Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.
One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.
AD Users and Computers
I have another questions regarding AD groups.
I know it is proper to assign Domain Local Groups to the shared resources and then assign Global Groups to the Domain Local Groups.
If I am running in Mixed Mode Single domain environment what would be the norm. Just to create Global Groups and assign them to the shared resources because DL groups are utilized from what I understand in Mixed mode only native mode.
Thanks
I know it is proper to assign Domain Local Groups to the shared resources and then assign Global Groups to the Domain Local Groups.
If I am running in Mixed Mode Single domain environment what would be the norm. Just to create Global Groups and assign them to the shared resources because DL groups are utilized from what I understand in Mixed mode only native mode.
Thanks
Asked:
-
3
-
2
1 Solution
So in the case of a dedicated file server, use the local group from that file server since it hosts all the resources. Assign that group to the share, set permissions, and then add the global groups to the local group.
not any more.. we are now all W2k
not any more.. we are now all W2k
Exactly.
If you're all W2k as far as DCs are concerned, you can switch to native mode and use the domain local groups (which have the advantage of being accessible on every machine, unlike the real local groups).
Note that switching to native mode does *not* keep you from having NT4 member servers or workstations in your domain; it will only keep you from having NT4 *DCs*.
If you're all W2k as far as DCs are concerned, you can switch to native mode and use the domain local groups (which have the advantage of being accessible on every machine, unlike the real local groups).
Note that switching to native mode does *not* keep you from having NT4 member servers or workstations in your domain; it will only keep you from having NT4 *DCs*.
What should I look out for when switching this.. have you seen anything strange before... Is there a procedure from microsoft for completing this.
Thanks again for your help..
Thanks again for your help..
As I said: nothing to look out for that I'm aware of, except NT4 BDCs. No procedure to follow, you simply switch over.
Modes Supported by Windows 2000 Domain Controllers
http://support.microsoft.com/?kbid=186153
Modes Supported by Windows 2000 Domain Controllers
http://support.microsoft.com/?kbid=186153
Question has a verified solution.
Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.
Have a better answer? Share it in a comment.
Join & Write a Comment Already a member? Login.
Featured Post
Tackle projects and never again get stuck behind a technical roadblock.
Join Now
Do you still need to run in mixed mode, that is, do you still have NT4 BDCs left?