Group Policy Operations Clinic
Predict policy scope, troubleshoot RSoP evidence, and resolve three fictional Northstar Services tickets. The goal is to establish why a GPO applied—or was denied—before changing production settings.
Understand the policy engine.
Explain each concept in your own words before revealing the answer. You can revisit any card.
GPC versus GPT
What would you explain to another technician?
Trace effective policy. Defend the decision.
Each question has one best choice given the evidence. Incorrect answers include an explanation, so you can try again.
Which two components make up a domain GPO?
Your Northstar ticket queue.
These are targeted Group Policy Practice cases, not full Labs. Investigate filtering, loopback processing and client extensions before proposing a scoped change.
Finance PCs ignore their screen-lock policy
FIN-WS-07 still locks after fifteen minutes, despite a new five-minute timeout GPO linked to Finance Workstations. The change owner expects a limited pilot.
- FIN-WS-07 is in the intended Finance Workstations OU.
- GPMC shows the Finance policy linked and enabled.
- A gpresult report lists Finance Screen Lock as denied due to security filtering.
Identify the effective policy
Which read-only check best explains why the policy is not taking effect?
