Universal Groups?


2 Sites, once single domain, both sites have 2 DC's, are on seperate subnets and are linked by a dedicate line.

A user in site B wants to access data held on a sever in site A.  What type of security group should we apply to the resource in site A ?


Marion.

 
MarionTaylorAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Pete LongTechnical ConsultantCommented:
TO be honest it doesnt matter you only have one domain :)

But the (Microsoft) Answer would be to create a LOCAL security group and give is access to the data - then create a Global group and put user A in it.

Then put the global group in the Local group. Worry About Universal groups if you have multiple Forests, Trees and non contigious namespaces in your domain.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Jay_Jay70Commented:
Hi MarionTaylor,

as you are in a sinlge domain this doesnt really matter - your group types come more into play with multiple domain environments or child domains etc

you share a directory so its easy enough to just add either the user or a domain local group into the permissions

Cheers!
0
Jay_Jay70Commented:
lol I've done it again Pete.. need to learn to refresh!
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

Pete LongTechnical ConsultantCommented:
:) Ah It is saturday morning mate - Grab a coffee :)
0
Jay_Jay70Commented:
Saturday morning! Saturday night in Australia my friend, im about to go out!

0
Pete LongTechnical ConsultantCommented:
Sorted that means Ive got more weekend than you  :) Well Have a Vodka for me I'll be following suit in about 10 hours LOL
0
Jay_Jay70Commented:
ah toushe but i scored two days off for anzac day long weekend! i shall be paying a visit to Mr J. Daniels tonight, ill raise one for ya :)
0
Pete LongTechnical ConsultantCommented:
TipTop
0
Rant32Commented:
If you need a security group that's not mail enabled then create local or global groups (See PeteLong).

If the group is to be mail-enabled (for Exchange) then best practice is to use Universal groups.
0
MarionTaylorAuthor Commented:
Thanks everyone.


 Marion.
0
Pete LongTechnical ConsultantCommented:
ThanQ
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.