Your network consists of a single Active Directory domain named contoso.com. The functional level of
the domain is Windows Server 2003. Contoso contains two global groups named Users-Global and
Managers-Global.
Contoso contains 10 servers that run Windows Server 2003 Service Pack 2 (SP2). Each server has two
local groups as shown in the following table.

Each Users-Resources local group has access to the local resources on the server.
You need to implement a security solution that meets the following requirements:
·Managers-Global members must have access to all the resources that are accessible to Users-Global
members.
·The solution must minimize administrative effort.
What should you do?（）

Your network consists of a single Active Directory forest that contains the domains shown in the
following table.

You create a universal security group named Contoso-All in the Contoso domain. You plan to use
Contoso-All to assign permissions only on servers in the contoso.com domain.
You add a group named Region1-All in the Region1 domain to Contoso\Contoso-All and receive the error
message shown in the exhibit. (Click the Exhibit button.)

You need to ensure that members of Region1\Region1-All can access resources that have been assigned
to Contoso\Contoso-All.
What should you change? （）