0
This the answer straight from the book:
Domain local groups in a Windows Server 2003 mixed or interim domain are limited
to the domain controller on which they reside. This is very similar to the way local
groups on a member server are limited to the computers on which they reside.
Unless the domain functional level is raised to Windows 2000 native or Windows
Server 2003, the domain local groups cannot be used for permission assignment
on any servers in the domain other than the domain controllers.
What else can I help you with?
When can a domain local group be converted to a universal group?
Always, because it has no restrictions when the domain functional level is •Windows 2000 native or Windows Server 2003: You can convert universal groups to domain local groups or to global groups
Who arranges windows directories?
domain administrator is responsible for arranging, managing, modifying, deletion of directories in domain/windows server in domain. The local administrator or any user who is member of administrator group can do it also on the local windows system.
Which of the following objects can be added to a domain local group when a domain is configured to the Windows Server 2003 mixed domain functional level?
Users.
What backup type can be initiated by a member of the local Administrators group or a member of the local Backup Operators group on a Windows Server 2008 computer?
Manual Backup
What is the different between local user and domain User?
local users account on local PC. he don't have to log another PC in the network. about domain domain is a logical group of network, all users are create in domain on the server that's y user can log-in in domain any where. u can set policies for user on server not a particular PC.
What is domain administrator?
The domain admin account members are allowed administrative privileges for the entire domain. By default, the group has the local Administrator account on the Domain Controller as its member. A built-in group . After the first time installation of the OS, the only member of the group is the Administrator account. When a computer joins a domain, the Domain Admins group is added to the Administrators group. When a server becomes a domain controller, the Enterprise Admins group also is added to the Administrators group. The Administrators group has built-in capabilities that give its members full control over the system. The group is the default owner of any object that is created by a member of the group.
Which group scope modifications in server 2003 are not permitted?
global to universal,universal of global, global to domain local
What is a group scope and what are the different types of group scopes?
Group scopes determine where in the Active Directory forest a group is accessible and what objects can be placed into the group. Windows Server 2003 includes three group scopes: global, domain local, and universal.
Which group conversion is allowed domain local to universal global to local domain to global universal to global?
Global to universal. This conversion is allowed only if the group that you want to change is not a member of another global scope group.Domain local to universal. This conversion is allowed only if the group that you want to change does not have another domain local group as a member.Universal to global. This conversion is allowed only if the group that you want to change does not have another universal group as a member.Universal to domain local. There are no restrictions for this operation.Manu
What group scopes contain global groups as a member in a domain configured to the Windows 2000 mixed functional level?
domain local groups
What do you do to join the computer to a domain in Windows Server 2003 environment?
The process of actually joining a computer to a domain must occur at the computer itself and be performed by a member of the computer's local Administrators group. After logging on, you join a computer running Windows Server 2003 to a domain from the Computer Name tab in the System Properties dialog box (which is accessible from the System icon in Control Panel).
Difference between a Local Group Policy and a Domain Group Policy?
Microsoft recommends that access control to computer resources be administered by using groups. In this way, many users that have similar needs for resources can be dropped into a group that has the correct permissions already configured instead of individually modifying each user account. Group permissions to access resources are configured using group policy. A policy usually addresses one very specific aspect of a system's configuration. There are many policies that can be configured for a group to control system access and behavior. Local group policy addresses only users who are physically logging into one particular machine such as the server itself or a stand alone operating system. To log into a machine locally, a user must create a unique ID/Password pair that authenticates the local user to the local physical system. Once authenticated to the local physical machine, group policy according to which local group the user is assigned is initiated. Domain authentication as well as domain group policy is maintained centrally by the server for the domain. Even if a user has configured a local ID/Password pair for their local physical computer, a different and unique ID/Password pair is created to log onto the domain. When a domain user is created, they also must be assigned to a domain group. Once the server for the domain authenticates the domain user, the policy for the domain group the user belongs to is initiated. These policies are centrally administered by the domain administrator instead of each computer in the domain being configured separately for each user. Domain group policy can be configured to control access and behavior for any resource on the entire domain including resources on client computers. Local group policy can only control what is on the local machine at which a user is sitting. Finally, domain group policy supersedes any local group policy.
