Setting Folder Permissions using Nested Groups
hi
i hoping me this.
i setting permissions on shared folders user accounts on different domains using group nesting.
i have 3 domains in forest.
domain 1 user a
domain 2 user b
domain 3 user c
all 3 users need access shared folder on file server on root of forest.
i have created global group on each domain , added user each domain corresponding global group.
on root of forest, have created local domain group have set relevant permissions shared folder local domain group.
it bit confusing me. i have implemented 2 scenarios.
scenario 1
i have created universal group on root of forest. i added each of global groups on domains 1, 2 , 3 universal group. finally added universal group domain local group.
scenario 2
i have created universal group on each of child domains 1, 2 , 3. i have added global groups on each domain corresponding universal group on domain.
i added each universal group domain local group on root of forest.
both scenarios work , grant users access shared folder. i have read lot of post online have added global groups directly domain local group on root of forest.
my question scenario efficient way of reducing network traffic , replication? also there other impacts on network can see implementing either scenario?
apologies length of wanted have background information possible.
thank time.
in own opinion, scenario 1 better, clearer 2. recommanded nesting group tree structure management. try reduce number of nested groups.
for information found third party article provided suggestions:
planning group structure implementation
please note: since web site not hosted microsoft, link may change without notice. microsoft not guarantee accuracy of information.
technet subscriber support in forum |if have feedback on our support, please contact tnmff@microsoft.com.
Windows Server > File Services and Storage
Comments
Post a Comment