Ok, I know this may seem like a basic question for a lot of you out there, but I need help with groups. You see, I'm studing for 219 right now and I always get groups wrong in my design plan. I use universal when I should use global and global when I should use domain local. I know domain local is for assigning permissions to resources. But in my book it says global groups can be used to group together "members of the domain in which teh global group is created and members from other domains." Why then would this not be considered a global group?? Wouldn't this be universal since members form other domains can join the group?? Like I said, I am very confused. It is doubly frustrating because while studying for 217 (which I passed) I got every question on groups right, so I don't see how they could change that quickly. Thanks for all your help. I'm taking the test 7/6/2002, so I'm really studying like mad.

__________________
"I think there is a world market for maybe ten computers"
-Tom Watson, founder of IBM

Report this post to a moderator

a) Universal groups are not neccessary in a single domain environment.
b) Universal groups cause an additional load on replication and user authentication.
These are some reasons why you will have to be careful when it comes to creating Universal groups. Know when you absolutely need to use them and really expect to use them extremely sparingly in an exam scenario, if at all.

Report this post to a moderator

Also Universal groups are only possible in a native mode domain, I can say that universal groups were not part of any of my designs. I have no idea if they were all correct but I passed. If you just stick to MS "A-G-DL-P" design model you'll do just fine remember "Bill says" don't assign permissions to global groups and don't put users in a domain local.

__________________
"Democracy is two wolves and a sheep discussing what is for dinner, Liberty is a well armed sheep willing to challenge the majority decision"
Ben Franklin

Report this post to a moderator

Global groups can have members only from the domain where the group resides. Globals can access resources in any domain.
Domain local Groups can have members from any domain, but can access resources only in its own domain.
You want to organize your users into Globals according to the kinds of acess to resources that they will need.
You create Domain Locals basically as receptacles to attach to your resources.
The way you do this in actuality is that you assign permissions to specific resources to these Domain Local groups.
Domain Locals are like sockets sticking out of your resources.
Globals are teams of users you plug into these sockets.

__________________
The Computer is a creation of man. Man is a creation of God! -
Joe from Brooklyn

Last edited by Tech Ranger on 07-05-02 at 11:18 PM

Report this post to a moderator

Great explanation Ranger ever considered being an MCT???

__________________
"Democracy is two wolves and a sheep discussing what is for dinner, Liberty is a well armed sheep willing to challenge the majority decision"
Ben Franklin

Report this post to a moderator