am curious as to what answers people would give to this Q and WHY?:
you are admin of abc.com domain which is divided into various OU’s called abc1 and abc2. abc1 and abc2 are split into more OU’s an example being xyz1 under abc1. as the admin you config. default domain policy and then delegate control of abc1 &abc2 OU’s to local admins. you want to prevent them from modifying any GPO settings you have made. how do u do this?
a)set no override at abc.com level
b)set no override at abc1 and abc2 levels
from the way Q is worded, i would go for (a)- who agrees??
