[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 624
  • Last Modified:

What is an SBS2003 Default Security Group (in context of SBS2008 migration) ?

Hi Guys,

I'm preparing for my first SBS2003 to SBS2008 migration so plouighing through all of the suggested documentation according to Microsoft. Part of the preparatory work is to establish a Domain Administrators login on the source (SBS2003) server, no probs. But the following has me confused, it states in http://technet.microsoft.com/en-us/library/cc527566(WS.10).aspx that:

"This account must be a member of the Domain Admins, Enterprise Admins, and Schema Admins groups. However, the default security group for the account cannot be one of these three groups."

Does an account have a default security group and how do you tell which group is the default. I feel as though I'm being thick but I don't want to start this process with any misunderstanding so can anyone help out here.

Regards
Trevor
I
0
TrevorWhite
Asked:
TrevorWhite
  • 3
  • 3
1 Solution
 
NJComputerNetworksCommented:
I would create an additional account (for migration purposes) and make it a member of the Domain, Enterprise, and Schema admins groups...  This is recommended:

Note  
It is recommended that you create a new administrator account on the Source Server for migration instead of using the built-in Administrator account.

YEs, a user has a default group...
0
 
NJComputerNetworksCommented:
Primary Group shown...in AD Users and Computer... users profile
group.jpg
0
 
TrevorWhiteAuthor Commented:
Hi NJ
Thanks for that (you have the points) - MS could have helped if they kept the terminology the same (Default v Primary) as a suplimentary what function does the Primary group serve?? - I'd have thought that all groups would need to be treated equally or be ordered entirely instead of one entry receiving special status of Primary.

I was aware of the recommenedation to create a specific account for the migration - but needed the default business sorting before creating it. This actually implies that the account must belong to some other security group as well - presumably domain users.

Thanks for not rubbing my nose in the obvious.

Regards
Trev
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
TrevorWhiteAuthor Commented:
Always nice to not have ones nose rubbed in the obvious - thanks NJ
Trev
0
 
NJComputerNetworksCommented:
I;ve never had to mess with the primary group.. it appears this is only done if you have Mac clients or POSIX-compliant applications
ss.jpg
0
 
TrevorWhiteAuthor Commented:
Hmmm would still be interesting to know what the concept of a default security group was for - it obviously has some significance otherwise why mention this in the SBS2008 migration blurb ??

Thanks again.
Trev
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now