4 Groups

Question 0

What usages of groups there are?

Answer 0

For the role-based management there are:
Role groups
Rule groups

Question 1

What is a shadow group?

Answer 1

A group that contains, as members, the users in an OU.

Question 2

What does the role group do?

Answer 2

These groups contain users, computers, and other role groups based on common business characteristics such as location and job type.

Question 3

What does rule groups do?

Answer 3

These groups, referred to as rule groups, define how an enterprise resource is managed.

Question 4

List all the types of group scopes.

Answer 4

Local
Domain Local
Universal
Global

Question 5

Describe the properties of Local groups.

Answer 5

It is restricted only to the local machine.
Can include any security principals from the domain. Users, computers, global and universal groups from any domain in the forest. Users, computers and global groups from any trusted domain.

Question 6

Describe the properties of Domain Local groups.

Answer 6

Replicated to every DC in the forest.
Can include any security principals from the domain. Users, computers, global and universal groups from any domain in the forest. Users, computers and global groups from any trusted domain.
Can be added to ACLs on any resource on any domain member. Can be a member of other domain local groups or even local groups.

Question 7

Describe the properties of Global groups.

Answer 7

Replicated to every DC in the forest.
Can include only users, computers, and global groups from the same domain.
Can be a member of any domain local or universal group in the domain or the forest. Can also be in any domain local group in a trusting domain. Can be added to ACLs in the domain, in the forest, or in trusting domains.

Question 8

Describe the properties of Universal groups.

Answer 8

Replicated in GC across the forest.
Can include users, global groups, and other universal groups from any domain in the forest.
Can be a member of a universal group or domain local group anywhere in the forest. Can be used for permission assignments.

Question 9

What are the default groups in AD domain?

Answer 9

Enterprise Admins
Schema Admins
Administrators
Domain Admins
Server Operators
Account Operators
Backup Operators
Print Operators

Question 10

What are the special identities in AD domain?

Answer 10

Anonymous Logon
Authenticated Users
Interactive
Network