TrevorWhite
asked on
What is an SBS2003 Default Security Group (in context of SBS2008 migration) ?
Hi Guys,
I'm preparing for my first SBS2003 to SBS2008 migration so plouighing through all of the suggested documentation according to Microsoft. Part of the preparatory work is to establish a Domain Administrators login on the source (SBS2003) server, no probs. But the following has me confused, it states in http://technet.microsoft.com/en-us/library/cc527566(WS.10).aspx that:
"This account must be a member of the Domain Admins, Enterprise Admins, and Schema Admins groups. However, the default security group for the account cannot be one of these three groups."
Does an account have a default security group and how do you tell which group is the default. I feel as though I'm being thick but I don't want to start this process with any misunderstanding so can anyone help out here.
Regards
Trevor
I
I'm preparing for my first SBS2003 to SBS2008 migration so plouighing through all of the suggested documentation according to Microsoft. Part of the preparatory work is to establish a Domain Administrators login on the source (SBS2003) server, no probs. But the following has me confused, it states in http://technet.microsoft.com/en-us/library/cc527566(WS.10).aspx that:
"This account must be a member of the Domain Admins, Enterprise Admins, and Schema Admins groups. However, the default security group for the account cannot be one of these three groups."
Does an account have a default security group and how do you tell which group is the default. I feel as though I'm being thick but I don't want to start this process with any misunderstanding so can anyone help out here.
Regards
Trevor
I
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi NJ
Thanks for that (you have the points) - MS could have helped if they kept the terminology the same (Default v Primary) as a suplimentary what function does the Primary group serve?? - I'd have thought that all groups would need to be treated equally or be ordered entirely instead of one entry receiving special status of Primary.
I was aware of the recommenedation to create a specific account for the migration - but needed the default business sorting before creating it. This actually implies that the account must belong to some other security group as well - presumably domain users.
Thanks for not rubbing my nose in the obvious.
Regards
Trev
Thanks for that (you have the points) - MS could have helped if they kept the terminology the same (Default v Primary) as a suplimentary what function does the Primary group serve?? - I'd have thought that all groups would need to be treated equally or be ordered entirely instead of one entry receiving special status of Primary.
I was aware of the recommenedation to create a specific account for the migration - but needed the default business sorting before creating it. This actually implies that the account must belong to some other security group as well - presumably domain users.
Thanks for not rubbing my nose in the obvious.
Regards
Trev
ASKER
Always nice to not have ones nose rubbed in the obvious - thanks NJ
Trev
Trev
I;ve never had to mess with the primary group.. it appears this is only done if you have Mac clients or POSIX-compliant applications
ss.jpg
ss.jpg
ASKER
Hmmm would still be interesting to know what the concept of a default security group was for - it obviously has some significance otherwise why mention this in the SBS2008 migration blurb ??
Thanks again.
Trev
Thanks again.
Trev
Note
It is recommended that you create a new administrator account on the Source Server for migration instead of using the built-in Administrator account.
YEs, a user has a default group...