Humongous Insurance's Forest Structure

By Author: Mike Jones
Total Articles: 256
Comment this article

All domains are Windows Server 2003 domains. The forest root domain has 10 domain controllers. Five of those comptia security certification domain controllers are configured as DNS servers and two are configured as global catalog servers. The West domain has three domain controllers. Two of those domain controllers are configured as DNS servers. One of those domain controllers is configured as a global catalog server. The East domain has two Windows Server 2003 domain controllers and three Windows NT 4.0 backup domain controllers (BDCs).
The forest root domain is located in College Station, Texas. The East domain is located in Gainesville, Florida. The West domain is located in San Diego, California. There is also an Active Directory site configured for each of these locations. The site for College Station is named Main_Site. The Gainesville site is named East_Site. The San Diego site is named West Site.

You are one of several network administrators assigned to handle the forest root domain and College Station site. Your manager, Jean Trenary, has called a meeting ...
... of all network and desktop administrators. She wants to address several issues.
Given this information, answer the following questions:
1. Jean says that there are four internal auditors in the forest root sy0-201 security domain. There are two internal auditors in each of the child domains. Each set of internal auditors has been placed in a global group within each domain. These groups are named IA_Main, IA_East, and IA_West after their respective locations. Jean wants all of the members of these groups to be able to access the same resources in every domain. What is the recommended way to configure this?
2. The network administrators from the East domain want to know why the option to create a universal group is not available in their domain. What can you tell them?
3. The network administrators from the West domain want to know why everyone always recommends placing global groups into universal groups, instead of just placing the users directly into the universal groups. What should you tell them?
4. Jean approves a plan to hire assistants for each domain to create and manage user accounts. How can you give the assistants the immediate ability to help in this way without making them domain administrators?
5. Two employees have been hired to back up data, maintain the Windows Server 2003 domain controllers, and manage printers for the Main_Site. Which Builtin groups will give these 70-640 users the permissions they require to manage the domain controllers? How should you set up their accounts and group memberships?