Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 187
  • Last Modified:

Universal Groups?


2 Sites, once single domain, both sites have 2 DC's, are on seperate subnets and are linked by a dedicate line.

A user in site B wants to access data held on a sever in site A.  What type of security group should we apply to the resource in site A ?


Marion.

 
0
MarionTaylor
Asked:
MarionTaylor
1 Solution
 
Pete LongConsultantCommented:
TO be honest it doesnt matter you only have one domain :)

But the (Microsoft) Answer would be to create a LOCAL security group and give is access to the data - then create a Global group and put user A in it.

Then put the global group in the Local group. Worry About Universal groups if you have multiple Forests, Trees and non contigious namespaces in your domain.
0
 
Jay_Jay70Commented:
Hi MarionTaylor,

as you are in a sinlge domain this doesnt really matter - your group types come more into play with multiple domain environments or child domains etc

you share a directory so its easy enough to just add either the user or a domain local group into the permissions

Cheers!
0
 
Jay_Jay70Commented:
lol I've done it again Pete.. need to learn to refresh!
0
 [eBook] Windows Nano Server

Download this FREE eBook and learn all you need to get started with Windows Nano Server, including deployment options, remote management
and troubleshooting tips and tricks

 
Pete LongConsultantCommented:
:) Ah It is saturday morning mate - Grab a coffee :)
0
 
Jay_Jay70Commented:
Saturday morning! Saturday night in Australia my friend, im about to go out!

0
 
Pete LongConsultantCommented:
Sorted that means Ive got more weekend than you  :) Well Have a Vodka for me I'll be following suit in about 10 hours LOL
0
 
Jay_Jay70Commented:
ah toushe but i scored two days off for anzac day long weekend! i shall be paying a visit to Mr J. Daniels tonight, ill raise one for ya :)
0
 
Pete LongConsultantCommented:
TipTop
0
 
Rant32Commented:
If you need a security group that's not mail enabled then create local or global groups (See PeteLong).

If the group is to be mail-enabled (for Exchange) then best practice is to use Universal groups.
0
 
MarionTaylorAuthor Commented:
Thanks everyone.


 Marion.
0
 
Pete LongConsultantCommented:
ThanQ
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now