Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » Local security principals vs domain sec principals
Local security principals vs domain sec principals [message #162003] Mon, 12 October 2009 23:55 Go to next message
aconti  is currently offline aconti  United States
Messages: 113
Registered: August 2009
Senior Member
Hello,

what is the difference between local users and groups and
domain users and groups. If I have a DC I can only create domain users
and groups and those are the one that I will be using throughout the
domain right ? does local users and groups refer to only when the pc is
working as a stand alone pc and not joined to a domain and therefore I
can create local accounts ?

Thank you


--
aconti
------------------------------------------------------------ ------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1257918.htm

http://forums.techarena.in
Re: Local security principals vs domain sec principals [message #162005 is a reply to message #162003] Tue, 13 October 2009 00:29 Go to previous messageGo to next message
meiweb  is currently offline meiweb  Germany
Messages: 2225
Registered: September 2009
Senior Member
Hello aconti,

Local users groups are as described locally on the machine, doesn't matter
if in a domain or workgroup. They don't work on any other machine. Domain
users are able to logon to any computer in a domain and also domain groups
can be used anywhere in the domain on any machine to configure NTFS permissions
for example.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> what is the difference between local users and groups and
> domain users and groups. If I have a DC I can only create domain users
> and groups and those are the one that I will be using throughout the
> domain right ? does local users and groups refer to only when the pc
> is
> working as a stand alone pc and not joined to a domain and therefore I
> can create local accounts ?
> Thank you
>
> http://forums.techarena.in
>
Re: Local security principals vs domain sec principals [message #162007 is a reply to message #162003] Tue, 13 October 2009 03:10 Go to previous messageGo to next message
florian  is currently offline florian  Switzerland
Messages: 484
Registered: July 2009
Senior Member
Howdie!

aconti wrote:
> what is the difference between local users and groups and
> domain users and groups. If I have a DC I can only create domain users
> and groups and those are the one that I will be using throughout the
> domain right ? does local users and groups refer to only when the pc is
> working as a stand alone pc and not joined to a domain and therefore I
> can create local accounts ?

What would you need local groups for? You can't use ADUC for local group
creation - that's used to create domain users and groups. You need to
check with compmgmt.msc (Computer Management) and define the groups there.

Cheers,
Florian
Re: Local security principals vs domain sec principals [message #162008 is a reply to message #162003] Tue, 13 October 2009 05:17 Go to previous message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
Local users and groups reside in local SAM database on each Windows
computer - domain ones are defined in NTDS distributed database hosted on
domain controllers...
In the first case, authentication is local to the computer (which allows you
to log on without relying on presence of domain controllers, but forces you
to have a separate set of credentials for each OS), the latter allows you to
use the same username/password across entire domain...

hth
Marcin

"aconti" <aconti.3zzenb@DoNotSpam.com> wrote in message
news:aconti.3zzenb@DoNotSpam.com...
>
> Hello,
>
> what is the difference between local users and groups and
> domain users and groups. If I have a DC I can only create domain users
> and groups and those are the one that I will be using throughout the
> domain right ? does local users and groups refer to only when the pc is
> working as a stand alone pc and not joined to a domain and therefore I
> can create local accounts ?
>
> Thank you
>
>
> --
> aconti
> ------------------------------------------------------------ ------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1257918.htm
>
> http://forums.techarena.in
>
Previous Topic:Group Policy Object Editor doesnt have Control Panel!!!
Next Topic:discretionary access control list vs System Access Control List
Goto Forum:
  


Current Time: Thu Jan 18 20:44:27 MST 2018

Total time taken to generate the page: 0.03158 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software