AZ-104 Exam - Question 21

Question

Your company has an Azure Active Directory (Azure AD) tenant that is configured for hybrid coexistence with the on-premises Active Directory domain.

The on-premise virtual environment consists of virtual machines (VMs) running on Windows Server 2012 R2 Hyper-V host servers.

You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs.

You need a solution that ensures the scripts are run on the new VMs.

Which of the following is the best solution?

Examice · Accepted Answer

To ensure that the PowerShell scripts are run on new VMs, the best solution is to configure a Group Policy Object (GPO) to run the scripts as startup scripts. This method runs the scripts during the system startup, which is suitable for automating configuration tasks regardless of user logins. Unlike logon scripts, startup scripts do not require an interactive user session, making them more appropriate for tasks that need to be performed on every machine startup. This approach provides better manageability and scalability for ongoing operations and simplifies the deployment of configuration scripts across multiple VMs.

NZure · Answer

Is this really on the AZ-104? It has nothing to do with Azure.

j5y · Answer

Ans: A

After Windows is installed but before the logon screen appears, Windows Setup searches for the SetupComplete.cmd file in the %WINDIR%\Setup\Scripts\ directory

https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/add-a-custom-script-to-windows-setup

ntinakos · Answer

A is correct 
https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/add-a-custom-script-to-windows-setup?view=windows-11

Ravikrsoni · Answer

C. Configure a Group Policy Object (GPO) to run the scripts as startup scripts.

Here's why:

Logon scripts: Logon scripts are executed when a user logs on. If the automation tasks should be performed in the context of a user, logon scripts might be appropriate. However, they require a user to log in, which might not be the case for certain automated tasks.

Startup scripts: Startup scripts run during the system startup, before the user logs in. This makes them suitable for tasks that need to run regardless of user logins. For automated configuration tasks on VMs, especially when there might not be an interactive user session, using startup scripts through Group Policy is often the preferred method.

Iron_Man_111 · Answer

Run a script after setup is complete (SetupComplete.cmd)
Order of operations
1. After Windows is installed but before the logon screen appears, Windows Setup searches for the SetupComplete.cmd file in the %WINDIR%\Setup\Scripts\ directory.

2. If a SetupComplete.cmd file is found, Windows Setup runs the script. Windows Setup logs the action in the C:\Windows\Panther\UnattendGC\Setupact.log file.

3. Setup does not verify any exit codes or error levels in the script after it executes SetupComplete.cmd.

4. If the computer joins a domain during installation, the Group Policy that is defined in the domain is not applied to the computer until Setupcomplete.cmd is finished. 
This is to make sure that the Group Policy configuration activity does not interfere with the script.

Reference - 
https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/add-a-custom-script-to-windows-setup?view=windows-11

pal40sg · Answer

In the context of Azure and hybrid environments, the best solution for ensuring that your PowerShell scripts are run on newly created VMs is option C: Configure a Group Policy Object (GPO) to run the scripts as startup scripts.

Here's why:

A. SetupComplete.cmd in %windir%\setup\scripts: This method is typically used for unattended installations, but it won't work for your scenario as it's mainly used during the initial setup phase of Windows.

photon99 · Answer

This question is more oriented towards Active Directory Administartion than Azure AZ 104 at all !

3c5adce · Answer

Between A & C - ChatGPT4 says C.
The option A, using a SetupComplete.cmd batch file, is primarily intended for tasks that need to be executed once after the operating system is installed or configured. While it can technically run scripts post-setup, it's less flexible and manageable compared to using Group Policy.

Option C, configuring a Group Policy Object (GPO) to run scripts as startup scripts, provides better manageability and scalability. With GPOs, you can easily update, manage, and apply scripts across multiple VMs in the domain automatically every time the machines start up, not just after initial setup. This makes it more suitable for ongoing operations and management in a hybrid environment like yours.

Didatzi · Answer

Answer A is valid. 
Answer C is also valid, if you have the VM's joined to the AD domain. 
It is better to manage VM's with GPO instead of running scripts manually on each VM. Using GPO will minimize the effort and will save time. 
I personally prefer answer C.

Here, the questions does not provide enough information to choose the correct answer between the two.

mmissaoui97 · Answer

i just passed the exam today and got 660/700 :/ unfortunetly most of the questions where long user cases with lot of tables and screenshots it take too much time to read and understand and lot of tricky sentences that distracts you ...the main subject was pub/priv dns with autoregistration from vnets.. azure bastion ... storage accounts ... NSGs/Vnet/subnets..VMSS scaling...AD roles and policies..the questions weren't hard but very long... i'm planning to repass it next week ...if anyone of you has the recent questions please send it to me : [email protected]

insanetechy · Answer

You have created some PowerShell scripts to automate the configuration of newly created VMs. You plan to create several new VMs.
You need a solution that ensures the scripts are run on the new VMs.
Which of the following is the best solution?

option A applies scripts on the new VM's first boot whereas option C applies on new VMs every boot.
 
here the keyword is "some PowerShell scripts" so that is more than one script and not one. So it might involve scripts to be applied on every boot.

Therefore the answer is C and not A.

MelKr · Answer

Group policies can be replicated to Azure AD. The question does not state where the new VMs will be created (On Prem or in Azure). So Group Policies is the only option that works for both.

76d5e04 · Answer

Many windows server administration related questions are poping up, seems unrelevant

yashsj · Answer

The question has setup a context stating use of hybrid use of Azure AD with OnPrem Active Directory Domain Controller. So option C seems to be correct option as it uses the information/context provided in the question. Option A might be correct option (although that can also be debated) has noting to do with Azure.

nospampls · Answer

https://chat.openai.com/share/c4dac4a9-0e79-4c30-bb6c-36239bc9e32e

Amir1909 · Answer

A is correct

chucklu · Answer

The second link provided in Answer does not work, should be https://azure.microsoft.com/de-de/blog/automating-vm-customization-tasks-using-custom-script-extension/

AZ-104 Exam - Question 21

Discussion