AZ-140: Configuring and Operating Microsoft Azure Virtual DesktopDemo

By Microsoft · Question Mode

QuestionQ5

Plan and implement identity and security

You have a hybrid Azure Active Directory (Azure AD) tenant.

You plan to deploy an Azure Virtual Desktop personal host pool. The host pool will contain 15 virtual machines running Windows 10 Enterprise. The virtual machines will join the on-premises Active Directory domain and be used by members of a domain group named Department1.

You need to ensure that each user is automatically added to the local Administrators group on the virtual machine to which the user signs in.

What should you configure?

  • A a role assignment for the host pool
  • B a role assignment for each virtual machine
  • C a policy preference in a Group Policy Object (GPO)
  • D a device setting in Azure AD
Explanation

A Group Policy Object can use the Local Users and Groups preference extension to manage membership of the local Administrators group on the Active Directory domain-joined session hosts. Adding the Department1 domain group through that preference grants its members local administrator membership on the applicable virtual machines.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!