|
Home > Archive > microsoft.public.cert.exams.mcse > December 2002 > Universal Distribution group in a Mixed Mode Domain
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Universal Distribution group in a Mixed Mode Domain
|
|
|
| What is the role for a Universal Distribution group in a Mixed Mode Domain?
Do I have to create them for a particular role? Does Exchange Server 2000
require it?
The problem is that I am just taking over a Windows 2000 network and I am
confused that there are Universal groups configured in a Mixed Mode
environment. Is there anything I should know or just convert them to Global
Groups? The AD is running a Single Domain and Multiple Sites.
| |
| Mark Scott 2002-12-01, 9:23 am |
| there are NO universal groups in a mixed mode AD domain. You only get
universal groups if you go native.
Excahnge server is quite happy with global groups, either security or
distribution losts.
"Ivan" <info@acs-webs.com> wrote in message
news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> What is the role for a Universal Distribution group in a Mixed Mode
Domain?
>
>
>
> Do I have to create them for a particular role? Does Exchange Server 2000
> require it?
>
>
>
> The problem is that I am just taking over a Windows 2000 network and I am
> confused that there are Universal groups configured in a Mixed Mode
> environment. Is there anything I should know or just convert them to
Global
> Groups? The AD is running a Single Domain and Multiple Sites.
>
>
| |
| Bigmaggot 2002-12-01, 10:23 am |
| Universal groups can cross in to other forests and aren't available in Mixed
mode purely cause NT 4 wouldn't know what the hell they are.
Dont forget to add users to Global Groups and then add the global groups to
domain local group, then apply file permissions to those.
User > Global > Domain Local > File Permissions.
Andy
"Ivan" <info@acs-webs.com> wrote in message
news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> What is the role for a Universal Distribution group in a Mixed Mode
Domain?
>
>
>
> Do I have to create them for a particular role? Does Exchange Server 2000
> require it?
>
>
>
> The problem is that I am just taking over a Windows 2000 network and I am
> confused that there are Universal groups configured in a Mixed Mode
> environment. Is there anything I should know or just convert them to
Global
> Groups? The AD is running a Single Domain and Multiple Sites.
>
>
| |
| David J 2002-12-01, 12:23 pm |
| We used the rule AGGDLP ---> Accounts into groups, Groups into Global
Groups (if applicable), Global groups into Domain Local Groups, and that's
where you assign the permissions.
You don't even have the option to have a Universal Group in Mixed modem it's
greyed out.
Bigmaggot is right, NT has no idea what the hell they are.
David
"Bigmaggot" <bigmaggotnews@blueyonder.co.uk> wrote in message
news:VwqG9.6305$Wt1.52217920@news-text.cableinet.net...
> Universal groups can cross in to other forests and aren't available in
Mixed
> mode purely cause NT 4 wouldn't know what the hell they are.
>
> Dont forget to add users to Global Groups and then add the global groups
to
> domain local group, then apply file permissions to those.
>
> User > Global > Domain Local > File Permissions.
>
> Andy
>
> "Ivan" <info@acs-webs.com> wrote in message
> news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> > What is the role for a Universal Distribution group in a Mixed Mode
> Domain?
> >
> >
> >
> > Do I have to create them for a particular role? Does Exchange Server
2000
> > require it?
> >
> >
> >
> > The problem is that I am just taking over a Windows 2000 network and I
am
> > confused that there are Universal groups configured in a Mixed Mode
> > environment. Is there anything I should know or just convert them to
> Global
> > Groups? The AD is running a Single Domain and Multiple Sites.
> >
> >
>
>
| |
| Slick Dick 2002-12-01, 12:23 pm |
| > You don't even have the option to have a Universal Group in Mixed modem
it's
> greyed out.
You can not have Universal SECURITY Groups in mixed mode, but you can have
Universal DISTRIBUTION Groups, and this is what the question was about.
Use distribution groups to send messages (e-mails) to a group of users
instead of sending it to users one by one. It's the only purpouse, so if you
don't need this.....
| |
|
| This is my confusion.
It is possible to have Universal Distribution Groups. I just don't know the
reason the previous Network Administrator has configured them. Is it just at
mistake or this is the way it should be?
Thanks for your help.
"Mark Scott" <mark-scott@blueyonder.co.uk> wrote in message
news:O1HujtUmCHA.2360@tkmsftngp07...
> there are NO universal groups in a mixed mode AD domain. You only get
> universal groups if you go native.
>
> Excahnge server is quite happy with global groups, either security or
> distribution losts.
>
> "Ivan" <info@acs-webs.com> wrote in message
> news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> > What is the role for a Universal Distribution group in a Mixed Mode
> Domain?
> >
> >
> >
> > Do I have to create them for a particular role? Does Exchange Server
2000
> > require it?
> >
> >
> >
> > The problem is that I am just taking over a Windows 2000 network and I
am
> > confused that there are Universal groups configured in a Mixed Mode
> > environment. Is there anything I should know or just convert them to
> Global
> > Groups? The AD is running a Single Domain and Multiple Sites.
> >
> >
>
>
| |
| Slick Dick 2002-12-01, 1:23 pm |
| >
> It is possible to have Universal Distribution Groups. I just don't know
the
> reason the previous Network Administrator has configured them. Is it just
at
> mistake or this is the way it should be?
>
Use distribution groups to send messages (e-mails) to a group of users
instead of sending it to users one by one. It's the only purpouse, so if you
don't need this.....
| |
|
| Thanks for this.
I am aware of this, however it looks like the Administrator of the network
was not aware. I posted this message to find out if there is anything he
knows and I don't know about users and groups. Unfortunately I can't ask him
because he is no longer with the company.
Just to let you know - I was very surprised to discover that there were
Universal Groups in Mixed Mode. They are available only for Distributions
groups, not with the Security Groups. Any ideas?
"Bigmaggot" <bigmaggotnews@blueyonder.co.uk> wrote in message
news:VwqG9.6305$Wt1.52217920@news-text.cableinet.net...
> Universal groups can cross in to other forests and aren't available in
Mixed
> mode purely cause NT 4 wouldn't know what the hell they are.
>
> Dont forget to add users to Global Groups and then add the global groups
to
> domain local group, then apply file permissions to those.
>
> User > Global > Domain Local > File Permissions.
>
> Andy
>
> "Ivan" <info@acs-webs.com> wrote in message
> news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> > What is the role for a Universal Distribution group in a Mixed Mode
> Domain?
> >
> >
> >
> > Do I have to create them for a particular role? Does Exchange Server
2000
> > require it?
> >
> >
> >
> > The problem is that I am just taking over a Windows 2000 network and I
am
> > confused that there are Universal groups configured in a Mixed Mode
> > environment. Is there anything I should know or just convert them to
> Global
> > Groups? The AD is running a Single Domain and Multiple Sites.
> >
> >
>
>
| |
|
| The Universal Groups is Greyed out only for Security Groups. It is available
for Distribution groups.
My question is all about this "abnormal" setup. I didn't set it up but I can
see it existing.
It looks like they left the AD in mixed mode after they upgraded all DCs to
Windows 2000. There are no Windows NT DCs at the moment. I am not sure what
to do with the Universal Groups in Mixed Mode - shall I remove them before
switch to Native Mode?
"David J" <jacobucci@shaw.ca> wrote in message
news:y1sG9.142343$ka.3205866@news1.calgary.shaw.ca...
> We used the rule AGGDLP ---> Accounts into groups, Groups into Global
> Groups (if applicable), Global groups into Domain Local Groups, and that's
> where you assign the permissions.
>
> You don't even have the option to have a Universal Group in Mixed modem
it's
> greyed out.
> Bigmaggot is right, NT has no idea what the hell they are.
> David
>
>
> "Bigmaggot" <bigmaggotnews@blueyonder.co.uk> wrote in message
> news:VwqG9.6305$Wt1.52217920@news-text.cableinet.net...
> > Universal groups can cross in to other forests and aren't available in
> Mixed
> > mode purely cause NT 4 wouldn't know what the hell they are.
> >
> > Dont forget to add users to Global Groups and then add the global groups
> to
> > domain local group, then apply file permissions to those.
> >
> > User > Global > Domain Local > File Permissions.
> >
> > Andy
> >
> > "Ivan" <info@acs-webs.com> wrote in message
> > news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> > > What is the role for a Universal Distribution group in a Mixed Mode
> > Domain?
> > >
> > >
> > >
> > > Do I have to create them for a particular role? Does Exchange Server
> 2000
> > > require it?
> > >
> > >
> > >
> > > The problem is that I am just taking over a Windows 2000 network and I
> am
> > > confused that there are Universal groups configured in a Mixed Mode
> > > environment. Is there anything I should know or just convert them to
> > Global
> > > Groups? The AD is running a Single Domain and Multiple Sites.
> > >
> > >
> >
> >
>
>
| |
|
| Thanks for this.
I am confused by the fact that there are Universal Groups used in Mixed Mode
AD. Would it be more appropriate to have Global Distribution groups than
Universal Distribution groups in my case considering that we are using a
single domain? Are there any advantages using Universal Distribution groups
in comparesement to the Global Distribution Groups.
"Slick Dick" <ye@h.right> wrote in message
news:GqsG9.1720$ZL2.86744@juliett.dax.net...
> > You don't even have the option to have a Universal Group in Mixed modem
> it's
> > greyed out.
>
> You can not have Universal SECURITY Groups in mixed mode, but you can have
> Universal DISTRIBUTION Groups, and this is what the question was about.
>
> Use distribution groups to send messages (e-mails) to a group of users
> instead of sending it to users one by one. It's the only purpouse, so if
you
> don't need this.....
>
>
| |
| Bigmaggot 2002-12-02, 5:23 am |
| Having the Universal groups in mixed mode is not a problem, I would change
it if your not connected up to different forests as there is no need for it.
I would also upgrade to Native if you dont have any BDCs or plan to use any
BDCs.
Andy
"Ivan" <info@acs-webs.com> wrote in message
news:3dea59a9$0$107$65c69314@m
ercury.nildram.net...
> The Universal Groups is Greyed out only for Security Groups. It is
available
> for Distribution groups.
>
> My question is all about this "abnormal" setup. I didn't set it up but I
can
> see it existing.
>
> It looks like they left the AD in mixed mode after they upgraded all DCs
to
> Windows 2000. There are no Windows NT DCs at the moment. I am not sure
what
> to do with the Universal Groups in Mixed Mode - shall I remove them before
> switch to Native Mode?
>
>
>
> "David J" <jacobucci@shaw.ca> wrote in message
> news:y1sG9.142343$ka.3205866@news1.calgary.shaw.ca...
> > We used the rule AGGDLP ---> Accounts into groups, Groups into Global
> > Groups (if applicable), Global groups into Domain Local Groups, and
that's
> > where you assign the permissions.
> >
> > You don't even have the option to have a Universal Group in Mixed modem
> it's
> > greyed out.
>
>
> > Bigmaggot is right, NT has no idea what the hell they are.
> > David
> >
> >
> > "Bigmaggot" <bigmaggotnews@blueyonder.co.uk> wrote in message
> > news:VwqG9.6305$Wt1.52217920@news-text.cableinet.net...
> > > Universal groups can cross in to other forests and aren't available in
> > Mixed
> > > mode purely cause NT 4 wouldn't know what the hell they are.
> > >
> > > Dont forget to add users to Global Groups and then add the global
groups
> > to
> > > domain local group, then apply file permissions to those.
> > >
> > > User > Global > Domain Local > File Permissions.
> > >
> > > Andy
> > >
> > > "Ivan" <info@acs-webs.com> wrote in message
> > > news:3dea09a6$0$115$65c69314@m
ercury.nildram.net...
> > > > What is the role for a Universal Distribution group in a Mixed Mode
> > > Domain?
> > > >
> > > >
> > > >
> > > > Do I have to create them for a particular role? Does Exchange Server
> > 2000
> > > > require it?
> > > >
> > > >
> > > >
> > > > The problem is that I am just taking over a Windows 2000 network and
I
> > am
> > > > confused that there are Universal groups configured in a Mixed Mode
> > > > environment. Is there anything I should know or just convert them to
> > > Global
> > > > Groups? The AD is running a Single Domain and Multiple Sites.
> > > >
> > > >
> > >
> > >
> >
> >
>
>
| |
| Slick Dick 2002-12-02, 12:23 pm |
| >Are there any advantages using Universal Distribution groups
> in comparesement to the Global Distribution Groups.
>
As Bigmaggot says, Universal Groups are used across different forests. If
you don't have more than one forest, you don't need Universal Groups.
| |
| Tom Helms 2002-12-02, 12:23 pm |
| Universal groups are used across multiple domains in the same forest.
"Slick Dick" <ye@h.right> wrote in message
news:E2NG9.1908$ZL2.91429@juliett.dax.net...
> >Are there any advantages using Universal Distribution groups
> > in comparesement to the Global Distribution Groups.
> >
>
> As Bigmaggot says, Universal Groups are used across different forests. If
> you don't have more than one forest, you don't need Universal Groups.
>
>
| |
| Slick Dick 2002-12-02, 1:23 pm |
| > Universal groups are used across multiple domains in the same forest.
>
Sorry, my mistake.
Here is something about using universal groups from W2K help:
"Use groups with universal scope to consolidate groups that span domains. To
do this, add the accounts to groups with global scope and nest these groups
within groups having universal scope. Using this strategy, any membership
changes in the groups having global scope do not affect the groups with
universal scope.
For example, in a network with two domains, Europe and NorthAmerica, and a
group having global scope called GLAccounting in each domain, create a group
with universal scope called UAccounting to have as its members the two
GLAccounting groups, NorthAmerica\GLAccounting and Europe\GLAccounting. The
UAccounting group can then be used anywhere in the enterprise. Any changes
in the membership of the individual GLAccounting groups will not cause
replication of the UAccounting group."
Also from W2K help, definition of Universal Groups:
"A security or distribution group that can be used anywhere in the domain
tree or forest.
A universal group can have members from any Windows 2000 domain in the
domain tree or forest. It can also include other universal groups, global
groups, and accounts from any domain in the domain tree or forest. Rights
and permissions must be assigned on a per-domain basis, but can be assigned
at any domain in the domain tree or forest.
Universal groups can be members of domain local groups and other universal
groups but cannot be members of global groups. Universal groups appear in
the global catalog and should contain primarily global groups."
| |
|
| Thanks
This is very useful.
"Slick Dick" <ye@h.right> wrote in message
news:aTNG9.1920$ZL2.91651@juliett.dax.net...
> > Universal groups are used across multiple domains in the same forest.
> >
>
> Sorry, my mistake.
> Here is something about using universal groups from W2K help:
>
> "Use groups with universal scope to consolidate groups that span domains.
To
> do this, add the accounts to groups with global scope and nest these
groups
> within groups having universal scope. Using this strategy, any membership
> changes in the groups having global scope do not affect the groups with
> universal scope.
>
> For example, in a network with two domains, Europe and NorthAmerica, and a
> group having global scope called GLAccounting in each domain, create a
group
> with universal scope called UAccounting to have as its members the two
> GLAccounting groups, NorthAmerica\GLAccounting and Europe\GLAccounting.
The
> UAccounting group can then be used anywhere in the enterprise. Any changes
> in the membership of the individual GLAccounting groups will not cause
> replication of the UAccounting group."
>
> Also from W2K help, definition of Universal Groups:
>
> "A security or distribution group that can be used anywhere in the domain
> tree or forest.
> A universal group can have members from any Windows 2000 domain in the
> domain tree or forest. It can also include other universal groups, global
> groups, and accounts from any domain in the domain tree or forest. Rights
> and permissions must be assigned on a per-domain basis, but can be
assigned
> at any domain in the domain tree or forest.
> Universal groups can be members of domain local groups and other universal
> groups but cannot be members of global groups. Universal groups appear in
> the global catalog and should contain primarily global groups."
>
>
>
>
>
>
>
>
>
|
|
|
|
|