Case Study Questions

1.  

During the initial rollout of Active Directory, while Windows NT 4 backup domain controllers exist, which of the group nesting options will be available for use? (Choose all that apply.)

1. AGLP

2. AGDLP

3. AGUDLP

4. AGGUDLP

2.  

Which of the following group name structures would work best according to the information you have gathered?

1. Atl-DL-SalesPrinter-Print, Atl-G-Sales

2. DL-Atl-SalesPrinter-Print, G-Atl-Sales

3. DL-SalesPrinter-Print-Atl, G-Sales-Atl

4. SalesPrinter-Print-DL-Atl, Sales-G-Atl

3.  

Bill is trying to determine the most efficient method for adding membership to groups in order to grant access to a printer. He needs to design access while the domain is still in mixed mode. He has created the following groups. The users from the Maintenance department will need to print to the printer that is connected to their domain controller. Put the groups in order so that you have defined which accounts are added as members of the groups required to grant access. Place the group that is added to the other at the top of the list. All of the options might not be used.

Groups	Groups
	L-Print1-Print
	DL-Print1-Print
	G-Maintenance
	U-Maintenance

4.  

When designing resource access, you should have a plan in place for when the domain is moved into Windows Server 2003 functional level. At that point, which of the following nesting options for security groups will be available for use? (Choose all that apply.)

1. AGLP

2. AGDLP

3. AGUDLP

4. AGGUDLP

5.  

After a domain has been changed to the Windows Server 2003 functional level, which of the following group names could be used and would be appropriate for use by Insane Systems? (Choose all that apply.)

1. DL-Chi-SalesPrinter-Print

2. U-HRUsers

3. Chi-G-TechSupport

4. AcctPay-U

Answers

1.	A, B. While Windows NT 4 backup domain controllers exist, the domain functional level will be at the Windows 2000 Mixed mode or Windows 2003 interim mode domain functional level. At those levels, nesting of Global security groups and Universal security groups is not available.
2.	B. According to the interview with the Manager of Information Technology, the naming strategy they would like to employ utilizes the group type ”Domain Local, Global, and so on ”as the first part of the name, then the location where the group is utilized, and then the purpose of the group.
3.	Groups G-Maintenance DL-Print1-Print In mixed mode, the only nesting for security groups that is available involves making a Global security group a member of a Domain Local or Local security group. To ease administration, you would use a Domain Local group instead of a Local group because the printer is located on the domain controller.
4.	A, B, C, D. Once all of the Windows NT 4 and Windows 2000 domain controllers are removed, you can place the domain in Windows Server 2003 functional level, which will allow for all of the nesting options. Global security groups can become members of other Global security groups, and Universal security groups are available.
5.	A, B. Once the domain is in Windows Server 2003 functional level, the Universal security groups can be used. According to the naming convention that was specified by the Manager of Information Technology, the only two options that meet the convention are DL-Chi-SalesPrinter-Print and U-HRUsers.