Discover the essential step of creating an OU with Block Inheritance for Microsoft Teams Rooms devices before domain joining, ensuring proper Group Policy management.
Table of Contents
Question
Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. Forest and domain functional levels for contoso.com are both set to Windows Server 2012.
You have a new Teams Rooms on Windows device named Device1.
You need to join Device1 to contoso.com.
What should you do before joining Device1 to contoso.com?
Select only one answer.
A. Create an Active Directory site named devices.
B. Create an organizational unit (OU) with Block inheritance enabled and create a computer account for the device in the OU.
C. Raise the domain and forest functional levels for contoso.com to Windows Server 2016.
D. Set the Default Domain Policy Group Policy Object (GPO) to Enforced.
Answer
To properly prepare for joining a Microsoft Teams Rooms on Windows device to an Active Directory domain, you must create a dedicated Organizational Unit (OU) with Block Inheritance enabled and pre-create the computer account in this OU. This ensures the device is isolated from unintended Group Policy Object (GPO) inheritance, which could disrupt its specialized functionality.
B. Create an organizational unit (OU) with Block inheritance enabled and create a computer account for the device in the OU.
Explanation
GPOs must be blocked for Teams Rooms on Windows devices. Teams Rooms on Windows is supported for domain joins and no minimum domain/forest functionality level is required.
Why Block Inheritance?
Teams Rooms devices require specific configurations and are sensitive to standard domain policies. By creating a dedicated OU and disabling GPO inheritance, you prevent conflicting or unsupported settings from higher-level OUs (e.g., the default “Computers” container) from applying.
Pre-Creating the Computer Account
Placing the device’s computer account in the OU before domain joining ensures it inherits only the policies explicitly applied to that OU. This avoids accidental application of default domain-wide policies.
Other Options Analyzed
- A (Create an AD site): Irrelevant, as AD sites are for physical network topology, not policy isolation.
- C (Raise functional levels): Unnecessary—Windows Server 2012 functional levels already support Teams Rooms.
- D (Enforce Default Domain Policy): Counterproductive, as enforcing this GPO would override Block Inheritance, defeating its purpose.
Best Practices Highlighted in Microsoft Documentation
- Always disable GPO inheritance for Teams Rooms OUs to prevent unintended settings.
- Use a dedicated OU to streamline policy management (e.g., QoS configurations or admin rights delegation).
By following this approach, you ensure the Teams Rooms device operates reliably within your domain environment while minimizing administrative overhead.
Microsoft 365 Certified Collaboration Communications Systems Engineer Associate MS-721 certification exam assessment practice question and answer (Q&A) dump including multiple choice questions (MCQ) and objective type questions, with detail explanation and reference available free, helpful to pass the Microsoft Collaboration Communications Systems Engineer MS-721 exam and earn Microsoft 365 Certified Collaboration Communications Systems Engineer Associate certification.