hi
what would be the impact if access rights are not allocated to Domain local groups?
and what would happen if global groups are not allocated to domain local groups?
thanks
Not sure what you want to do but I'll bet you'll end up having a lot of angry users that aren't able to do anything..
Why don't you setup a small test domain and try it out? That is IMO the best way to learn..
Get some old hardware or use something like VMWare.. It doesn't have to be fast, it just needs to work..
Oliver's Law:
Experience is something you don't get until just after you need it.
Originally posted here by ghostmachine hi
what would be the impact if access rights are not allocated to Domain local groups?
and what would happen if global groups are not allocated to domain local groups?
thanks
You mean the A G DL P nesting thing? It's purely a recommendation. Just about anything else is simpler, but there's often a performance tradeoff. The smaller the environment, the more likely you are to be able to get away with just putting accounts in global groups and assigning permissions to those.