Skip to main content

AD Group scopes

Windows Server supports group scoping. The scope of a group determines both the range of a group’s abilities or permissions and the group membership. There are four group scopes.
Теґи

AZ-800 / Q8 / MS

Теґи

Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains the following resources:

  • User1: A user in a domain named us.contoso.com
  • User2: A user in a domain named europe.contoso.com
  • Server1: A computer in the us.contoso.com domain
  • Server2: A computer in the europe.contoso.com domain

You need to ensure that User1 and User2 can access file shares on Server1 and Server2. The solution must minimize administrative effort.

Which type of group should you create?

AZ-800 / Q34 / T1

Теґи

Your network contains two Active Directory Domain Services (AD DS) forests named contoso.com and fabrikam.com. Contoso.com contains three child domains named amer.contoso.com, apac.contoso.com, and emea.contoso.com. Fabrikam.com contains a child domain named apac.fabrikam.com. A bidirectional forest trust exists between contoso.com and fabrikam.com.

You need to provide users in the contoso.com forest with access to the resources in the fabrikam.com forest. The solution must meet the following requirements:

AZ-800 / Q23 / T1

Your network contains an Active Directory forest. The forest contains two domains named contoso.com and east.contoso.com and the servers shown in the following table.



Contoso.com contains a user named User1.

You add User1 to the built-in Backup Operators group in contoso.com.

Which servers can User1 back up?