Exam AZ-800 topic 1 question 24 discussion

A GPO linked to the AADDC Users OU has no effect on the local user accounts. You need to link the GPO to the AADDC Computers OU. 1. AAD DC Administrators group 2. AADDC Computers organizational unit (OU)

Correct, We need to create a Group Policy Object (GPO) in the Azure Active Directory Domain Services (Azure AD DS) domain, configure the GPO's password policy, and link the GPO to the organizational unit (OU) that contains the domain's computer accounts. To administer group policy in a managed domain, you must be signed in to a user account that's a member of the AAD DC Administrators group. There are two built-in Group Policy Objects (GPOs) in a managed domain - one for the AADDC Computers OU, and one for the AADDC Users OU. You can customize these GPOs to configure group policy as needed within your managed domain. By default, the AADDC Computers OU contains all the computer accounts of the member computers.

Answer: 1. AAD DC Administrators group 2. AADDC Computers Group (OU) 1. In Azure AD DS, this group has the necessary permissions to manage Azure AD DS configurations including password policies. 2. In Azure AD DS, domain-joined computers are automatically placed in the AADDC Computers OU, not the default Computers container. Group Policy Objects should be linked to this OU to affect all domain-joined Azure VMs. Reference: https://learn.microsoft.com/en-us/azure/active-directory-domain-services/password-policy

I would think it is the computer GPO as it says local user accounts, not user accounts in aaddc. Only the computer GPO can change the settings for local user accounts

valid 27.11.23

Correct answers: 1. AAD DC Administrators group -> You need this permission to be able to login on the Azure AD domain controller 2. AADDC Computers organizational unit (OU) -> Password policy, is a computer policy, not a user policy. so this one is right answer.

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy Answer is correct

Correct