Question

Which of the following is allowed by Windows Server running as Domain Controller when changing or converting Group Scopes? This is assuming group nesting between domains is not configured. [Choose two that apply].

A. Global group to Local group
B. Global to Universal
C. Universal to Domain local
D. Domain local to Global

Answer 1

In Windows Server acting as a Domain Controller, you can change a Global group to a Universal group, and a Universal group to a Domain local group. Direct conversion of Global group to a Local group or Domain local to Global are not allowed.

Step-by-step explanation:

Within Windows Server acting as Domain Controller, certain changes in group scope are permissible provided that group nesting isn't configured between domains. Specifically, you can perform the following conversions:

• Global to Universal: A Global group can be changed to a Universal group if it does not contain other Global groups from other domains.
• Universal to Domain Local: A Universal group can be converted to a Domain local group assuming it is not nested within another Universal group from another domain.

Regarding the other options, a Global group cannot be directly converted to a Local group, and a Domain local group cannot be directly converted to a Global group because these transformations do not adhere to the scope and nesting rules operational within a Windows Server environment.