?
Solved

What is the difference between Domain Local ; Global and Universal Group types in Active Directory 2003?

Posted on 2010-09-04
5
Medium Priority
?
972 Views
Last Modified: 2012-06-22
What is the difference between Domain Local ; Global and Universal Group types in Active Directory 2003?
0
Comment
Question by:moonpavan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 57

Accepted Solution

by:
Mike Kline earned 2000 total points
ID: 33603822
Differences are who can be members, where they can be assigned,  instead of writing it all out just look at this table which shows it all

http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Thanks

Mike
0
 

Author Comment

by:moonpavan
ID: 33603853
Can you explain few differences based on your experience.. I will get links if i perform google.. hence no links please - i already know about the domain group types.. but want to learn some things from AD experts here.
0
 
LVL 57

Expert Comment

by:Mike Kline
ID: 33603891
Well the differences are laid out in the tables;  on thing I'd suggest is don't go crazy with the group nesting.  I see people nesting globals into domain locals even in single domains.   Use group nesting only when necessary, don't want to end up with token bloat (many group memberships assigned to an object)


Thanks

Mike
0
 
LVL 74

Expert Comment

by:Glen Knight
ID: 34689952
This question has been classified as abandoned and is being closed as part of the Cleanup Program. See my comment at the end of the question for more details.
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
After seeing many questions for JRNL_WRAP_ERROR for replication failure, I thought it would be useful to write this article.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

801 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question