Your network contains an Active Directory forest that contains three domains.
A group named Group1 is configured as a domain local distribution group in the forest root domain.
You plan to grant Group1 read-only access to a shared folder named Share1.Share1 is located in a
child domain.
You need to ensure that the members of Group1 can access Share1.
What should you do first?
A.
Convert Group1 to a universal security group.
B.
Convert Group1 to a global distribution group.
C.
Convert Group1 to a universal distribution group.
D.
Convert Group1 to a domain local security group.
Explanation:
Universal can be used for any domain or forest. Furthermore a Universal group can span multiple
domains, even the entire forest.
References:
Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 5: Install and
Administer Active Directory, Objective 5.3 Create and manage Active Directory groups and
Organization units, p. 289-291, 293
http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx
C
0
0
WE DON’T HAVE UNIVERSAL DISTRIBUTION GROUP!!
0
0
Universal can be used for any domain or forest. Furthermore a Universal group can span multiple domains, even the entire forest.
Distribution Groups only used for email – https://technet.microsoft.com/en-us/library/cc781446%28v=ws.10%29.aspx
I go with A – Convert Group1 to a universal security group.
0
0
I go with D) convert to domain local security group, since you don’t know the member ship you cannot be certain that you can convert to universal there may exist domain local groups as members. You can always convert to security though.
0
0