Identity with Windows Server 2016 — Question 185

Your network contains an Active Directory domain. The domain contains a computer named Computer1 and an organizational unit (OU) named TestOU. TestOU contains 10 computer accounts that are used for testing. A Group Policy object (GPO) named GPO1 is linked to TestOU.
On Computer1, you modify the User Right Assignment by using the local policy.
You need to apply the User Right Assignment from Computer1 to the 10 test computers.
What should you do?

Answer options

• A. On Computer1 run the secedit.exe command and specify the /export parameter. Edit GPO1, and then import a security template.
• B. On Computer1, run the gpresult.exe command and specify the /x parameter. Edit GPO1, and then import a security template.
• C. On Computer1, run the secedit.exe command and specify the /export parameter. From Group Policy Management, run the Import Settings Wizard.
• D. On Computer1, run the gpresult.exe command and specify the /x parameter. From Group Policy Management, run the Restore Group Policy Object Wizard.

Correct answer: A

Explanation

The correct option is A because using the secedit.exe command with the /export parameter allows you to export the local security policy from Computer1, which can then be imported into GPO1. Options B and D incorrectly suggest using gpresult.exe, which is not used for modifying GPOs. Option C mentions importing settings but does not specify the correct context of GPO1, making it less suitable than option A.