Re: group permissions



On Wed, 9 May 2007 11:15:00 -0700, Chris Reynolds wrote:

this might be a stupid question, but I cant figure it out. I am trying to
add a group as a member of another group for permissions reasons. I know you
can do this in Windows 2003 server, but I cant seem to figure it out in
Windows 2000 server, or is it not an option?

Thanks in advance!

Chris

It is dependent on group scope and the mode the domain is in.
For full group membership options, you must ensure that the domain is in
Native mode, not mixed mode.
Allowed memberships when in Native mode:
Global => Global
Global => Domain Local
Global => Universal
Universal => Universal
Universal => Domain Local
Domain Local => Domain Local

If you are in Mixed mode:
Global => Local
No such thing as universal security groups
No such thing as domain local groups, only local groups
No nesting of same groups types within same group types (global into
global)

HTH,
Brian
.



Relevant Pages

  • Re: KRB Error
    ... I'm heading out the door for the day, but there is something tickling the back of my brain about differences with Authenticated Users from Windows 2000 to 2003. ... server of Domain A) as an Domain Administrator. ... Member servers on Domain A cannot access resources on Domain B. ...
    (microsoft.public.win2000.active_directory)
  • Re: W2k3 NETBIOS name change?
    ... You need to reboot twice all member workstations, member servers, and ... standalone servers that are running Windows ... 2000, Windows XP, and Windows Server 2003 Server family in the renamed ... to all applications and services running on the member computer. ...
    (microsoft.public.windows.server.migration)
  • Re: Group Policy
    ... you should be running Terminal Services on a dedicated member server ... user policy settings). ... Windows Server group, as I was actually talking about AD ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Problem after migrate
    ... Windows Server member still authenticate with BDCs ... The CAB file will be generated for your convenience in the ...
    (microsoft.public.windows.server.migration)
  • Re: Group Policy
    ... Your data should be on a file server - the TS box should be nothing ... Windows Server group, as I was actually talking about AD ... You can edit domain policies from a member server (or a workstation, ... and it wouldn't affect your administrators. ...
    (microsoft.public.windowsxp.security_admin)

Quantcast