Your network is a Windows domain controlled by a Windows Server domain controller. Your goal is to configure user access to file folders shared to the network. In your organization, directory access is dependent upon a user's role in the organization. You need to keep to a minimum the administrative overhead needed to manage access security. You need to be able to quickly modify a user's permissions if that user is assigned to a different role. A user can be assigned to more than one role within the organization. What solutions should you implement? (Select the two best answers.)
A. Create security groups and assign access permissions based on organizational roles.
B. Place users in OUs based on organizational roles.
C. Create an OU for each organizational role and link GPOs to each OU.
D. Place users' computers in OUs based on user organizational roles.
E. Assign access permission explicitly by user account
Answer:
A. Create security groups and assign access permissions based on organizational roles.
C. Create an OU for each organizational role and link GPOs to each OU.