Link to home
Start Free TrialLog in
Avatar of Albert Widjaja
Albert WidjajaFlag for Australia

asked on

The difference between Global and Universal nested group in single domain ?

Hi People,

Can anyone please assist me in explaining what's the difference in creating Security group with the type Global or Universal ?

in my company, there is only one AD domain, the AD security group is usually created to logically group multiple AD accounts to be a local administrator of several production servers (to be put into ServerName\Administrators group).

In this case, which type should I create ?
Does the Local Administrator group can read the nested AD group with more than 3 levels deep ?
SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Albert Widjaja

ASKER

Cool, so in this case for the Local Administrator, it can be any type of group Universal or Global ?
eventhough it is nested, the local administrator group permission should be applicable. is that correct ?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
thanks guys.

so which combination of nested group type doesn't work for local admin in a server ?
Thanks guys !