested Answer: BC 🗳️

by flabezerra at Jan. 10, 2023, 1:38 a.m.

Comments

Submit Cancel

Dnyc

2 years, 4 months ago

https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn789197(v=ws.11) for precedence of user targeted LGPO Seems like either the question or the answer set is off. The only 100% correct answer I can see is C. A user2 only logon script means a targeted lgpo, the rest would apply to others too (see link above) Denying the local logon right to User1 can be done in local computer policy, and you can also check the logon scripts there to make sure there are no scripts for User1 and Administrator. But. If you put scripts into the user targeted LGPOs for either user1 or administrator, then requirement three fails because user targeted lgpo applies last, so scripts in there would run. Maybe they meant for us to name three? Not sure.

upvoted 1 times

...

Amphithere

2 years, 4 months ago

Selected Answer: BC

B and C

upvoted 3 times

...

flabezerra

2 years, 5 months ago

Selected Answer: B

One thing I know for sure, you will find Deny log on locally is only available through Local Computer policy. At least a point will be done :) So B and C ? Help the community if you know something!

upvoted 2 times

flabezerra

2 years, 5 months ago

There are questions with the statement: “Each correct answer presents a complete solution”. So it's likely there are other settings to be made and you can't think of the answers as a setting or end result.

upvoted 1 times

...

Harv717

2 years, 5 months ago

B for the 1rd and 3rd requirements. C for the 2nd requirement.

upvoted 2 times

...