The functional level of the domain is Windows 2000 native and the network servers run either the Windows 2000 Server or the Windows Server 2003. All Accounting department users are members of an existing global distribution group named Acc-1. You create a new network share for the accounting users to enable the members of Acc-1 to access the file share. What of the following should you do?
A)Raise the functional level of the domain to Windows Server 2003.
B)Change the group scope of Acc-1 to universal.
C)Change the group type of Acc-1 to security.
D)Raise the functional level of the forest to Windows Server 2003.

Question

Quizplus · Accepted Answer

To enable the members of Acc-1 to access the file share, you should change the group type of Acc-1 to security.
Key Takeaway: Distribution groups cannot be listed in a DACL model, as they are not security enabled. If any group needs a controlled access, the group should be raised to any group above distribution type, preferably security type. If the domain functional level is set to Windows 2000 native or higher, a group can be converted from a security group to a distribution group and vice versa.

The Functional Level of the Domain Is Windows 2000 Native