Question

You manage user accounts in the southsim.com domain. Each department is represented by an Organizational Unit (ou). Computer and user accounts for each department have been moved to their respective OUs.

You want to control access to a new color printer named ColorMagic. To do this, you create the following groups:
* A domain local group named ColorMagic-DL
* A global group named Sales-GG

You want all users in the sales department to have access to the new printer.

What should you do?

Answer 1

To give the sales department access to the ColorMagic printer, add the Sales-GG to the ColorMagic-DL and set the appropriate 'Print' permissions for the ColorMagic-DL on the printer.

Step-by-step explanation:

To allow users in the sales department access to the new color printer named ColorMagic, you should add the Sales-GG (global group) to the ColorMagic-DL (domain local group). This is because in Active Directory, permissions are assigned to resources through Domain Local Groups, while Global Groups are used to organize users based on their department or role. Thus, by adding the Sales-GG to the ColorMagic-DL, you are effectively giving all members of the Sales-GG access to the ColorMagic printer. It's essential to make sure all sales department user accounts are members of the Sales-GG for this to work.

After adding the Sales-GG to the ColorMagic-DL, you will then need to set the appropriate permissions on the printer for the ColorMagic-DL group. Typically, you would grant the 'Print' permission for the group to be able to use the printer.