StudyByteLearn
← AZ-802: Administering Windows Server
AZ-802 · Hybrid server management · Hybrid server management | Configure remote management for Windows Server instances in a hybrid environment

Practice question 68 of 506 · medium

A user belongs to Remote Desktop Users and is included in an allow-logon policy. A security GPO also assigns that user’s group Deny log on through Remote Desktop Services. What is the expected outcome?

Choose the single best answer.

  1. A.RDP logon succeeds after increasing the RDS licensing grace period
  2. B.RDP logon succeeds if DNS resolves the server name
  3. C.RDP logon succeeds because the local group always overrides domain policy
  4. D.RDP logon is denied because the deny right takes precedence
Show the answer and explanation

✓ Correct answer

  • RDP logon is denied because the deny right takes precedence

The deny remote-logon right overrides an allow right. Group membership and name resolution do not remove that restriction. RDS licensing grace does not override security user-rights assignments. Review effective policy and the intended group scope.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.