Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Active Directory Groups question
Active Directory Groups question [message #156614] Mon, 22 June 2009 10:50 Go to next message
Andy Siegel  is currently offline Andy Siegel
Messages: 17
Registered: July 2009
Junior Member
I have a few groups that I would like to clean up, but I want to make sure
that my understanding is correct.

I have a couple Global Security Groups called Elec Admin and Electric Admin.
I also have a Universal Security Group called Public Utilities. All the
same people are in all three groups. I also have a Universal Distribution
group called Electric Administration Department - same people.

Please correct me if my understanding is incorrect. If I create a Universal
Security Group and give it an e-mail address, I should be able to eliminate
the global security groups and the distribution group, correct? I would
prefer to have one group per department that can serve as a security group
and a distripution group for exchange. I'd like to clean up AD and this will
be a big step.

Thank you.
Andy Siegel
Dover, DE
Re: Active Directory Groups question [message #156615 is a reply to message #156614] Mon, 22 June 2009 11:08 Go to previous messageGo to next message
aceman  is currently offline aceman  United States
Messages: 5816
Registered: July 2009
Senior Member
"Andy Siegel" <AndySiegel@discussions.microsoft.com> wrote in message
news:76BA4508-0C6A-4080-B94D-3DF8944E64ED@microsoft.com...
>I have a few groups that I would like to clean up, but I want to make sure
> that my understanding is correct.
>
> I have a couple Global Security Groups called Elec Admin and Electric
> Admin.
> I also have a Universal Security Group called Public Utilities. All the
> same people are in all three groups. I also have a Universal Distribution
> group called Electric Administration Department - same people.
>
> Please correct me if my understanding is incorrect. If I create a
> Universal
> Security Group and give it an e-mail address, I should be able to
> eliminate
> the global security groups and the distribution group, correct? I would
> prefer to have one group per department that can serve as a security group
> and a distripution group for exchange. I'd like to clean up AD and this
> will
> be a big step.
>
> Thank you.
> Andy Siegel
> Dover, DE


That's correct. You can create a Universal Security Group and mail enable
it. Effectively it can be used to control resource access, as well as users
can select it in the GAL to mail to, eliminating the need for the other two
groups.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among
responding engineers, as well as to help others benefit from your
resolution.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org
http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Re: Active Directory Groups question [message #156616 is a reply to message #156615] Mon, 22 June 2009 11:18 Go to previous messageGo to next message
Andy Siegel  is currently offline Andy Siegel
Messages: 17
Registered: July 2009
Junior Member
I have a single forest - single domain. What's the difference between Global
and Universal?

"Ace Fekay [Microsoft Certified Trainer]" wrote:

> "Andy Siegel" <AndySiegel@discussions.microsoft.com> wrote in message
> news:76BA4508-0C6A-4080-B94D-3DF8944E64ED@microsoft.com...
> >I have a few groups that I would like to clean up, but I want to make sure
> > that my understanding is correct.
> >
> > I have a couple Global Security Groups called Elec Admin and Electric
> > Admin.
> > I also have a Universal Security Group called Public Utilities. All the
> > same people are in all three groups. I also have a Universal Distribution
> > group called Electric Administration Department - same people.
> >
> > Please correct me if my understanding is incorrect. If I create a
> > Universal
> > Security Group and give it an e-mail address, I should be able to
> > eliminate
> > the global security groups and the distribution group, correct? I would
> > prefer to have one group per department that can serve as a security group
> > and a distripution group for exchange. I'd like to clean up AD and this
> > will
> > be a big step.
> >
> > Thank you.
> > Andy Siegel
> > Dover, DE
>
>
> That's correct. You can create a Universal Security Group and mail enable
> it. Effectively it can be used to control resource access, as well as users
> can select it in the GAL to mail to, eliminating the need for the other two
> groups.
>
> --
> Ace
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Please reply back to the newsgroup/forum to benefit from collaboration among
> responding engineers, as well as to help others benefit from your
> resolution.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
> Microsoft Certified Trainer
> aceman@mvps.RemoveThisPart.org
> http://twitter.com/acefekay
>
> For urgent issues, you may want to contact Microsoft PSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
>
Re: Active Directory Groups question [message #156617 is a reply to message #156616] Mon, 22 June 2009 11:43 Go to previous messageGo to next message
rlmueller-nospam  is currently offline rlmueller-nospam  United States
Messages: 292
Registered: July 2009
Senior Member
Universal groups are generally not used if there is a single domain. With a
single domain, there really is no difference, except a universal group
cannot be a member of a global group and a Global Catalog might be required
during logon to determine membership in universal groups. It could be best
to convert the group to global.

Also, while only one group is necessary in your situation, if you delete a
security group any permissions granted to the group will be lost.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--

"Andy Siegel" <AndySiegel@discussions.microsoft.com> wrote in message
news:8AD2F78E-3441-4E6F-B39B-CFEA49126D41@microsoft.com...
>I have a single forest - single domain. What's the difference between
>Global
> and Universal?
>
> "Ace Fekay [Microsoft Certified Trainer]" wrote:
>
>> "Andy Siegel" <AndySiegel@discussions.microsoft.com> wrote in message
>> news:76BA4508-0C6A-4080-B94D-3DF8944E64ED@microsoft.com...
>> >I have a few groups that I would like to clean up, but I want to make
>> >sure
>> > that my understanding is correct.
>> >
>> > I have a couple Global Security Groups called Elec Admin and Electric
>> > Admin.
>> > I also have a Universal Security Group called Public Utilities. All
>> > the
>> > same people are in all three groups. I also have a Universal
>> > Distribution
>> > group called Electric Administration Department - same people.
>> >
>> > Please correct me if my understanding is incorrect. If I create a
>> > Universal
>> > Security Group and give it an e-mail address, I should be able to
>> > eliminate
>> > the global security groups and the distribution group, correct? I
>> > would
>> > prefer to have one group per department that can serve as a security
>> > group
>> > and a distripution group for exchange. I'd like to clean up AD and
>> > this
>> > will
>> > be a big step.
>> >
>> > Thank you.
>> > Andy Siegel
>> > Dover, DE
>>
>>
>> That's correct. You can create a Universal Security Group and mail enable
>> it. Effectively it can be used to control resource access, as well as
>> users
>> can select it in the GAL to mail to, eliminating the need for the other
>> two
>> groups.
>>
>> --
>> Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup/forum to benefit from collaboration
>> among
>> responding engineers, as well as to help others benefit from your
>> resolution.
>>
>> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
>> Microsoft Certified Trainer
>> aceman@mvps.RemoveThisPart.org
>> http://twitter.com/acefekay
>>
>> For urgent issues, you may want to contact Microsoft PSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>>
Re: Active Directory Groups question [message #156652 is a reply to message #156616] Tue, 23 June 2009 02:28 Go to previous message
meiweb(nospam)  is currently offline meiweb(nospam)  Germany
Messages: 1307
Registered: July 2009
Senior Member
Hello Andy,

See here about the group scopes:
http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I have a single forest - single domain. What's the difference between
> Global and Universal?
>
> "Ace Fekay [Microsoft Certified Trainer]" wrote:
>
>> "Andy Siegel" <AndySiegel@discussions.microsoft.com> wrote in message
>> news:76BA4508-0C6A-4080-B94D-3DF8944E64ED@microsoft.com...
>>
>>> I have a few groups that I would like to clean up, but I want to
>>> make sure that my understanding is correct.
>>>
>>> I have a couple Global Security Groups called Elec Admin and
>>> Electric
>>> Admin.
>>> I also have a Universal Security Group called Public Utilities. All
>>> the
>>> same people are in all three groups. I also have a Universal
>>> Distribution
>>> group called Electric Administration Department - same people.
>>> Please correct me if my understanding is incorrect. If I create a
>>> Universal
>>> Security Group and give it an e-mail address, I should be able to
>>> eliminate
>>> the global security groups and the distribution group, correct? I
>>> would
>>> prefer to have one group per department that can serve as a security
>>> group
>>> and a distripution group for exchange. I'd like to clean up AD and
>>> this
>>> will
>>> be a big step.
>>> Thank you.
>>> Andy Siegel
>>> Dover, DE
>> That's correct. You can create a Universal Security Group and mail
>> enable it. Effectively it can be used to control resource access, as
>> well as users can select it in the GAL to mail to, eliminating the
>> need for the other two groups.
>>
>> -- Ace
>>
>> This posting is provided "AS-IS" with no warranties or guarantees and
>> confers no rights.
>>
>> Please reply back to the newsgroup/forum to benefit from
>> collaboration among responding engineers, as well as to help others
>> benefit from your resolution.
>>
>> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
>> Microsoft Certified Trainer
>> aceman@mvps.RemoveThisPart.org
>> http://twitter.com/acefekay
>> For urgent issues, you may want to contact Microsoft PSS directly.
>> Please check http://support.microsoft.com for regional support phone
>> numbers.
>>
Previous Topic:Re Create one DC
Next Topic:Share EFS protected folder
Goto Forum:
  


Current Time: Wed Oct 18 01:24:21 EDT 2017

Total time taken to generate the page: 0.05090 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software