You manage a multi-domain network,DomainA,DomainB,and DomainC. You have users from each domain that must have permission to a shared folder in DomainB. Which of the following represents the correct method of assigning these users permissions?
A) Create a Global group in DomainB and add each user to the group. Assign the Global group permission to the share.
B) Create a Local group in each domain. Add users from each domain to the respective Local groups and add the Local groups to the permissions list of the share.
C) Create a Universal group. Add the users from the domains to the Universal group and add the Universal group to the share permissions list.
D) Create a Global group in each domain.Add the users from the respective domains to the Global group. Add the Global groups to the share permissions list.

Question

Quizplus · Accepted Answer

A Universal group can be used to add users from different domains and provide them access to resources in any domain within the forest. It simplifies administration, reduces account management overheads, and provides a consistent level of access control across different domains. Therefore, creating a Universal group, adding users from all domains, and assigning permissions to the share for the Universal group is the best choice. Option A is incorrect because creating multiple Global groups will complicate administration and result in the need to modify the permissions of each group separately. Option B is incorrect because you would have to add the respective Local groups of all domains to the permissions list, which can be cumbersome to manage. Option D is incorrect because creating multiple Global groups and assigning them individually to the share could result in scalability and maintenance issues.

You Manage a Multi-Domain Network,DomainA,DomainB,and DomainC