Your network contains an Active Directory forest that contains three domains. A group named
Group1 is configured as a domain local distribution group in the forest root domain. You plan to
grant Group1 read-only access to a shared folder named Share1. Share1 is located in a child domain.
You need to ensure that the members of Group1 can access Share1.
What should you do first?
A.
Convert Group1 to a global distribution group.
B.
Convert Group1 to a universal security group.
C.
Convert Group1 to a universal distribution group.
D.
Convert Group1 to a domain local security group
May be D.
I can convert domain local group security group.
Why B&
Converting Group1 to a domain local security group means that the group can only be assigned permissions for shares in its own domain. Since Share1 is in a child domain, the best answer is to create a universal security group. Universal groups can contain users and groups from any domain in the tree/forest, and they can be given permissions in any domain in the tree/forest.