Link to home
Start Free TrialLog in
Avatar of TrevorWhite
TrevorWhiteFlag for United Kingdom of Great Britain and Northern Ireland

asked on

What is an SBS2003 Default Security Group (in context of SBS2008 migration) ?

Hi Guys,

I'm preparing for my first SBS2003 to SBS2008 migration so plouighing through all of the suggested documentation according to Microsoft. Part of the preparatory work is to establish a Domain Administrators login on the source (SBS2003) server, no probs. But the following has me confused, it states in http://technet.microsoft.com/en-us/library/cc527566(WS.10).aspx that:

"This account must be a member of the Domain Admins, Enterprise Admins, and Schema Admins groups. However, the default security group for the account cannot be one of these three groups."

Does an account have a default security group and how do you tell which group is the default. I feel as though I'm being thick but I don't want to start this process with any misunderstanding so can anyone help out here.

Regards
Trevor
I
Avatar of NJComputerNetworks
NJComputerNetworks
Flag of United States of America image

I would create an additional account (for migration purposes) and make it a member of the Domain, Enterprise, and Schema admins groups...  This is recommended:

Note  
It is recommended that you create a new administrator account on the Source Server for migration instead of using the built-in Administrator account.

YEs, a user has a default group...
ASKER CERTIFIED SOLUTION
Avatar of NJComputerNetworks
NJComputerNetworks
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of TrevorWhite

ASKER

Hi NJ
Thanks for that (you have the points) - MS could have helped if they kept the terminology the same (Default v Primary) as a suplimentary what function does the Primary group serve?? - I'd have thought that all groups would need to be treated equally or be ordered entirely instead of one entry receiving special status of Primary.

I was aware of the recommenedation to create a specific account for the migration - but needed the default business sorting before creating it. This actually implies that the account must belong to some other security group as well - presumably domain users.

Thanks for not rubbing my nose in the obvious.

Regards
Trev
Always nice to not have ones nose rubbed in the obvious - thanks NJ
Trev
I;ve never had to mess with the primary group.. it appears this is only done if you have Mac clients or POSIX-compliant applications
ss.jpg
Hmmm would still be interesting to know what the concept of a default security group was for - it obviously has some significance otherwise why mention this in the SBS2008 migration blurb ??

Thanks again.
Trev