Re: Security Group Confusion

Tech-Archive recommends: Fix windows errors by optimizing your registry

You want to make users members of global groups and add the global groups to
the domain local groups in each domain.

Domain local are only used for resources in their own domain but can contain
members from any domain.
Global can be used for resources in any domain but can only contain users
from their own domain.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • Re: Security Group Confusion
    ... forest', at least that's how I read it. ... > You want to make users members of global groups and add the global groups to ... > Domain local are only used for resources in their own domain but can contain ...
    (microsoft.public.windows.server.active_directory)
  • Using global groups to assign access to resources
    ... In a Windows 2000 AD single domain environment running in ... access to resources? ... What are the drawbacks of simply ... adding users to global groups and then assigning access to ...
    (microsoft.public.win2000.security)