Your network contains an Active Directory forest that contains three domains.
A group named Group1 is configured as a domain local distribution group in the forest root domain.
You plan to grant Group1 read-only access to a shared folder named Share1. Share1 is located in a child
domain.
You need to ensure that the members of Group1 can access Share1.
What should you do first?
A.
Convert Group1 to a global distribution group.
B.
Convert Group1 to a universal security group.
C.
Convert Group1 to a universal distribution group.
D.
Convert Group1 to a domain local security group.
Explanation:
A: Distribution Groups only used for email
B, Universal can be used for any domain or forest
C: Distribution Groups only used for email
D: Permissions can be assigned only within the samedomain as the parent domain local group
Group scope Universal can be assigned permissions in any domain or forest.
http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx http://technet.microsoft.com/en-us/library/
cc755692(v=ws.10).aspx
b
0
0
B
0
0
A distribution group is mainly for creating email DLs. For assigning permissions you always need a security group hence A
0
0
You cannot demote a Domain Local group to a Global group.
You must follow the path
Domain Local -> Universal -> Global
or
Global -> Universal -> Domain Local
Tested in lab, the correct answer is “B”.
I created a fake Domain Local Distribution group and I was able to convert it to a Universal Security Group on the first attempt. “Global” is greyed out as it doesnt follow the order of demotional operations.
0
0
From: https://technet.microsoft.com/en-us/library/dd277411.aspx
Perform one of the following:
To set special permissions for a new group or user, click Add. In Name, type the name of the user or group using the format domainname\name or select from the list. To access account names from the domain, click the Look In list box. There should now be a list that shows the current machine, the local domain, trusted domains, and other resources that can be accessed. Select the local domain to view all the account names in the domain.
Wouldn’t the answer be D?
0
0
Interesting to point to a windows 2000 article.
This might be more helpful: https://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx
a more indept article is here:
http://ss64.com/nt/syntax-groups.html
0
0
the Correct answer is is B because of two things :
1- in question is need to grant Group1 read-only access means we need to using security Group and the group distributuin can not using to securty
2- by read question careful we find the Share1 is Located in Child domain but the Group1 is in the Forst root domain , so the type of group must be universal
0
0