Administering Windows Server Hybrid Core Infrastructure (AZ-800) Practice

What is the outcome of using the Default Domain GPO?

1. It only applies to computer accounts

2. It affects the entire domain and is enforced

3. It can only be applied to specific OUs

4. It has a lower precedence than local GPOs

The correct answer is: It affects the entire domain and is enforced

Using the Default Domain Group Policy Object (GPO) significantly affects the entire domain and is a critical component of Active Directory management. When applied, this policy enforces settings across all organizational units within the domain unless explicitly overridden by another GPO that has higher precedence. This GPO is set at the domain level, meaning its policies will automatically apply to all users and computers that reside within that domain. It's important for administrators to use it to enforce consistent security settings, application configurations, and user environment policies across the domain. The enforceability of the Default Domain GPO is significant, as it underscores the centralized management capabilities inherent in Active Directory. While it is possible for more granular GPOs (linked to specific organizational units) to override those set at the domain level, the Default Domain GPO will still maintain its intended influence unless explicitly configured otherwise. In this context, the other options do not accurately reflect the characteristics of the Default Domain GPO. It is not limited to only computer accounts, cannot be restricted to specific organizational units alone, and has a higher precedence than local GPOs, as local GPOs apply at the individual computer level before domain GPOs.