What is an SBS2003 Default Security Group (in context of SBS2008 migration) ?

Hi Guys,

I'm preparing for my first SBS2003 to SBS2008 migration so plouighing through all of the suggested documentation according to Microsoft. Part of the preparatory work is to establish a Domain Administrators login on the source (SBS2003) server, no probs. But the following has me confused, it states in http://technet.microsoft.com/en-us/library/cc527566(WS.10).aspx that:

"This account must be a member of the Domain Admins, Enterprise Admins, and Schema Admins groups. However, the default security group for the account cannot be one of these three groups."

Does an account have a default security group and how do you tell which group is the default. I feel as though I'm being thick but I don't want to start this process with any misunderstanding so can anyone help out here.

Regards
Trevor
I
TrevorWhiteIT ConsultantAsked:
Who is Participating?
 
NJComputerNetworksCommented:
Primary Group shown...in AD Users and Computer... users profile
group.jpg
0
 
NJComputerNetworksCommented:
I would create an additional account (for migration purposes) and make it a member of the Domain, Enterprise, and Schema admins groups...  This is recommended:

Note  
It is recommended that you create a new administrator account on the Source Server for migration instead of using the built-in Administrator account.

YEs, a user has a default group...
0
 
TrevorWhiteIT ConsultantAuthor Commented:
Hi NJ
Thanks for that (you have the points) - MS could have helped if they kept the terminology the same (Default v Primary) as a suplimentary what function does the Primary group serve?? - I'd have thought that all groups would need to be treated equally or be ordered entirely instead of one entry receiving special status of Primary.

I was aware of the recommenedation to create a specific account for the migration - but needed the default business sorting before creating it. This actually implies that the account must belong to some other security group as well - presumably domain users.

Thanks for not rubbing my nose in the obvious.

Regards
Trev
0
On-Demand: Securing Your Wi-Fi for Summer Travel

Traveling this summer?Check out our on-demand webinar to learn about the importance of Wi-Fi security and 3 easy measures you can start taking immediately to protect your private data while using public Wi-Fi. Follow us today to learn more!

 
TrevorWhiteIT ConsultantAuthor Commented:
Always nice to not have ones nose rubbed in the obvious - thanks NJ
Trev
0
 
NJComputerNetworksCommented:
I;ve never had to mess with the primary group.. it appears this is only done if you have Mac clients or POSIX-compliant applications
ss.jpg
0
 
TrevorWhiteIT ConsultantAuthor Commented:
Hmmm would still be interesting to know what the concept of a default security group was for - it obviously has some significance otherwise why mention this in the SBS2008 migration blurb ??

Thanks again.
Trev
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.