Re: Best Practice Group Strategy ??

From: RCC (rcc76@hotmail.com)
Date: 05/28/02


From: "RCC" <rcc76@hotmail.com>
Date: Tue, 28 May 2002 19:12:40 +1200


"Jason" <jasonqfrancis@hotmail.com> wrote in message
news:#s1kcdfBCHA.2040@tkmsftngp05...
> In a large single domain Windows 2000 environment what is considered best
> practice for the assignment of permissions to users and the necessary
groups
> to do so?
>
> For example if I have a number of users that all perform a similar
function
> and need access to the same resources on a particular file server which of
> the following is the best way to do it:
>
> 1.) Make these users members of a Global group. Then on the file server
> create a Local group and add that Local group to the ACL of the file
share.
> Then assign the Global group to that Local group.
>
> OR........
>
> 2.) Make these users members of a Global group. Then add the Global group
to
> the ACL of the file share on the file server containing the resources they
> need access to.
>

 I believe Microsoft recomends the first method. Name the Global group by
the depatment and the local group by the resource name...



Relevant Pages

  • Re: how to add NT domain local group security on win2000
    ... Actually i will upgrade the NT Domain to win2000 AD as well after the NT ... My original plan is to upgrade the NT File Server first then NT Domain. ... It will be too complicated to change all Local group to Global group. ... What will happen to the existing Local Group, if i upgrade the NT Domain ...
    (microsoft.public.windows.server.migration)
  • Best Practice Group Strategy ??
    ... Then on the file server ... create a Local group and add that Local group to the ACL of the file share. ... Then assign the Global group to that Local group. ...
    (microsoft.public.win2000.security)
  • Re: Best Practice Group Strategy ??
    ... Make these users members of a Global group. ... Then on the file server ... > create a Local group and add that Local group to the ACL of the file ...
    (microsoft.public.win2000.security)
  • Re: how to add NT domain local group security on win2000
    ... This problem will not exist after you upgrade the ... |My original plan is to upgrade the NT File Server first then NT Domain. ... |It will be too complicated to change all Local group to Global group. ...
    (microsoft.public.windows.server.migration)
  • RE: Adding AD Account to NT Global
    ... > accounts from other domains while global group is used to be added in other ... The local group in NT is only accessible within the controllers and can't be ... I have already done some successful migrations from nt4 to w2k3 root domain. ...
    (microsoft.public.windows.server.migration)