I've been reading about the users and group creation AGDLP, as stated accounts are made members of global groups which in turn are members of domain local groups and finally the permissions are applied on domain local groups. Consider, i'm having users who handle payrolls for multiple organizations. So i created a global group with a firms name, their data is placed on multiple folders for which i'll have to fix the permissions who is able to access which folder. What is troubling me, what should i name the domain local group accounts...shall i create multiple domain local group accounts, and each domain local group will have permission on one particular folder....

What you name your Domain Local Groups is completely up to you. Just make sure the names are descriptive enough so that you understand what each one is. What is your setup though? Are you using OU's? Do you have multiple Domains in your Forest? "So won’t you give this man his wings What a shame To have to beg you to see We’re not all the same What a shame" - Shinedown

Hi Jennifer thanx 4 ur reply... well no multiple domains.. yess i'll be using multiple OU's....one for payroll team, one for IT_dept, n one for management........ is that okay with that?, i mean using multiple ou's....

Is it okay? Of course. That's one of the advantages of AD. You might want to purchase a server book as well. :) "So won’t you give this man his wings What a shame To have to beg you to see We’re not all the same What a shame" - Shinedown

thnx Jennifer... well i dunno shall i start a new thread or wat... but i jus need an advice... jennifer our offices are goin to merge up ... n things are like... we have to bring two different networks together... wat i was thinkin was like of subnetting, breaking up the network, but the scene is like... can a single domain controller handle two different subnetworks?

well jus wanna wish ........ Merry Xmas to everyone... :)