Bạn cần cấu hình máy chủ DNS tại văn phòng Bắc Kinh để cho phép độ phân giải thành công của tất cả các truy vấn từ văn phòng Bắc Kinh cho các tên trong không gian tên , ngay cả khi liên kết VPN giữa Bắc Kinh và Cairo văn phòng không. | 070-290 Explanation We should use Global Security groups. Group scope Groups. whether a security group or a distribution group are characterized by a scope that identifies the extent to which the group is applied in the domain tree or forest. There are three group scopes universal. global and domain local. Members of universal groups can include other groups and accounts from any domain in the domain tree or forest and can be assigned permissions in any domain in the domain tree or forest. Members of global groups can include other groups and accounts only from the domain in which the group is defined and can be assigned permissions in any domain in the forest. Members of domain local groups can include other groups and accounts from Windows Server 2003 Windows 2000 or Windows NT domains and can be assigned permissions only within a domain. The following table summarizes the behaviors of the different group scopes. Universal scope Global scope Domain local scope When the domain functional level is set to Windows 2000 native or Windows Server 2003 members of universal groups can include accounts global groups and universal groups from any domain. When the domain functional level is set to Windows 2000 native or Windows Server 2003 members of global groups can include accounts and global groups from the same domain. When the domain functional level is set to Windows 2000 native or Windows Server 2003. members of domain local scope can include accounts global groups and universal groups from any domain as well as domain local groups from the same domain. When the domain functional level is set to Windows 2000 mixed security groups with universal scope cannot be created. When the domain functional level is set to Windows 2000 mixed members of global groups can include accounts from the same domain. When the domain functional level is set to Windows 2000 native or Windows Server 2003. members of domain local groups can include accounts and global groups from any domain.
