Microsoft 70-411 Exam – Q82

Your network contains an Active Directory domain named contoso.com. The domain contains a file server named Server1. The File Server Resource Manager role service is installed on Server1. All servers run Windows Server 2012 R2. A Group Policy object (GPO) named GPO1 is linked to the organizational unit (OU) that contains Server1.

The settings in GPO1 are configured as shown in the exhibit.
82a

Server1 contains a folder named Folder1. Folder1 is shared as Share1. You attempt to configure access-denied assistance on Server1, but the Enable access-denied assistance option cannot be selected from File Server
Resource Manager. You need to ensure that you can configure access- denied assistance on Server1 manually by using File Server Resource Manager.

What should you do?

A. Set the Customize message for Access Denied errors policy setting to Enabled for GPO1
B. Set the Enable access-denied assistance on client for all file types policy setting to Enabled for GPO1
C. Set the Customize message for Access Denied errors policy setting to Not Configured for GPO1
D. Set the Enable access-denied assistance on client for all file types policy setting to Disabled for GPO1

Correct Answer: C

Explanation:
You can configure access-denied assistance within a domain by using Group Policy, or you can configure the assistance individually on each file server by using the File Server Resource Manager console. You can also change the access-denied message for a specific shared folder on a file server.

https://technet.microsoft.com/en-us/library/hh831402.aspx

Within Group Policy, if the Customize message for Access Denied errors setting is set to the Enabled state, then the setting will be managed by Group Policy only. If the setting state is Disabled, it will be non-functional. However, if the setting state is set as Not configured, then it will be a configuration option available to be configured using the File Server Resource Manager console.