Solved

AD Users and Computers

Posted on 2004-08-18
5
165 Views
Last Modified: 2010-04-14
I have another questions regarding AD groups.

I know it is proper to assign Domain Local Groups to the shared resources and then assign Global Groups to the Domain Local Groups.

If I am running in Mixed Mode Single domain environment what would be the norm.  Just to create Global Groups and assign them to the shared resources because DL groups are utilized from what I understand in Mixed mode only native mode.

Thanks
0
Comment
Question by:vivo123
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 85

Expert Comment

by:oBdA
ID: 11835360
In that case, simply use local groups on the machine that hosts the resource; that's the "original" version.
Do you still need to run in mixed mode, that is, do you still have NT4 BDCs left?
0
 

Author Comment

by:vivo123
ID: 11835923
So in the case of a dedicated file server, use the local group from that file server since it hosts all the resources.  Assign that group to the share, set permissions, and then add the global groups to the local group.


not any more..  we are now all W2k


0
 
LVL 85

Accepted Solution

by:
oBdA earned 125 total points
ID: 11836035
Exactly.
If you're all W2k as far as DCs are concerned, you can switch to native mode and use the domain local groups (which have the advantage of being accessible on every machine, unlike the real local groups).
Note that switching to native mode does *not* keep you from having NT4 member servers or workstations in your domain; it will only keep you from having NT4 *DCs*.
0
 

Author Comment

by:vivo123
ID: 11836098
What should I look out for when switching this.. have you seen anything strange before...  Is there a procedure from microsoft for completing this.

Thanks again for your help..
0
 
LVL 85

Expert Comment

by:oBdA
ID: 11836293
As I said: nothing to look out for that I'm aware of, except NT4 BDCs. No procedure to follow, you simply switch over.

Modes Supported by Windows 2000 Domain Controllers
http://support.microsoft.com/?kbid=186153
0

Featured Post

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Article by: Justin
In light of the WannaCry ransomware attack that affected millions of Windows machines, you might wonder if your Mac needs protecting. Yes, it does and here is how to do it.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question