Administering Windows Server 2012 — Question 18

Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2.
Server1 has the Remote Desktop Session Host role service installed. The computer account of Server1 resides in an organizational unit (OU) named OU1.
You create and link a Group Policy object (GPO) named GPO1 to OU1.
You need to prevent GPO1 from applying to your user account when you log on to Server1. GPO1 must apply to every other user who logs on to Server1.
What should you configure?

Answer options

• A. Security Filtering.
• B. WMI Filtering.
• C. Block Inheritance.
• D. Item-level targeting.

Correct answer: D

Explanation

The correct answer is D, Item-level targeting, which allows you to specify conditions under which a policy will apply, effectively excluding your user account from GPO1. The other options, such as Security Filtering (A) and WMI Filtering (B), do not provide the necessary granularity for excluding specific users, while Block Inheritance (C) would prevent all GPOs from applying, not just GPO1.