Practice: Planning New Group Accounts
In this practice, you plan the groups that are required for a business scenario.
You are an administrator for the customer service division of a manufacturing com-pany. You administer a domain that is part of your company’s domain tree. You do not administer other domains, but you might have to give selected user accounts from other domains access to resources in your domain. Users at the company use several shared network resources. The company is also planning to implement an e-mail pro-gram that uses Active Directory.
As the administrator, you must determine
Which groups are needed.
The membership of each group. This can be user accounts or other groups.
The type and scope for each group.
Use the procedure provided earlier in this lesson to plan your global and domain local group strategy. Record your planning strategy on the Group Accounts Planning Worksheet provided on n10-004 exam. Follow these instructions to complete the worksheet:
1. On the worksheet, provide a name for each group. Record each name in the group name column.Which of the following statements about group scope membership are incorrect? (Choose all that apply.)
a.In domains with a domain functional level set to Windows 2000 mixed, global groups can contain user accounts and computer accounts from the same domain.
b.In domains with a domain functional level set to Windows 2000 mixed, global groups can contain user accounts and computer accounts from any domain.
c.In domains with a domain functional level set to Windows 2000 mixed,domain local groups can contain user accounts, computer accounts, and glo-
bal groups from the same domain.
d.In domains with a domain functional level set to Windows 2000 mixed,domain local groups can contain user accounts, computer accounts, and global groups from any domain.
e.In domains with a domain functional level set to Windows 2000 mixed, universal groups can contain user accounts, computer accounts, global groups,
and other universal groups from any domain.
f.In domains with a domain functional level set to Windows 2000 mixed, universal groups do not exist.
Use the following strategy for planning groups: place user accounts into global groups, create a domain local groups for a group of resources to be shared in common, place the global groups into the domain comptia security local group, and then assign permissions to the domain local group.