Avatar of Amj002
Amj002
 asked on

Groups on Active Directory

Dear Experts,

After creatig a group on active directory and add users on it, i am trying to give for folder permission just for this group <=> but the permission doest not work and if iam trying to give permission by adding just the users and not groups it wotk normally.

My target is to create groups of users in order to give access on folders and to outsources by using groups not users.

Is there any idea about this state because i am sure i did something on wrong way if any one have anu idea about this point or have procedure kindly help me.

Thanks

Active Directory

Avatar of undefined
Last Comment
Adam Brown

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Benjamin MOREAU

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Amj002

ASKER


If i have one forest and domain controller should create the group as Universal ot global?/
Benjamin MOREAU

A Universal group is for inter-domain. If you have only 1 forest & 1 domain, you can use Global Group.
josika

Once you add a user to a group, the user needs to log out and back in for the group membership to be re-cached.  Once they do this, the permissions should be applied properly.

You should use global groups since all permissions are being applied inside of one domain.  Universal groups would be used to apply permissions in another domain in the same forest.  If you plan on expanding your AD structure and add more domains and need to apply permissions across them then you would want to create Universal groups.  Either way, the type of group can be changed at any time.

As a rule of thumb, do not create a Universal group where you do not need to, it will just increase the amount of work (unnecessarily) a global catalog server will need to do.
Your help has saved me hundreds of hours of internet surfing.
fblack61
Adam Brown

If you have a single domain and forest, it doesn't matter which group type you use. They all operate the same in that situation. If you have multiple domain controllers, you would want to avoid using universal groups because of the replication requirements for them.