Local Policy vs Domain Policy

I am doing some research on the MCP 70-270 exam and I am running into a
delima. Several questions relating to Local Policy and Domain Policy
don't seem to add up. Here is one of the questions:

You administer a Windows domain. Your company's sales representatives
travel frequently and need access to their files offline. You are
required to secure the offline copies of these files on the sales
representatives laptop computers with minimal effort.

Which of the following actions should you perform?

A. Configure strict NTFS permission on the shared folder residing on
the Domain.--Wrong--

B. Place all sales representatives in an OU, implement a GPO that will
encrypt the Offline Files cache, and link the GPO to the OU

C. On each sales representative's laptop computer, delete the Offline
Files cache.--Wrong--

D. On each sales representative's laptop computer, configure a local
policy to encrypt the Offline files cache.


The problem I am having is that a GPO applied to the OU on the domain
is the easiest method but the answers are coming up that going to each
laptop and configuring a local policy is the correct answer. I know
that even when you are not connected to the Domain, the Domain GPO is
still being used on the local computer. We have received several
questions where the Domain policy should be used but the local policy
is the answer. They all seem to be related to EFS and Offline files
and folders. Is there some fact or rule we are missing?

Thanks in advance
mediaradams




--
mediaradams

"mediaradams" <mediaradams.2gk7hm DeleteThis @pcbanter.net> wrote in message
news:mediaradams.2gk7hm@pcbanter.net...
>
> I am doing some research on the MCP 70-270 exam and I am running into a
> delima. Several questions relating to Local Policy and Domain Policy
> don't seem to add up. Here is one of the questions:
>
> You administer a Windows domain. Your company's sales representatives
> travel frequently and need access to their files offline. You are
> required to secure the offline copies of these files on the sales
> representatives laptop computers with minimal effort.
>
> Which of the following actions should you perform?
>
> A. Configure strict NTFS permission on the shared folder residing on
> the Domain.--Wrong--
>
> B. Place all sales representatives in an OU, implement a GPO that will
> encrypt the Offline Files cache, and link the GPO to the OU
>


The policy that controls that is only under Computer
Configuration\Administrative Templates\Network\Offline Files - a
computer-based setting. Option B talks about applying it to users, not
computers.



--
Colin Nash
Microsoft MVP
Windows Shell/User