Adding user groups to other groups? (aka subgroups)

If I have 2 different user security groups is it possible to create a 3rd group that includes the first 2?

Ex.
We have 3 groups: Management, Accounting, and Payroll

Is there anyway I can add the Management Group/Users and the Accounting Group/Users to the Payroll group so anywhere that required you to be a member of the payroll group would automagicaly allow any management and/or accounting staff??

Thanks
EHart7Asked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
DifladermausConnect With a Mentor Commented:
Yes, forinstance you could make management a member of the payroll and accounting groups.

Dif
0
 
EHart7Author Commented:
How? Whenever I create the payroll security group it will only let me add users from what I can tell (it definitely won't let me add the security group for management or payroll)
0
 
oceanjimConnect With a Mentor Commented:
If you create a Domain Local (DL) Group you can add other groups.
Of course you now would have a DL group instead of a Global Group.
0
Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

 
EHart7Author Commented:
oceanjim, what is the difference between a local/global group?
0
 
oceanjimCommented:
The text below was taken from http://technet.microsoft.com/en-us/library/bb726978.aspx

Domain local groups: Groups that are used to grant permissions within a single domain. Members of domain local groups can include only accounts (both user and computer accounts) and groups from the domain in which they are defined.

Global groups Groups: that are used to grant permissions to objects in any domain in the domain tree or forest. Members of global groups can include only accounts and groups from the domain in which they are defined.

Universal groups Groups: that are used to grant permissions on a wide scale throughout a domain tree or forest. Members of global groups include accounts and groups from any domain in the domain tree or forest.
0
 
msguru85Commented:
Open active directory user and computers, create the payroll security group as domain local group.
For each group you want to add to the payroll group, right click on the group object and select properties, select the "member of" tab, and add  the payroll group to the list.
0
All Courses

From novice to tech pro — start learning today.