Kinds of Groups

[zebra1057]

What would be the difference between:

a global group vs. a universal group?
a global group vs. a domain local group?

thanks in advance


roland

 

[brontosaurus]

Global group = contains directory objects specific to a domain, but is not replicated across domains. In 2K, one global group can be added to another, and a global group can also be added to a local group, in it's own domain, or in a separate trusted domain. Domain Local group = also contains directory objects specific to a domain, but can't be added to another domain's groups. It can be added to another domain local group (in the same domain), and can contain just about any other kind of group. Universal Groups (active in Native mode only) = span all domains in the tree and replicate across all domains. They can contain global groups and are used primarily to consolidate groups across domains. Confused? I think I am...

 

[Jpoandl]

We organize like this...

Apply Users to appropriate Global Groups. Apply Global Groups to appropriate Domain Local Groups. Apply Domain local groups to resources (NTFS, printers, etc)

Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.esavio.com

 

[zebra1057]

Just to clarify.

If Mr. Vase is a member of a global group in child1.Atree.com; can he access a printer located in child1.Btree.com?
Both Atree and Btree are in the same forest. The printer is shared and permission for everybody is print.

Thanks in advance again.

roland

 

[Jpoandl]

Yes. Joseph L. Poandl
MCSE 2000

If your company is in need of experts to examine technical problems/solutions, please check out

http://www.esavio.com