Re: Domian local group versus Domain admin group

From: Darren (Darren_at_somewhere.com.(donotspam))
Date: 08/28/05 

Date: Sun, 28 Aug 2005 14:02:11 -0400

Thanks . Roger
Just want to make sure I understand the diffrences . I am just curious to
know whats the use of Domain local group and when would you use domain local
groups perhaps some examples..
Are there articles on Microsoft site that explain group membership usage and
best practises etc....

Thanks
Darren
"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:%23%23BxDg3qFHA.3788@TK2MSFTNGP12.phx.gbl...
> Domain Local is a type of group, not a group itself.
> Domain local groups can contain members from other domains.
> Domain global groups by contrast can only contain as members
> objects that are defined in the group's domain.
>
> Domain admins is a group. It is a domain global group. By
> default Domain Admins is a member in the Administrators group
> on every machine in its domain (this is changable).
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
> MCSE (W2k3,W2k,Nt4) MCDBA
> "Darren" <Darren@somewhere.com> wrote in message
> news:ujged1xqFHA.3660@TK2MSFTNGP15.phx.gbl...
>> what are the diffrences amoung groups Domain Local and Domain Admin..
>>
>> Thanks
>> Darren
>>
>>
>
>

Relevant Pages

  • Re: Domian local group versus Domain admin group
    ... Domain local groups can contain members from other domains. ... Domain global groups by contrast can only contain as members ... Domain admins is a group. ...
    (microsoft.public.win2000.security)
  • Re: Domain Admin Access across Trusted domains
    ... > users to a Domain Local security group, I can't add that Domain Local ... Much, not all, can be conferred my making members of the ... same as making them members of Domain Admins. ... >>> The trust is a two way external trust. ...
    (microsoft.public.win2000.security)
  • Re: SQL Domain Group Permissions
    ... Most settings can be retrieved by any authenticated user. ... the group "Domain Admins" is added to the local ... Administrators group with the computer is joined to the domain. ... members of Domain Admins to retrieve more information on the computers. ...
    (microsoft.public.sqlserver.security)
  • Re: Finding users of a specific group and listing memberships of t
    ... report generated by the system that lists members of the Domain Admin group. ... Dim strGroupDN, objGroup, objMember, objMemberGroup, objFileSystem, ... >> Hi...I am trying to write a script that will list users of a specific ... >> Domain Admins group, I want it to list all those users group memberships. ...
    (microsoft.public.windows.server.scripting)
  • Re: Restricting access to AD located in another domain
    ... you should use the Delegation Wizard ... I am not so sure that granting the Help Desk ... If they need to be members of the local Administrators on all of the WIN2000 ... HelpDesk security group and the Domain Admins. ...
    (microsoft.public.win2000.active_directory)