For IWA authentication, Active Directory users are not automatically added to the ArcGIS Enterprise portal. They must either be:
* Manually added as members, or
* Automatically created at first login if auto-creation is enabled.
Since the new users are assigned to the gisusers group but cannot sign in or create content, it's clear that their accounts have not yet been added to the portal.
From ArcGIS Enterprise documentation:
"Integrated Windows Authentication (IWA) allows users to sign in with their Windows credentials. However, users must still be members of the portal. You can manually add users or enable automatic account creation during login."
* Option B is invalid since default user type settings do not prevent login.
* Option C is incorrect because synchronization is not time-based-it's account-creation dependent.
Reference:ArcGIS Enterprise - Managing Portal Members and Identity Store Integration

For environments without internet access, the organization can use the patchnotification.bat utility to check for available patches and updates. This utility can be run from the command line and provides information about the current patch status of the ArcGIS Enterprise components. Administrators can then manually download the necessary patches from another machine with internet access and transfer them to the internal environment for installation.
Reference Source: ArcGIS Enterprise documentation on checking for and installing software patches and updates

These errors point toproblems accessing the configuration store, which is commonly stored on ashared file locationacross ArcGIS Server machines. Intermittent access, latency, or I/O issues with the shared drive can cause synchronization failures and service visibility problems.
From Esri documentation:
"If ArcGIS Server cannot reliably access the configuration store, errors such as heartbeat failure, sync issues, and missing service configurations may occur. Always ensure the shared file location is on a reliable, supported file system with proper permissions and stability."
* OptionA(VM resources) might impact general performance butnot sync reliability.
* OptionC(patches) is important but doesn't fix shared drive instability.
* OptionDis not relevant in this context.
Reference:ArcGIS Server -High Availability Configuration Store Troubleshooting

In ArcGIS Enterprise, the Creator user type includes full privileges for content creation, sharing, and administration. When paired with the Publisher role, it grants the user the ability to publish hosted feature layers, map image layers, and other services, as well as perform editing tasks on existing data. This combination is specifically designed for users who require both publishing and editing capabilities.
The Editor user type is limited to editing and cannot publish content. The GIS Professional user type provides access to ArcGIS Pro but, when assigned the Data Editor role, restricts the user from publishing content. Therefore, only the Creator user type with Publisher role supports both publishing and editing workflows.
Reference Source: ArcGIS Enterprise Administrator Guide - User types and roles

Web Adaptors in the DMZ must forward requests to internal components (Portal and Server). These internal services operate over HTTPS via ports:
* 7443 for Portal for ArcGIS
* 6443 for ArcGIS Server
Therefore, the firewall mustallow traffic over ports 6443 and 7443from the Web Adaptors (DMZ) to the respective internal services.
From ArcGIS Enterprise security documentation:
"When using Web Adaptors in the DMZ, make sure ports 6443 and 7443 are open between the Web Adaptors and the internal ArcGIS Server and Portal components respectively."
* OptionBis partially correct but leaves out Portal (7443).
* OptionCis for HTTP/HTTPS access from the public,not internal communications.
* OptionDincludes the Data Store admin port (2443), which isn't required here.
Reference:ArcGIS Enterprise -Firewalls, Ports, and DMZ Configuration