asked on

AD Users and Computers

I have another questions regarding AD groups.

I know it is proper to assign Domain Local Groups to the shared resources and then assign Global Groups to the Domain Local Groups.

If I am running in Mixed Mode Single domain environment what would be the norm. Just to create Global Groups and assign them to the shared resources because DL groups are utilized from what I understand in Mixed mode only native mode.

Thanks

oBdA

In that case, simply use local groups on the machine that hosts the resource; that's the "original" version.
Do you still need to run in mixed mode, that is, do you still have NT4 BDCs left?

vivo123

ASKER

So in the case of a dedicated file server, use the local group from that file server since it hosts all the resources. Assign that group to the share, set permissions, and then add the global groups to the local group.

not any more.. we are now all W2k

ASKER CERTIFIED SOLUTION

oBdA

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

vivo123

ASKER

What should I look out for when switching this.. have you seen anything strange before... Is there a procedure from microsoft for completing this.

Thanks again for your help..

oBdA

As I said: nothing to look out for that I'm aware of, except NT4 BDCs. No procedure to follow, you simply switch over.

Modes Supported by Windows 2000 Domain Controllers
http://support.microsoft.com/?kbid=186153