Re: Microsoft Security Groups

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 04/30/05 

Date: Fri, 29 Apr 2005 17:39:03 -0700

<matthewpascucci@yahoo.com> wrote in message
news:1112376019.639314.9710@f14g2000cwb.googlegroups.com...
> So to clear things up Global groups can be nested outside there domain
> within another Global group? Global groupA from domainA can be a member
> of global groupB within DomainB. But this is not advised. What do you
> mean by "principle gorups"??
>

No. Global group cannot contain objects that are from outside
of their own domain. I think I tried to say that a few times.

I used principal group to mean a group that holds accounts as
members (accounts are also called principals). 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA

Relevant Pages

  • Re: Adding users to a Security Group based on AD Description field
    ... newly created Global Group with users. ... on, is why I can run the script, everything works perfectly and I get ... NameTranslate object to convert this to the DN of the user. ... if not already a member. ...
    (microsoft.public.scripting.vbscript)
  • Re: Restricted Groups problem
    ... member servers in "sub.domain" via group policy. ... administrators group. ... Are you trying to add a global group to a global group? ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Power user group
    ... I think the answer is in the article 'How to configure a global group to be ... a member of the administrators group on all workstations. ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NetUserGetGroups() omitting groups
    ... It appears, after some tracing and screen shots, that the user ... MSDN suggest that it can happen even if the API returns no error. ... The group omitted is a global group, itself member of another global ...
    (microsoft.public.win32.programmer.networks)
  • Re: Restricted Groups problem
    ... the group type is a global group from "domain". ... "member of" works, coul you elaborate a little more? ... As for not changing the local administrators group, ... On member servers in the web servers OU of sub.domain, ...
    (microsoft.public.windows.server.active_directory)
Loading