You are the network administrator for TestKing Oil. The network consists of three Active Directory domains in a single forest. All domain controllers run Windows Server 2003.
TestKing Oil enters into a business partnership with Oil Importers. The Oil Importers network consists of four Active Directory domains in a single forest. To enable the two companies to share resources, a two-way forest trust relationship with selective authentication is created.
Now you need to ensure that the research data of TestKing Oil will remain inaccessible to all users in Oil Importers.
First, you create a local group named No Oil. Then, you assign the Deny - Full Control permission to No Oil.
What should you do next?（）

You are the network administrator for TestKing.com. The network consists of a single Active Directory domain named testking.com. The functional level of the domain is Windows 2000 native.
A global group named Travelling contains 7,000 users. All of these users are assigned portable computers, which they will use to run new POSIX-compliant application.
You create a global group named POSIX. For all 7,000 users in Travelling, you change the primary group to POSIX.
Members of Travelling now report that they cannot access necessary domain resources.
How should you solve this problem?（）