Your network contains two Active Directory forests named contoso.com and adatum.com. Each forest contains
one domain. Contoso.com has a two-way forest trust to adatum.com. Selective authentication is enabled on the
forest trust.
Contoso contains 10 servers that have the File Server role service installed. Users successfully access shared
folders on the file servers by using permissions granted to the Authenticated Users group.
You migrate the file servers to adatum.com.
Contoso users report that after the migration, they are unable to access shared folders on the file servers.
You need to ensure that the Contoso users can access the shared folders on the file servers.
What should you do?
A.
Disable selective authentication on the existing forest trust.
B.
Disable SID filtering on the existing forest trust.
C.
Run netdom and specify the /quarantine attribute.
D.
Replace the existing forest trust with an external trust.
Explanation:
Although it is not recommended, you can use this procedure to disable security identifier (SID) filter
quarantining for an external trust with the Netdom.exe tool. You should consider disabling SID filter quarantining
only in the following situations:
* Users have been migrated to the trusted domain with their SID histories preserved, and you want to grant
those users access to resources in the trusting domain (the former domain of the migrated users) based on the
sIDHistory attribute.
Etc.
Disabling SID filter quarantining
http://technet.microsoft.com/en-us/library/cc794713(v=ws.10).aspx
That’s a very ambiguous question to answer.
SID Filtering could be disabled with netdom:
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc794801%28v%3dws.10%29
Netdom trust /domain: /quarantine:No /userD: /passwordD:
0
1
Wrong! The answer is A.
2
2
The correct answer is A.
Disabling the SID filtering only applies to user migration, not file server migration.
The question specifically states that the users are using permissions granted to them by the authenticated users permissions, meaning that their selective authentication is set to authenticated users for the contoso.com domain.
Disabling the selective authentication on the existing forest trust grants those users access to the adatum domain without standard authentication.
https://technet.microsoft.com/en-us/library/cc755321(v=ws.10).aspx
4
0