Your network contains an Active Directory forest that contains three domains.
A group named Group1 is configured as a domain local distribution group in the forest root domain.
You plan to grant Group1 read-only access to a shared folder named Share1.Share1 is located in a
child domain.
You need to ensure that the members of Group1 can access Share1.
What should you do first?
A.
Convert Group1 to a universal security group.
B.
Convert Group1 to a global distribution group.
C.
Convert Group1 to a universal distribution group.
D.
Convert Group1 to a domain local security group.
Explanation:
Universal can be used for any domain or forest. Furthermore a Universal group can span multiple
domains, even the entire forest.
References:
Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 5: Install and
Administer Active Directory, Objective 5.3 Create and manage Active Directory groups and
Organization units, p. 289-291, 293
http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx
http://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx