Re: changing group scope

All gawked in amazement when: kcsteele assaulted us with:
not sure if this is the right group, but I'll give it a try.

from
http://technet2.microsoft.com/WindowsServer/en/Library/79d93e46-ecab-...



Changing group scope
When creating a new group, by default, the new group is configured as
a

security group with global scope regardless of the current domain
functional level. Although changing a group scope is not allowed in
domains with a domain functional level set to Windows 2000 mixed, the
following conversions are allowed in domains with the domain
functional

level set to Windows 2000 native or Windows Server 2003:


· Global to universal. This is only allowed if the group you want to
change is not a member of another global scope group.


· Domain local to universal. This is only allowed if the group you
want to change does not have another domain local group as a member.


· Universal to global. This is only allowed if the group you want to
change does not have another universal group as a member.


· Universal to domain local. No restrictions for this operation.


My question is about the last "Universal to domain local" which it
says

there are no restrictions. What happens if the universal group you
want

to convert to domain local is a member of another universal group?
This

would cause the containing universal group to have a domain-local
group

as a member. If there are no restrictions, wouldn't this cause issues
because a universal group cannot contain domain local groups?

What happened when you tried it in your test environment?

--
LRM
MCNGP 7^2
www.mcngp.com home of the bogosity singularity.


.

Relevant Pages

  • changing group scope
    ... Changing group scope ... · Domain local to universal. ... want to change does not have another domain local group as a member. ... change does not have another universal group as a member. ...
    (microsoft.public.cert.exam.mcse)
  • Changing group scope
    ... Changing group scope ... change is not a member of another global scope group. ... want to change does not have another domain local group as a member. ... change does not have another universal group as a member. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Message bouncing between two servers
    ... Basically she is a member of a group that is nested in one that sends to the ... (ie. departmental universal group, nested within company ... send to the company universal group. ... all refer to the SMTP connector/smart host problems, ...
    (microsoft.public.exchange.admin)
  • Re: Secondary (backup) domain controller not working ?
    ... No I am not using Universal group. ... Do you use Universal groups and are the accounts member of them? ... If i startup a client when the preferred DNS is down i don't have any delay realized. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Identify which users are missing from a group
    ... account objects a direct member of the Universal Group. ... user account objects you do not want to have 300 individual user account ... Group called 'Managers' and say that you have a Distribution Group called ...
    (microsoft.public.win2000.active_directory)