Re: Microsoft Security Groups

matthewpascucci_at_yahoo.com
Date: 03/28/05 

Date: 27 Mar 2005 19:11:25 -0800

What would be the difference if I had a resource (file or printer) and
wanted to assign global groups to it instead of using local groups?? Am
I correct to say that when you assign global groups to local groups
it's when you are in a multi-domain enviroment?? But even if you were
in a multi-domain enviroment couldn't you create a global group in
"Domain A" and then assign it permission on a resource (printer) in
"Domain B" without using local groups??? This is where I become a
little lost with purpose of adding them to local groups.

Also you can add alsmost add anything to a domain local group as a
memeber but you can only add objects from the same domain if your
creating a global group??

Thank You

Relevant Pages

  • Re: Everyone, Users, and Guests
    ... Domain Guests = anonymous logons (the Guest account is ... Domain Users = domain's authenticated users (a member of ... Global Groups go into Local Groups, ... Local Groups are given permissions to resources. ...
    (microsoft.public.win2000.security)
  • Re: I cant put a Group in a Group ??
    ... Global Groups Cannot be added to Local Groups ... Have users accounts and global groups as members. ... Have users, global groups, and universal groups from any domain as ...
    (microsoft.public.windows.server.active_directory)
  • global local security group question
    ... What's the proper way to setup security for a shared data directory? ... In AD, there are global groups, i.e. Accounting_Read, Accounting_Full, ... should I create local groups in AD and assign the ... Or should I create groups on the file server itself and assign ...
    (microsoft.public.windows.server.active_directory)
  • Re: Groups best practices
    ... > I am trying to decide how to assign user permissions to shares on computer. ... > SHould I use Global groups or put Global groups into local groups and then ... and grant Permissions at the resource to Domain Local group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Group Scope Question
    ... that domain local groups can only be used within the domain. ... will need to use global groups to give users access to resources in another ... Domain local groups are best used in access control lists ... I plan on having a Domain Controller in each site to ...
    (microsoft.public.win2000.security)