Testlet 7 Litware, Inc.
Question 5 of 6
You need to recommend a group scope for the dedicated auditing user accounts that meets the company’s security requirements.
Which group scope should you recommend?
A. Domain local
B. Global
C. Local
D. Universal
Correct Answer: D
Explanation/Reference:
The best way to assign permission is AGUDLP (Accounts, Global, Universal, Domain Local, Permissions).
-Add the User Accounts to Global Groups > Global Groups to Universal Groups >Universal Groups to Domain Local Groups & assign permission on Domain Local Groups.
See:
http://social.technet.microsoft.com/Forums/eu/winserverDS/thread/b8fbb7d4-4057-4bbf-9a47-c01f6265bd2c
http://support.microsoft.com/kb/884417
Universal groups Groups that are used to grant permissions on a wide scale throughout a domain tree or forest. Members of global groups include accounts and groups from any domain in the domain tree or forest.
A universal group is a security or distribution group that contains users, groups, and computers from any domain in its forest as members. You can give universal security groups rights and permissions on resources in any domain in the forest. Universal groups are not supported.
