easyMultiple Choice
220-1102 Practice Question: A small business owner wants to prevent employees…
A small business owner wants to prevent employees from changing system time, installing printers, and modifying power settings on their Windows 10 workstations. They do not want to remove local admin rights entirely. Which Windows security tool should be used to apply these restrictions?
⚠ Common exam trap
A common misconception tested in this exam is that Local Users and Groups (lusrmgr.msc) can enforce granular restrictions like printer installation or power settings, when in reality it only manages group membership and cannot apply detailed policy-based controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Local Group Policy Editor (gpedit.msc)
The Local Group Policy Editor (gpedit.msc) allows administrators to configure granular security settings for users and computers without removing local admin rights. Specifically, it can enforce restrictions on system time changes (via 'Change the system time' user right), printer installation (via 'Device Installation Restrictions'), and power settings (via 'Power Management' policies) through Computer Configuration or User Configuration nodes. This tool applies these settings via Group Policy objects that are processed locally, making it the correct choice for non-domain workstations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows Defender Security Center
Why it's wrong here
Windows Defender Security Center handles antivirus, firewall, SmartScreen and device security posture, so it cannot block time changes, printer installation or power-setting edits. It is tempting because it is the central Windows security console, and it would be the correct choice if the requirement were malware protection or exploit mitigation rather than policy-based restriction of user actions.
- ✗
Local Users and Groups (lusrmgr.msc)
Why it's wrong here
Local Users and Groups manages accounts and group membership, not per-setting restrictions on system time, printer installation or power options. It is tempting because it controls who holds local admin rights, which would be the right tool if the owner wanted to change privilege assignments rather than constrain specific Control Panel and Settings actions.
- ✓
Local Group Policy Editor (gpedit.msc)
Why this is correct
Local Group Policy Editor applies computer-level restrictions to specific settings, including system time changes, printer installation and power configuration, while leaving users' local administrator membership intact. This satisfies the requirement to restrict behaviour without removing admin rights.
- ✗
Registry Editor (regedit)
Why it's wrong here
Registry Editor edits individual keys directly, providing no policy enforcement, central management or per-user scoping, so restrictions are not reliably applied or maintained. It is tempting because many Group Policy settings ultimately write registry values, but Group Policy is the supported mechanism for these workstation restrictions.
Go deeper
Related to this question
Learn chapter
MFA Types for Users
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
Key term
Windows
Windows is a family of operating systems developed by Microsoft that manages computer hardware and software, providing a graphical user interface for users to interact with their devices.
About these practice questions
Courseiva writes every 220-1202 question from scratch — 687 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 220-1202 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 220-1202 exam.