• Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint

Nesting Groups

The group types most used in mature Windows 2000 Domain environments are Universal and Global groups. These groups differ primarily in their scope of membership: Universal groups can contain objects from any Domain, whereas Global groups can contain users from the local Domain only. It is often useful to nest groups within each other to leverage these differences in group scope to provide good cross-domain security models.

Table 4.5.1 shows the nesting relationships between the various group types in Windows 2000.


PREVIEW

                                                                          

Not a subscriber?

Start A Free Trial


  
  • Creative Edge
  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint