Live Virtual Machine Lab 3-2: Implement Group Nesting

Which of the following methods are acceptable when it comes to implementing a group nesting strategy in a corporate network spanning more than one Active Directory domain?

A-G-U-DL-P A-G-DL-P

Group nesting is enabled between parent-child domain PRACTICELABS and NAMERICA. A domain user SalesUser1 from the NAMERICA child domain is a member of GSales Security group. GSales was unintentionally changed to a Distribution group. When SalesUser1 signed-in after a short break, he is unable to connect to the shared resource from the PRACTICELABS domain. GSales was changed back to being a Security group type. However, SalesUser1 is still unable to access the shared resource. What can you do to resolve this issue?

Ask SalesUser1 to sign out and sign back in.

A visiting domain user called Lisa from a child domain called EMEA-CORP wants to test if she can access a shared resource in the parent domain called PRACTICELABS. At the moment, she does not have her company-issued Windows 10 laptop. Group nesting strategy has been successfully setup between the two domains indicated. Which of the following actions can you do to help visiting domain user so she can access the shared network resource, while in the premises of the PRACTICELABS domain?

Ask the PRACTICELABS administrator to lend her a domain workstation so she can sign-in to the EMEA-CORP domain and subsequently connect to the shared resource.

True or False. You can convert a Security group type to Distribution group type without any effect on the permissions given to the group when it comes to accessing a network resource.

False

Which of the following is allowed by Windows Server running as Domain Controller when changing or converting Group Scopes? This is assuming group nesting between domains is not configured.

Universal to Domain local Global to Universal