CompTIA A+ Core 2 (220-1202)SecurityMedium
A company policy requires that all employee workstations automatically lock after 10 minutes of inactivity. This setting needs to be applied consistently across hundreds of Windows 11 Pro machines in the domain. Which administrative tool is the MOST efficient way to enforce this policy?
- ARegistry Editor
- BLocal Security Policy
- CTask Scheduler
- DGroup Policy
Show answer & explanationAnswer & explanation
Correct answer: D. Group Policy
Group Policy is designed for centrally managing and configuring operating systems, applications, and users' settings in an Active Directory environment, making it the most efficient way to apply consistent policies across many domain-joined machines.
Why the other options are wrong
- A. Registry Editor allows direct modification of system settings but is not scalable for centralized management across many devices.
- B. Local Security Policy applies settings only to the individual machine it's configured on, not hundreds of machines centrally.
- C. Task Scheduler can automate tasks but is not a central policy enforcement tool for system settings across a domain.
Group Policy
A feature of Microsoft Windows Active Directory that controls the working environment of user accounts and computer accounts. Group Policy provides centralized management and configuration of operating systems, applications, and users' settings.
- Used for centralized management in Active Directory domains.
- Enforces security settings, software installations, and user configurations.
- Policies are applied to Organizational Units (OUs), domains, or sites.
Memory trick: Group Policy manages groups, local policy manages locally.