Your network contains an Active Directory forest. The forest contains two domains named contoso.com and fabrikam.com. The functional level of the forest and the domains is Windows Server 2008 R2.
You have a global group named Group1 in the contoso.com domain. Group1 contains the user accounts in contoso.com.
You need to ensure that you can add the user accounts in the fabrikam.com domain to Group1.
What should you do?
Correct Answer: B
Explanation/Reference:
Explanation:
A domain local group can have a universal group as a member. A universal group can have users or global groups from any domain in the forest as a member.
To adhere to Microsoft best practice, we should add the Fabrikam.com users to a global group in the Fabrikam.com domain. Add the global group to a universal group. Convert Group1 to a domain local group and add the universal group to Group1.