Windows AD qns
Results 1 to 3 of 3

Thread: Windows AD qns

  1. #1
    Member
    Join Date
    Jun 2004
    Posts
    77

    Windows AD qns

    hi
    what would be the impact if access rights are not allocated to Domain local groups?
    and what would happen if global groups are not allocated to domain local groups?
    thanks

  2. #2
    Just Another Geek
    Join Date
    Jul 2002
    Location
    Rotterdam, Netherlands
    Posts
    3,401
    Not sure what you want to do but I'll bet you'll end up having a lot of angry users that aren't able to do anything..

    Why don't you setup a small test domain and try it out? That is IMO the best way to learn..
    Get some old hardware or use something like VMWare.. It doesn't have to be fast, it just needs to work..
    Oliver's Law:
    Experience is something you don't get until just after you need it.

  3. #3

    Re: Windows AD qns

    Originally posted here by ghostmachine
    hi
    what would be the impact if access rights are not allocated to Domain local groups?
    and what would happen if global groups are not allocated to domain local groups?
    thanks
    You mean the A G DL P nesting thing? It's purely a recommendation. Just about anything else is simpler, but there's often a performance tradeoff. The smaller the environment, the more likely you are to be able to get away with just putting accounts in global groups and assigning permissions to those.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •