DRAG DROP
Your network contains two Active Directory forests named adatum.com and contoso.com.
Both forests contain multiple domains. A two-way trust exists between the forests.
The contoso.com domain contains a domain local security group named Group1. Group1
contains Contoso\user1 and adatum\user1.
You need to ensure that Group1 can only contain users from the contoso.com domain.
Which three actions should you perform?
To answer, move three actions from the list of actions to the answer area and arrange them
in the correct order.
Answer: See the explanation
Explanation:
1) Remove adatumuser1 from Group1
2) Convert Group1 to a universal group
3) Convert Group1 to a global group
How can “Domain Local security group” contains user from other Domain?
0
0
About Domain Local Security Groups:
”
POSSIBLE MEMBERS
– Accounts from any domain or any trusted domain
– Global groups from any domain or any trusted domain
– Universal groups from any domain in the same forest
– Other Domain Local groups from the same domain
– Accounts, Global groups, and Universal groups from other forests and from external domains
“
0
0
Domain Local Group can contain users or groups from any domain in forest, but can only be used to assign permissions within it´s own domain…. see Domain Groups Scopes https://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx
0
0
And reason for this is – domain local can only be converted to Universal, which can have members from any domain or forest – therefore it needs to be converted to global which can only contain members from it´s own domain.
2
0
great input vietnam. i didnt see it but it makes perfect sense now
0
0