Re: group scope and application question

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 09/29/04


Date: Wed, 29 Sep 2004 15:34:32 GMT

Domain Local Groups can contain members from any trusted domain. Note that
they can only be used to assign permissions to resources on domain computers
when in native mode domain. Neither Transcender or any of the study books
are perfect. I have found numerous mistakes in all of them. I find the best
information on Microsoft's websites such as TechNet or in their various
white papers. In addition when you have a question the best approach is to
confirm the answer yourself on a test network. It does not cost much to have
three computers connected on a test network with multiboot operating systems
or removable hard drive trays. You can use KVM switch to share monitors and
keyboards or use Remote Access to go into the other computer. --- Steve

http://search.microsoft.com/search/search.aspx?st=a&View=en-us -- search
here for answers.
http://search.microsoft.com/search/results.aspx?view=en-us&st=a&na=81&qu=domain+local+groups&qp=&qa=&qn=&c=10&s=0
-- results for domain local groups for example.

"djc" <noone@nowhere.com> wrote in message
news:e$57M6ipEHA.692@TK2MSFTNGP12.phx.gbl...
>I have come across conflicting information between a Microsoft Press book
> and a Transcender practice exam.
>
> According to Transcender exam Domain Local groups can only be used to
> assign
> permissions to resources in the domain that it was created in BUT it can
> contain members from anywhere in the forest. According to an MS Press book
> Domain Local groups can only contain members from the domain it was
> created
> in?
>
> which is correct? I need someone to confirm for me but I'm thinking
> Transcender is correct because this MS Press book seems to have several
> statements/facts that I find questionable. I won't mention the book until
> I
> know. But I will certianly let all know If I find the MS Press to be
> wrong... If you can't trust MS to give you correct info on their own
> products who can you trust? this book seems to not have been edited..
> there
> are references to figures that are the wrong ones etc... I'm glad I have a
> little understanding of the material already so I can pick up on 'some' of
> these mistakes but for someone who is new this would be horrible. And for
> anyone studying this stuff it is horrible to waste time studying
> inaccurate
> information.
>
> any info is appreciated. Thanks.
>
>



Relevant Pages

  • group scope and application question
    ... I have come across conflicting information between a Microsoft Press book ... and a Transcender practice exam. ... According to Transcender exam Domain Local groups can only be used to assign ...
    (microsoft.public.win2000.security)
  • Re: group scope and application question
    ... > Domain Local Groups can contain members from any trusted domain. ... Neither Transcender or any of the study books ... I have found numerous mistakes in all of them. ... >>I have come across conflicting information between a Microsoft Press book ...
    (microsoft.public.win2000.security)
  • Re: group scope and application question
    ... > I have come across conflicting information between a Microsoft Press book ... > and a Transcender practice exam. ... > According to Transcender exam Domain Local groups can only be used to ...
    (microsoft.public.win2000.security)
  • Re: group scope and application question
    ... It looks like the MS Press book is wrong... ... And to anyone interested, Transcender practice exams ... >> According to Transcender exam Domain Local groups can only be used to ... >> anyone studying this stuff it is horrible to waste time studying ...
    (microsoft.public.win2000.security)
  • Re: Cannot Assign Permissions to Domain Local Groups
    ... Domain Local Groups that could be used on domain members came about with Windows 2000 native mode. ... When I try to grant this group permissions on the folder, the group is not searchable; in fact, no domain local groups in the domain are searchable. ... "I created a domain local group in the remote domain and added the requested user accounts as members. ...
    (microsoft.public.windows.server.active_directory)