It 240 Week 6

In the given scenario and proposed solution, I would say that you would accomplish both you required result and your optional result. universal groups are groups that allow and or grant permissions on a wide scale, that being said you would be able to allow those permissions for those that need access and deny those that don't. In my opinion it is all in how you configure the server and network. I would go with using window active directory when creating user account because windows OS only works with windows and on one computer and since you need to allow one network to have access to another network you would need to do it that way. you will need to set up a domain, within the domain can set up folders for organizing users and groups. you can let you most trusted employees be in the alpha group and let them be part of the admin group. That will allow them to have access to all networks and computers and the other just have access to what you allow them to have. You need too make sure you trust those in the alpha group because they will have to have access to everything that is in the admin group. You also need to set up a moderator to make sure all the permissions are being followed as specified. I would also set up individual user account access. Like login in domain and tell the employees to keep the passwords to themselves. That way you know who is logging in and on what computer, that will make it easier to track what the employees are doing and if your network is safe. If you do all those things I think you will be able to have what you want in your network.