Re: Security Groups issue...

Hi
Adding...
The way how you can nest groups or how groups are available actually depends
of your Functional level (Mixed-Native), take a look
http://technet2.microsoft.com/WindowsServer/en/library/6375943b-1089-4ec5-9b2d-823b884ec1ec1033.mspx?mfr=true
http://technet2.microsoft.com/WindowsServer/f/?en/library/3fbe961d-1124-4a56-9d95-4be9e0dc59951033.mspx

--
I hope that the information above helps you

Good Luck
Jorge Silva
MCSA
Systems Administrator
"Kshaeta" <visual.eyes@xxxxxxxxx> wrote in message
news:u7S2Ak88GHA.4604@xxxxxxxxxxxxxxxxxxxxxxx
*** Note, I posted this is the "security" group, but someone suggested I
put it here to get an answer. ***

One reason I ask, is because of this problem. I have two security groups,
within my domain, and two servers in my domain. One server is a domain
server (DOM), the other is a member server (MEM).
I have 2 security groups. The difference between the two is one is a
DLS group, the other is a GS group. The DLS one doesn't allow the
security group to be set on servers other than the domain servers. That
is, if you are on DOM and you create a directory, you can grant it
"Information Systems_DLS" security, or "Information Systems_GS" security.
But if you log on to MEM, and try that it won't work. You need to grant
it "Information Systems_GS". The option to grant any DLS doesn't even
show up in the security selection on the member server.

I don't really grasp this. Should "Domain level Security" allow you to
grant that security group to any member server?

I know how security groups work together, how certain ones can't be part
of others, etc. But I don't really understand how they work, or where
and when to use them.

Where are DLS (Domain Local Security) groups used, and why?
How about GS (Global Security) groups? Universal Security groups?

Is there any good documentation that explains how these are used and why?

Thanks for any info.
--
Bill Tkach
MSP, A+
visual{period}eyes{period}this{at}gmail{period}com


.

Relevant Pages

  • Re: Domain Local Security vs Global Security vs Universal Security Groups
    ... I guess my question was "does anyone know why these Domain Local System (DLS) groups behave like this", ... I would assume a DLS group would allow me to use such a group on any server in the domain. ... Seemed weird to me that you would only be able to grant DLS access on the Domain Servers itself. ... I have two security groups, within my domain, and two servers in my domain. ...
    (microsoft.public.windows.server.security)
  • Re: Domain Local Security vs Global Security vs Universal Security Groups
    ... I have two security groups, within my domain, and two servers in my domain. ... One server is a domain server, the other is a member server. ... The difference between the two is one is a DLS group, the other is a GS group. ... You need to grant it "Information Systems_GS". ...
    (microsoft.public.windows.server.security)
  • Domain Local Security vs Global Security vs Universal Security Groups
    ... I have two security groups, within my domain, and two servers in my domain. ... One server is a domain server, the other is a member server. ... The difference between the two is one is a DLS group, the other is a GS group. ... You need to grant it "Information Systems_GS". ...
    (microsoft.public.windows.server.security)
  • RE: Users cannot be logged on to Remote Web Workspace.
    ... server), in the network I have two additional users that work within the LAN ... I checked the user membership in security groups and the user belongs to the ... I understand the issue is that you create a template ...
    (microsoft.public.windows.server.sbs)
  • Re: Security Groups issue...
    ... server, the other is a member server. ... I have 2 security groups. ... "Local Groups on the Domain" do not become "Domain ... Universals can be best thought of as "super globals" and are not even ...
    (microsoft.public.windows.server.active_directory)
Loading