Your network contains an Active Directory domain named contoso.com. The domain contains a computer named Computer1 that runs Windows 10.
You have the groups shown in the following table.
Which groups can you add to Group4?
Exam MD-102 All QuestionsBrowse all questions from this exam
Question 35
Correct Answer: A
Since Group4 is a local group on Computer1, it has limitations on which groups can be added to it. Local groups on a computer cannot contain other local groups or universal distribution groups. Thus, Group1 (Universal Distribution Group) and Group3 (another local group) cannot be added to Group4. The only feasible option left is Group2, which is a global security group from the domain. Therefore, the correct answer is that only Group2 can be added to Group4.
Discussion
picho707Option: A
The correct answer is A. Group 4 is a local group therefore Universal Distribution Groups cannot be nested. Group 4 is a local group therefore other local Groups cannot be nested.
Temptset
This is correct!
OyYaGotta
It's not actually.
OyYaGotta
That's not right at all. Global Administrators have permission control of local Groups and Universal Distribution Groups distribute all sorts of GPO's to local machines, even across domains. It's possible but not necessary, to nest a GA in a local Group. GA has permissions to all forested Groups in the Domain.
voltoOption: C
Answer D is wrong. Unable to add local security group, universal distribution group. Just another local computer group or domain security group. The correct answer is C.
picho707
The correct answer is "C". A universal distribution group cannot be added to a local group however a security group can be nested to a local group.
picho707
I am withdrawing this answer after further research.
MR_EliotOption: A
A is correct. I have tested this in my lab.
BigStan82Option: A
Answer A. You cannot add a local computer group to another local computer group. You cannot add a universal distribution group to a local computer group. Universal distribution groups are designed for email distribution and are not security enabled. The only way to add universal distribution group is to convert it to universal security group and then you can add it to local computer group
Jt909Option: A
Correct Answer is A - Lab-tested. Only Domain Security groups (universal, global and domain local ) can be addedd. Any kind of Domain Distribution groups(Uni/Glob/Dloc) is not selectable by the picker. Computer1 local group cannot be added. Confusion is probably due to Domain Local grups and Computer Local groups...
CJL324Option: A
A Group3 is a local group specific to Computer1. Local groups can contain users, global groups, and other local groups from the same computer. However, they cannot be added to groups from other domains or computers. Since Group4 is also a local group on Computer1, it cannot contain Group3 because local groups cannot be nested within each other. Therefore, Group3 cannot be added to Group4.
zeos_ucokOption: D
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc755692(v=ws.10)?redirectedfrom=MSDN Group 4 is domain local group which can include any groups
DarkfireOption: A
A seems right https://learn.microsoft.com/en-us/windows/win32/ad/nesting-in-native-mode https://learn.microsoft.com/en-us/windows/win32/ad/group-objects https://ss64.com/nt/syntax-groups.html#:~:text=Nesting%20one%20Group%20within%20another%20with%20a%20different%20scope
Anonymouse1312Option: A
local groups CANNOT be nested
KrayzrOption: A
A. Group2 only
belyoOption: D
Answer is correct the local groups can contain: Universal and global groups from the forest that contains the domain that the computer is a member. Domain local groups from that computer domain. Users from any domain in the forest. the vice versa is not possible - you cant add domain local to universal / global
flcOption: A
I just tried in a lab environment to create two groups (Security Group and Universal Distribution) on a domain and two other local groups (group3 and group4) on the Win10 device that is joined to the domain. I attempted to add group3 and the 'Universal Distribution' group to group4, but it wouldn't allow me to do so. Then I tried adding the 'Security Group', and it was successfully added to group4 without any issues. Therefore, I can confirm with 100% certainty that the correct answer is 'A: Group2 only.'
VLAGOption: D
Given answer D is correct. Based on following link https://learn.microsoft.com/en-us/windows/win32/ad/nesting-in-native-mode#:~:text=A%20domain%20local%20group,other%20domain%20or%20forest "A domain local group can contain universal groups, global groups and accounts from any domain or forest. A domain local group can also contain other domain local groups from the same domain that the group belongs to. A domain local group cannot contain other domain local groups from any other domain or forest." So, a Domain Local Group (Group4 in question) can nest: 1. other Domain Local Group from the same domain (Group3 is from the same Location: Computer1) 2. Global Security Groups (Group2) 3. Universal distribution Groups (Group1) Any helpful comment is welcome.
Maclouis116
Distribution groups cannot be added to computer groups
SoftengOption: C
You can't nest Universal Distribution Group into a local group.
Maclouis116
You also cannot nest local groups so answer is A
NoursBearOption: B
It looks like it's group 1 and 2, I didn't think so till I found this great table https://ss64.com/nt/syntax-groups.html#:~:text=Universal%20groups%20can%20be%20nested,Global%20or%20a%20Universal%20group. A universal group can go into a local computer group
NoursBear
scrap that too. Didn’t see it was Universal Dist Group thought it was just universal group which could have been added
onepunchkenshinOption: C
ChatGPT will tell you that C is the correct answer. The question doesn't tell that Group3 and Group4 are the local groups.
NoursBear
But it does tell you that these groups are local computer groups, since the location is computer 1
Amir1909Option: A
A is correct