Answering the following questions will reinforce key information presented in this chapter. If you are unable to answer a question, review the appropriate lesson and then try the question again. Answers to the questions can be found in the appendix.
- Your organization is trying to determine whether to implement universal groups or global groups for the purpose of combining user accounts with identical security requirements. What factors will cause you to choose global groups over universal groups?
- The newly hired network administrator is testing the ability to convert group types in Active Directory Users And Computers. A group named Payroll is currently defined as a universal group. When testing conversion, the network administrator found she can convert the group to a domain local group, but she is unable to convert the group to a global group. What might be the reason?
- Eva Corets, a summer intern in the Information Technology (IT) department at company.tld has found that she is unable to log on locally at the servers in the marketing department. Figure 5.11 shows the current OU structure for the organization.
Figure 5.11 Active Directory structure for company.tld
To allow herself to log on locally, Eva has edited the local policy at each of the marketing servers to grant her account the user right to log on locally. But she's still unable to log on at the console of any servers in the marketing department. What has Eva done wrong? What must she do to allow her account to log on locally at the Marketing member servers?
- To assist with the deployment of Windows 2000 Professional, an outside contractor has been assigned an account on the local network. To allow the contractor to install new Windows 2000 Professional computers and make them members of the domain company.tld, you've assigned the contractor's account the user right of Add Workstations To A Domain. After the first few days, the contractor suddenly loses the ability to make the newly installed Windows 2000 Professional computers members of the company.tld domain. What must you do to allow the contractor to continue adding computers to the domain?