What should you do first?

Your network contains an Active Directory forest that contains three domains.

A group named Group1 is configured as a domain local distribution group in the forest root domain.

You plan to grant Group1 read-only access to a shared folder named Share1.Share1 is located in a child domain.

You need to ensure that the members of Group1 can access Share1.

What should you do first?
A . Convert Group1 to a universal security group.
B . Convert Group1 to a global distribution group.
C . Convert Group1 to a universal distribution group.
D . Convert Group1 to a domain local security group.

View Answer

Answer: A

Explanation:

Universal can be used for any domain or forest. Furthermore a Universal group can span multiple domains, even the entire forest.

References:

Exam Ref 70-410: Installing and Configuring Windows Server 2012 R2: Chapter 5: Install and Administer Active Directory, Objective 5.3 Create and manage Active Directory groups and Organization units, p. 289-291, 293

http://technet.microsoft.com/en-us/library/cc781446(v=ws.10).aspx

http://technet.microsoft.com/en-us/library/cc755692(v=ws.10).aspx