294 question of the day from Preplogic

admin

hi all;
I got a question of the day from Preplogic I would like to discuss.

Alex is the network administrator for an engineering company that operates a single domain native mode Windows Server 2003 network. The company's offices occupy five contiguous floors of a midtown Manhattan office tower, and the network is configured with only the default site. Users in the Engineering division require specific drive mappings that enable them to connect to several proprietary client/server databases containing design specification and materials analysis data. The Engineering employees' user accounts are located in an OU named Engng and their computer accounts are located in an OU named EngngWork. Employees from other divisions of the business at times need to use the computers in the Engineering department, but should not have access to the databases. Also, the users in this department should be able to access the mappings only if they are logged onto a computer in their own department. Alex has written a script named Design.vbs that creates the mappings to the shares on two file servers that contain the required databases. What should Alex do to deploy the Design.vbs script to the Engineering employees with the least amount of administrative effort? Select the best answer.

A)Create a GPO that includes the Design.vbs script as a startup script, and link it to the Engng OU.
B)Create a GPO that includes the Design.vbs script as a startup script, and link it to the EngngWork OU.
C)Create a GPO that includes the Design.vbs script as a logon script, and link it to the EngngWork OU.
D)Create a GPO that includes the Design.vbs script as a logon script, and link it to the Engng OU.






Answer
C. Create a GPO that includes the Design.vbs script as a logon script, and link it to the EngngWork OU.
Explanation: Logon and logoff scripts are assigned to the users that require them and are executed when the user logs on or off, respectively. Alex can assign them by placing them in the User Configuration\Windows Settings\Scripts node in the appropriate GPO, which in this case is the GPO linked to the EngngWork OU.

My issue with this question is that the question state that "Employees from other divisions of the business at times need to use the computers in the Engineering department, but should not have access to the databases." by linking it to the EngngWork OU were the pcs accounts are located will run the script for anyone who logs to the engineering pcs. Shouldn't it not be linked to the user accounts Engng OU instead?
I think D would be the correct answer because you do not want other people from a different department login and having access to the database file.