| Author |
Groups and which to use
|
|
| River19 2002-06-29, 2:46 pm |
| Ok, I know this may seem like a basic question for a lot of you out there, but I need help with groups. You see, I'm studing for 219 right now and I always get groups wrong in my design plan. I use universal when I should use global and global when I should use domain local. I know domain local is for assigning permissions to resources. But in my book it says global groups can be used to group together "members of the domain in which teh global group is created and members from other domains." Why then would this not be considered a global group?? Wouldn't this be universal since members form other domains can join the group?? Like I said, I am very confused. It is doubly frustrating because while studying for 217 (which I passed) I got every question on groups right, so I don't see how they could change that quickly. Thanks for all your help. I'm taking the test 7/6/2002, so I'm really studying like mad. | |
| jeff_j_black 2002-06-29, 10:16 pm |
| a) Universal groups are not neccessary in a single domain environment.
b) Universal groups cause an additional load on replication and user authentication.
These are some reasons why you will have to be careful when it comes to creating Universal groups. Know when you absolutely need to use them and really expect to use them extremely sparingly in an exam scenario, if at all. | |
| longshot 2002-07-03, 10:58 pm |
| Also Universal groups are only possible in a native mode domain, I can say that universal groups were not part of any of my designs. I have no idea if they were all correct but I passed. If you just stick to MS "A-G-DL-P" design model you'll do just fine remember "Bill says" don't assign permissions to global groups and don't put users in a domain local. | |
| Tech Ranger 2002-07-04, 6:04 pm |
| Global groups can have members only from the domain where the group resides. Globals can access resources in any domain.
Domain local Groups can have members from any domain, but can access resources only in its own domain.
You want to organize your users into Globals according to the kinds of acess to resources that they will need.
You create Domain Locals basically as receptacles to attach to your resources.
The way you do this in actuality is that you assign permissions to specific resources to these Domain Local groups.
Domain Locals are like sockets sticking out of your resources.
Globals are teams of users you plug into these sockets. | |
| longshot 2002-07-05, 1:18 pm |
| Great explanation Ranger ever considered being an MCT??? |
|
|
|