General discussion

Locked

Active Directory Security Group Scope

By michealobrien ·
I have created a few security groups with global scope and am have second thoughts about it. I would like to change it to Domain local but in the properties page of the security group in active directory users and computers I am unable to change it because the other options are unavailable. Can anyone tell me how I can enable these options (Domain local & Universal)

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Active Directory Security Group Scope

by Sojournist In reply to Active Directory Security ...

Domain Local Groups are designed for use in assignment of permissions. Global Groups are appropriate for holding together users with similar network needs. Best practice holds that Accounts->Global->DomainLocal<-Permissions.

Organizing users inDomain Local groups will severely limit your ability to grant your users access across the forest or in trusting domains. Unless you have good reason for dropping users to Domain Local Groups, keep them in Globals.

Domain Local Groups are great for adding Global Groups from across the forest to a single group for NTFS permission assignment. They can include users or groups from anywhere in the forest. But they can only be used or seen without your own domain.

Global Groups can contain only users from your own domain, but can be granted permissions across the enterprise.

You may not have Universal groups available becasue the domain is still in Mixed mode. Universal groups and group nesting are only available after switching the network to Native mode.

Sojournist
http://netflood.net

Collapse -

Active Directory Security Group Scope

by michealobrien In reply to Active Directory Security ...

Thanks for that learned somethings up for me aswell

Collapse -

Active Directory Security Group Scope

by michealobrien In reply to Active Directory Security ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums