Re: Distribution Lists

On Wed, 9 May 2007 10:24:00 -0700, TSAM
<TSAM@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

Hello all,

While creating a new group aka distribution list, we have Group Scope and
Group type. It's always confusing for me. Could somebody provide an advanced/
detailed description and scenarios where/ when to use them?

With Group Scope there is domain local, global and universal and with group
type there is security and distribution. What's the purpose of each of them.
Could all of these group with all possible combination receive email from
internal exchange servers and external email accounts.

Thanks

Security is for granting access, Distribution is for making, err,
lists for things to be, err, distributed to. They're kind of obvious.
Local, Global and Universal (and it's a paste, I didn't type this
myself!!):

Domain local groups
Domain local security groups are most often used to assign permissions
for access to resources. You can assign these permissions only in the
same domain where you create the domain local group. Members from any
domain may be added to a domain local group.

The domain local scope can contain user accounts, universal groups,
and global groups from any domain. In addition, the scope can both
contain and be a member of domain local groups from the same domain.

Global groups
Global security groups are most often used to organize users who share
similar network access requirements. Members can be added only from
the domain in which the global group was created. A global group can
be used to assign permissions for access to resources in any domain.
The global scope can contain user accounts and global groups from the
same domain, and can be a member of universal and domain local groups
in any domain.

Universal groups
Universal security groups are most often used to assign permissions to
related resources in multiple domains. Members from any domain may be
added. Also, you can use a universal group to assign permissions for
access to resources in any domain. Universal security groups are not
available in mixed mode. The full feature set of Windows 2000 and
later Microsoft NT-based operating systems is available only in native
mode. The universal scope can contain user accounts, universal groups,
and global groups from any domain. The scope can be a member of domain
local or universal groups in any domain

.

Relevant Pages

  • Re: What is group scope?
    ... The scope of a group defines two characteristics: ... It determines the level of security applying to a group. ... Members of this group can access resources in any domain. ... Universal groups can also contain global ...
    (comp.databases.rdb)
  • Re: Union nested in structure.
    ... > specifying the tag scope rules would have been a Bad Thing. ... Or was it that members had their own namespace, ... Or was there only a single namespace for tags, ... recall if there were struct definitions within a function/block at all ...
    (comp.lang.c)
  • Re: c# functions
    ... Static functions should be avoided at all cost or at least kept to ... to be namespace members and not global. ... call functions without explicitly specifying the scope. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Scope of objects across seperate source files
    ... internal class BB ... public void UseBB() ... which explain scope on the file/class level. ... Access members of BB from A. ...
    (microsoft.public.dotnet.languages.csharp)
  • Universal Distribution Group creation.
    ... I am trying to write a script to create users and groups and I need to create ... groups that are of type - Distribution and of scope - Universal in order to ... however it won't let me create the Universal Distribution group. ...
    (microsoft.public.windows.server.scripting)