Re: Security Groups issue...
- From: "Jorge Silva" <jorgesilva_pt@xxxxxxxxxxx>
- Date: Fri, 20 Oct 2006 12:14:24 +0100
Hi
Adding...
The way how you can nest groups or how groups are available actually depends
of your Functional level (Mixed-Native), take a look
http://technet2.microsoft.com/WindowsServer/en/library/6375943b-1089-4ec5-9b2d-823b884ec1ec1033.mspx?mfr=true
http://technet2.microsoft.com/WindowsServer/f/?en/library/3fbe961d-1124-4a56-9d95-4be9e0dc59951033.mspx
--
I hope that the information above helps you
Good Luck
Jorge Silva
MCSA
Systems Administrator
"Kshaeta" <visual.eyes@xxxxxxxxx> wrote in message
news:u7S2Ak88GHA.4604@xxxxxxxxxxxxxxxxxxxxxxx
*** Note, I posted this is the "security" group, but someone suggested I
put it here to get an answer. ***
One reason I ask, is because of this problem. I have two security groups,
within my domain, and two servers in my domain. One server is a domain
server (DOM), the other is a member server (MEM).
I have 2 security groups. The difference between the two is one is a
DLS group, the other is a GS group. The DLS one doesn't allow the
security group to be set on servers other than the domain servers. That
is, if you are on DOM and you create a directory, you can grant it
"Information Systems_DLS" security, or "Information Systems_GS" security.
But if you log on to MEM, and try that it won't work. You need to grant
it "Information Systems_GS". The option to grant any DLS doesn't even
show up in the security selection on the member server.
I don't really grasp this. Should "Domain level Security" allow you to
grant that security group to any member server?
I know how security groups work together, how certain ones can't be part
of others, etc. But I don't really understand how they work, or where
and when to use them.
Where are DLS (Domain Local Security) groups used, and why?
How about GS (Global Security) groups? Universal Security groups?
Is there any good documentation that explains how these are used and why?
Thanks for any info.
--
Bill Tkach
MSP, A+
visual{period}eyes{period}this{at}gmail{period}com
.
- References:
- Security Groups issue...
- From: Kshaeta
- Security Groups issue...
- Prev by Date: Re: Local Admin account deleted Help !
- Next by Date: Re: Windows 2003 trust
- Previous by thread: Re: Security Groups issue...
- Next by thread: Re: Security Groups issue...
- Index(es):
Relevant Pages
|