220-1102 Question 83
Single answerMicrosoft Management Console (MMC) snap-inA technician supports several Windows 10 Pro PCs in a small office. One department manager needs a simplified administrative tool that opens only Device Manager and Disk Management on her local PC, and the technician wants to prevent her from modifying the console layout accidentally. Which action should the technician take to meet this requirement most effectively?
- A
Open mmc.exe, add the Device Manager and Disk Management snap-ins for the local computer, then save the console in User mode - limited access, single window
- B
Open Computer Management and ask the manager to use it because it already includes Device Manager and Disk Management in one interface
- C
Open gpedit.msc and enable a policy that hides all MMC snap-ins except Device Manager and Disk Management
- D
Create a shortcut directly to devmgmt.msc and diskmgmt.msc and place both shortcuts on the manager's desktop
Show answer and explanation
Correct answer: A
Explanation
The best solution is to create a custom Microsoft Management Console by running mmc.exe, adding the needed snap-ins, and saving the result as an .msc file. MMC is specifically designed to host administrative snap-ins and allows administrators to customize which tools appear. Saving the console in a restricted user mode is a standard best practice when you want to provide limited access to a predefined set of tools without allowing users to redesign the console. Microsoft documents that MMC consoles can be authored in author mode and then saved in user modes to limit customization. In this scenario, a custom MMC is more appropriate than using the broader Computer Management console or placing separate shortcuts on the desktop.
- A. Correct.
Correct. MMC allows a technician to build a custom console by launching mmc.exe and adding only the required snap-ins. Device Manager and Disk Management can both be added for the local computer, and the console can then be saved as an .msc file. Saving it in User mode - limited access, single window helps prevent the manager from changing the console structure while still allowing access to the included tools. This is the most direct way to provide a restricted, task-specific administrative console.
- B. Incorrect.
Incorrect. Computer Management does contain both Device Manager and Disk Management, but it also exposes many additional administrative tools, such as Event Viewer, Shared Folders, Local Users and Groups, and Services. That does not meet the requirement to provide a simplified console limited to only the two needed tools, nor does it specifically protect the console layout from modification in the same controlled way as a saved custom MMC console.
- C. Incorrect.
Incorrect. Group Policy can control some MMC behavior and can restrict access to certain management tools, but this option does not best satisfy the stated requirement. The goal is to create a simplified tool for one manager, not to broadly configure system policy for MMC snap-ins. Also, relying on policy alone does not create a custom two-snap-in console with a controlled layout as effectively as building and saving a custom .msc file.
- D. Incorrect.
Incorrect. Separate shortcuts would let the manager open each tool individually, but they would not create a single simplified console or prevent accidental changes to an MMC layout. This approach also fails the requirement to provide one administrative tool containing only those two snap-ins.