>From the article ma'am: When you enable this feature on a domain operating in Windows Server 2003 or higher functional level, any domain controller can resolve logon requests locally without having to go through the global catalog server.
As to the DC/GC query, like I stated earlier, it depends on your infrastructure and design requirements...and phase of the moon. (Save the Infrastructure FSMO, if you have multiple DC's, etc etc etc.) - Will On Thu, Apr 12, 2012 at 13:48, Lora Cates <[email protected]> wrote: > Ah ha! Thank you , my misunderstanding on caching. Just so I'm clear > this can be enabled on any DC, correct? Is there any reason to not have > every DC also be a GC? > > -lc > > ------------------------------ > *From:* William Robbins <[email protected]> > *To:* NT System Admin Issues <[email protected]> > *Sent:* Thursday, April 12, 2012 1:37 PM > *Subject:* Re: Domain local vs. global vs. universal > > Understanding group types: > http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx > > Understanding caching of universal groups: > > http://technet.microsoft.com/en-us/magazine/ff797984.aspx > > - Will > > > > > > On Thu, Apr 12, 2012 at 13:32, Lora Cates <[email protected]>wrote: > > From my reading that's basically it. But do GC's always get them, or only > when enabled for universal group caching? > > -lc > > ------------------------------ > *From:* David Lum <[email protected]> > *To:* NT System Admin Issues <[email protected]> > *Sent:* Thursday, April 12, 2012 1:12 PM > > *Subject:* RE: Domain local vs. global vs. universal > > So….technically what is happening when you click that little radio button > to change group type Local/Global/Universal? What’s happening behind the > scenes? Universal’s get copied to GC’s and others don’t, but what else? > > Dave > > *From:* Brian Desmond [mailto:[email protected]] > *Sent:* Thursday, April 12, 2012 10:03 AM > *To:* NT System Admin Issues > *Subject:* RE: Domain local vs. global vs. universal > > *In a single domain forest (or even many multi-domain domain forests > today), I would just do all uni groups. *** > * * > *Thanks,* > *Brian Desmond* > *[email protected]* > * * > *w – 312.625.1438 | c – 312.731.3132* > * * > *From:* David Lum [mailto:[email protected]] > *Sent:* Thursday, April 12, 2012 11:28 AM > *To:* NT System Admin Issues > *Subject:* Domain local vs. global vs. universal > > Today I found a global group in my AD (created by an SE that wasn’t me), > but for this function I needed to add a domain local group to it and for > course, that’s not possible. Someplace I heard in AD pretty much every > group you use should be domain local unless it’s used for Exchange in which > case you use Universal. All groups I create are domain local and it simply > works, but I know that doesn’t mean it’s right. > > Before sending a note to the SE team on this I wanted to get a consensus > from you guys. Comments? > *David Lum* > Systems Engineer // NWEATM > Office 503.548.5229 //* *Cell (voice/text) 503.267.9764 > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
