Software

Ask something
Discussion Locked

Groups, Groups and more Groups

0 helpful
2 replies

by techkid

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I'd like to know what other large businesses do in regards to Security Groups. Specifically, do they create a Security Group to manage Distribution Groups? Security Groups for Read Only access to folders and another Security Group for Modify access to the same folder... and do that for nearly every folder in their environment? Then more Security Groups for Public Folder permissions, software application installs, etc. How many groups is too many so that the users tokens are too large and cause issue or Active Directory replication is prolonged?

2 replies

by stress junkie

I spent a lot of time working as a contract system administrator for big companies. I can tell you that there are no common practices. If the business has a separate person for each function then they will probably have a separate group for each function.

In general I think that it is a good idea to have a separate administrator type group for each type of system administration. It makes it easy to make changes when personnel are assigned new responsibilities. You can put in the time to make these kinds of groups up front or you can put in the time to make them as the need arises. Either way it is good to have separate administrator groups for each function.

by tessmanak

Before AD I had access to two folders to add or remove users. After AD I'm being told that I can not have the permission to add and remove users on those same folders because I would be given access to all folders. I don't believe this to be true and am looking for some documentation to support this. Any suggestion?

This discussion is closed to new replies.