Server Admin I Unit 8.7 Restricted Groups

Question 1

Two ways Restricted Groups can be defined.

Answer 1

1. Members of this group:

2. This group is a member of:

Question 2

“Members of this group:” Rules (3)

Answer 2

1. Identifies individual members of a restricted group.
2. Any user who is currently a member of the group but there name is not on the list is removed from group membership.
3. Any user on the list who is not currently a member of the restricted group automatically becomes a member

Question 3

“This Group is a Member of:” Rules (3)

Answer 3

1. Defines one or more groups the restricted group becomes a member of.
2. Use this option to define membership in a local group by adding a restricted group.
3. This is the preferred method of defining membership in a restricted group.

Question 4

Once an administrator has designated group membership with a Restricted Group Policy, who can add or remove members?

Answer 4

Noone, once the group has been designated no changes can be made. Any changes made will revert during GP refresh.

Question 5

Once a GPO with restricted groups is linked to the domain, what systems will it affect?

Answer 5

All systems in the domain including domain controllers and Active Directory security groups.