Windows AD qns

hi
what would be the impact if access rights are not allocated to Domain local groups?
and what would happen if global groups are not allocated to domain local groups?
thanks

Not sure what you want to do but I'll bet you'll end up having a lot of angry users that aren't able to do anything..

Why don't you setup a small test domain and try it out? That is IMO the best way to learn..
Get some old hardware or use something like VMWare.. It doesn't have to be fast, it just needs to work..

Quote:

---

Originally posted here by ghostmachine
hi
what would be the impact if access rights are not allocated to Domain local groups?
and what would happen if global groups are not allocated to domain local groups?
thanks

---

You mean the A G DL P nesting thing? It's purely a recommendation. Just about anything else is simpler, but there's often a performance tradeoff. The smaller the environment, the more likely you are to be able to get away with just putting accounts in global groups and assigning permissions to those.