Re: I cant put a Group in a Group ??


"steve" <stevesemple@xxxxxxxxx> wrote in message
news:1190923294.629122.29670@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Actually I miss spoke

Global Groups Cannot be added to Local Groups

Local Groups CAN be added to Global Groups



Assuming the domain is not in Windows 2000 Mixed Mode:

Global groups can:
1. Have users accounts and global groups (in the same domain) as members.
2. Be members of Universal and domain local groups in any domain, and global
groups in the same domain.

Domain Local groups can:
1. Have users, global groups, and universal groups from any domain as
members, and domain local groups from the same domain.
2. Be members of domain local groups in the same domain.

Universal Groups can:
1. Have users, global groups, and universal groups from any domain as
members.
2. Be members of domain local and universal groups in any domain.

If you are in Windows 2000 Mixed Mode the only group nesting allowed is:
Global groups can be members of domain local groups.

--
Richard Mueller
Microsoft MVP Scripting and ADSI
Hilltop Lab - http://www.rlmueller.net
--


.

Relevant Pages

  • Re: Child Domain access
    ... Group Scope ... -- Domain Local groups can contain members from ANY domain but can only be ... -- Global groups can only contain members from their OWN domain but can be ... domain and can be a member of domain local or universal groups in any ...
    (microsoft.public.windows.server.active_directory)
  • Re: Query re NT4 Domain Local Groups
    ... migrate global groups without members and with sidhistory (last is ... migrate user accounts and fix group memberships and with sidhistory (last ... I have a query regarding NT4 Domain Local Groups. ... NT4 domain server which has local and global groups. ...
    (microsoft.public.windows.server.migration)
  • Re: Question about Groups
    ... If the domain is in NT4 mode aka mixed mode the members will be able to see Global groups from any domain and local groups on the member servers themselves. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Everyone, Users, and Guests
    ... Domain Guests = anonymous logons (the Guest account is ... Domain Users = domain's authenticated users (a member of ... Global Groups go into Local Groups, ... Local Groups are given permissions to resources. ...
    (microsoft.public.win2000.security)
  • Adding a Local Group as a member of a Global Group
    ... permissions with Domain Local Groups and add to this Group ... I'm not having success in putting this into script though! ... >Local Groups cannot be members of global groups. ...
    (microsoft.public.windows.server.scripting)