What should you use?

Your network contains an Active Directory domain named contoso.com. The domain contains more than 100 Group Policy objects (GPOs). Currently, there are no enforced GPOs.

The domain contains a top-level organizational unit (OU) for each department. A group named Group1 contains members from each department.

You have a GPO named GPO1 that is linked to the domain.

You need to configure GPO1 to apply settings to Group1 only.

What should you use?
A . Dcgpofix
B . Get-GPOReport
C . Gpfixup
D . Gpresult
E . Gpedit.msc
F . Import-GPO
G . Restore-GPO
H . Set-GPInheritance
. Set-GPLink
. Set-GPPermission
. Gpupdate
. Add-ADGroupMember

View Answer

Answer: J

Explanation:

Set-GPPermission grants a level of permissions to a security principal (user, security group, or computer) for one GPO or all the GPOs in a domain. You use the TargetName and TargetType parameters to specify a user, security group, or computer for which to set the permission level.

-Replace <SwitchParameter>

Specifies that the existing permission level for the group or user is removed before the new permission level is set. If a security principal is already granted a permission level that is higher than the specified permission level and you do not use the Replace parameter, no change is made.

Reference: http://technet.microsoft.com/en-us/library/ee461038.aspx