Identity with Windows Server 2016 — Question 3

Your network contains an Active Directory domain named contoso.com. The domain contains a user named User1 and an organizational unit (OU) named OU1.
You create a Group Policy object (GPO) named GPO1.
You need to ensure that User1 can link GPO1 to OU1.
What should you do?

Answer options

• A. Modify the security settings of User1.
• B. Add User1 to the Group Policy Creator Owner group.
• C. Modify the security settings of OU1.
• D. Modify the security settings of GPO1.

Correct answer: C

Explanation

The correct answer is C because modifying the security settings of OU1 allows User1 the necessary permissions to link GPO1 to that organizational unit. Options A and B are incorrect as they do not grant the required permissions for linking GPOs to OUs. Option D does not address the permissions needed for OU1 specifically.