IT Employment

General discussion


Organizing and Implementing Secure Groups in AD

By crownedzero ·
I need to find as much information as I can about organizing and implementing security groups within an organization. I am looking for more of a "best practices" than anything else. Any links/info you can provide would be greatly appreciated, thanks!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

what is exactly security you're talking about?

by dw_ay In reply to Organizing and Implementi ...

In AD there are two type of group, security and distrbtn groups. is this security what you are looking for? Organizing security groups depend on logical functionals and sites location
There are 3 scopes in security group
- global group (members from one domain which the group created, access to many domains)
- domain local, (members from any domains, access to only domain which this group created)
- universal (from any to any)
Usually I create several global groups depend on its same job functions like mkt, sales, or accounting groups then create domain local groups like for printers or shared folders. Then add global groups to domain local groups and assign appropriate permissions to domain local group, or u can create something like that with couple combinations.
More details just search on microsoft site maybe

Related Discussions

Related Forums