Review

The following questions are intended to reinforce key information presented in the chapter. If you are unable to answer a question, review the appropriate lesson and then try the question again. Answers to the questions can be found in Appendix A,"Questions and Answers."

1. Your design team is getting ready to define OU structures for your organization's Active Directory infrastructure design. What are the three reasons for defining an OU? What is the primary reason?
   
   
   
2. Your design team has defined an OU to delegate control of user objects. You have diagrammed the desired OU, diagrammed a security group, and listed the administrators who require control of the user object class in the group. You want to allow the OU to set its own membership. Where should the administrator group be placed?
   
   
   
3. Your design team has defined a forest, domains, and OUs. Where should user accounts be placed?
   
   
   
4. Your design team is assigning users to groups. Which group scope is most often used to assign permissions to resources?
   
   
   
5. Your organization is running Windows 2000 in native mode. The design team is adding users to groups. Why shouldn't the team add individual users to universal groups?
   
   
   

Answers