Which of the following are benefits of Group objects in AD DS?

Which of the following are benefits of Group objects in AD DS?

• A. Changing permissions on an individual user basis
• B. Assign permissions to various resources by group
• C. Assign email communications by group
• D. Assign users a lunch group

Answer: (B)

Grouping users in AD DS lets you manage access efficiently. When you assign permissions to a group, every member inherits those permissions, so you don’t have to adjust permissions for each individual user. This makes administration scalable, keeps access consistent across resources, and simplifies auditing because you can review and manage access at the group level. For example, a security group for a department can be granted access to the relevant shared folders and applications, and new hires simply join that group. While email distribution can be tied to groups in some setups, the primary benefit of AD DS groups is streamlining resource access, not individual-per-user permission changes or unrelated groupings like lunch clubs.

Grouping users in AD DS lets you manage access efficiently. When you assign permissions to a group, every member inherits those permissions, so you don’t have to adjust permissions for each individual user. This makes administration scalable, keeps access consistent across resources, and simplifies auditing because you can review and manage access at the group level. For example, a security group for a department can be granted access to the relevant shared folders and applications, and new hires simply join that group. While email distribution can be tied to groups in some setups, the primary benefit of AD DS groups is streamlining resource access, not individual-per-user permission changes or unrelated groupings like lunch clubs.