Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Group Nesting
Name: networkid83 Date: May 25, 2008 at 20:12:21 Pacific OS: Server 2003 CPU/Ram: custom
Comment:
Guys,
I having quite number of problems understanding this group nesting for Server 2003.
I am reading Self paced book for 70 294 MCSE and cant properly understand group nesting.
We have local groups, global groups and then universal groups categorised by group scope.
What I cant understand is how come by placing global group (with users in it) into local group it becomes easy to manage in future?
Name: Jennifer SUMN Date: May 26, 2008 at 09:05:42 Pacific
Reply:
It's called "Best Practices." The reason you add users to a Group and Global Groups to a Local Group (in simple terms) is to reduce the amount of management required. It's always easier to set permissions for a Group rather than individual users.
You also can't enable access to Local Groups for users in another Domain.
Summary: Jennifer, that won't work easily. Let's say you do nesting. You grant rights to a directory to a Domain Local group. You then create a global group and add people into that group, and then add the gl...
Summary: I am using Windows Server 2003 Sp2 and want to use the A G DL P strategy for assigning permissions to resources, currently we only have a list of users and the previous sys admin guy just used those t...
Summary: Did you look in Active Directory when looking on member servers? Sounds like you're looking on the local machine itself. After all, it is a *Domain* group. Also sounds like you do not understand how ...