My, my! What happens were I to like it? ;) -lc
>________________________________ > From: William Robbins <[email protected]> >To: NT System Admin Issues <[email protected]> >Sent: Thursday, April 12, 2012 3:26 PM >Subject: Re: Domain local vs. global vs. universal > > >It happens...just don't let it happen again or there will be lashes assessed. >:P > > - Will > > >On Thu, Apr 12, 2012 at 14:55, Lora Cates <[email protected]> wrote: >Apologies, asked question before reading article. (Face, meet palm) >> >>-lc >> >> >>>________________________________ >>> From: William Robbins <[email protected]> >>>To: NT System Admin Issues <[email protected]> >>>Sent: Thursday, April 12, 2012 2:04 PM >>>Subject: Re: Domain local vs. global vs. universal >>> >>> >>>From the article ma'am: >>> >>> >>>When you enable this feature on a domain operating in Windows Server 2003 or >>>higher functional level, any domain controllercan resolve logon requests >>>locally without having to go through the global catalog server. >>> >>> >>>As to the DC/GC query, like I stated earlier, it depends on your >>>infrastructure and design requirements...and phase of the moon. (Save the >>>Infrastructure FSMO, if you have multiple DC's, etc etc etc.) >>> >>> - Will >>> >>> >>> >>> >>> >>> >>> >>> >>>On Thu, Apr 12, 2012 at 13:48, Lora Cates <[email protected]> wrote: >>> >>>Ah ha! Thank you , my misunderstanding on caching. Just so I'm clear this >>>can be enabled on any DC, correct? Is there any reason to not have every DC >>>also be a GC? >>>> >>>>-lc >>>> >>>> >>>>>________________________________ >>>>> From: William Robbins <[email protected]> >>>>>To: NT System Admin Issues <[email protected]> >>>>>Sent: Thursday, April 12, 2012 1:37 PM >>>>>Subject: Re: Domain local vs. global vs. universal >>>>> >>>>> >>>>>Understanding group types: >>>>>http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx >>>>> >>>>> >>>>>Understanding caching of universal groups: >>>>> >>>>> >>>>>http://technet.microsoft.com/en-us/magazine/ff797984.aspx >>>>> >>>>> - Will >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>> >>>>>On Thu, Apr 12, 2012 at 13:32, Lora Cates <[email protected]> >>>>>wrote: >>>>> >>>>>From my reading that's basically it. But do GC's always get them, or only >>>>>when enabled for universal group caching? >>>>>> >>>>>>-lc >>>>>> >>>>>> >>>>>>>________________________________ >>>>>>> From: David Lum <[email protected]> >>>>>>>To: NT System Admin Issues <[email protected]> >>>>>>>Sent: Thursday, April 12, 2012 1:12 PM >>>>>>> >>>>>>>Subject: RE: Domain local vs. global vs. universal >>>>>>> >>>>>>> >>>>>>> >>>>>>>So….technically what is happening when you click that little radio >>>>>>>button to change group type Local/Global/Universal? What’s happening >>>>>>>behind the scenes? Universal’s get copied to GC’s and others don’t, but >>>>>>>what else? >>>>>>> >>>>>>>Dave >>>>>>> >>>>>>>From:Brian Desmond [mailto:[email protected]] >>>>>>>Sent: Thursday, April 12, 2012 10:03 AM >>>>>>>To: NT System Admin Issues >>>>>>>Subject: RE: Domain local vs. global vs. universal >>>>>>> >>>>>>>In a single domain forest (or even many multi-domain domain forests >>>>>>>today), I would just do all uni groups. >>>>>>> >>>>>>>Thanks, >>>>>>>Brian Desmond >>>>>>>[email protected] >>>>>>> >>>>>>>w – 312.625.1438 | c – 312.731.3132 >>>>>>> >>>>>>>From:David Lum [mailto:[email protected]] >>>>>>>Sent: Thursday, April 12, 2012 11:28 AM >>>>>>>To: NT System Admin Issues >>>>>>>Subject: Domain local vs. global vs. universal >>>>>>> >>>>>>>Today I found a global group in my AD (created by an SE that wasn’t me), >>>>>>>but for this function I needed to add a domain local group to it and for >>>>>>>course, that’s not possible. Someplace I heard in AD pretty much every >>>>>>>group you use should be domain local unless it’s used for Exchange in >>>>>>>which case you use Universal. All groups I create are domain local and >>>>>>>it simply works, but I know that doesn’t mean it’s right. >>>>>>> >>>>>>>Before sending a note to the SE team on this I wanted to get a consensus >>>>>>>from you guys. Comments? >>>>>>>David Lum >>>>>>>Systems Engineer //NWEATM >>>>>>>Office 503.548.5229//Cell (voice/text) 503.267.9764 >>>>>>> >>>>>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>>>>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>>>>> >>>>>>>--- >>>>>>>To manage subscriptions click here: >>>>>>>http://lyris.sunbelt-software.com/read/my_forums/ >>>>>>>or send an email to [email protected] >>>>>>>with the body: unsubscribe ntsysadmin >>>>>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>>>>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>>>>> >>>>>>>--- >>>>>>>To manage subscriptions click here: >>>>>>>http://lyris.sunbelt-software.com/read/my_forums/ >>>>>>>or send an email to [email protected] >>>>>>>with the body: unsubscribe ntsysadmin >>>>>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>>>>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>>>>> >>>>>>>--- >>>>>>>To manage subscriptions click here: >>>>>>>http://lyris.sunbelt-software.com/read/my_forums/ >>>>>>>or send an email to [email protected] >>>>>>>with the body: unsubscribe ntsysadmin >>>>>>> >>>>>>> >>>>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>>>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>>>> >>>>>>--- >>>>>>To manage subscriptions click here: >>>>>>http://lyris.sunbelt-software.com/read/my_forums/ >>>>>>or send an email to [email protected] >>>>>>with the body: unsubscribe ntsysadmin >>>>> >>>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>>> >>>>>--- >>>>>To manage subscriptions click here: >>>>>http://lyris.sunbelt-software.com/read/my_forums/ >>>>>or send an email to [email protected] >>>>>with the body: unsubscribe ntsysadmin >>>>> >>>>> >>>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>>> >>>>--- >>>>To manage subscriptions click here: >>>>http://lyris.sunbelt-software.com/read/my_forums/ >>>>or send an email to [email protected] >>>>with the body: unsubscribe ntsysadmin >>> >>>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>> >>>--- >>>To manage subscriptions click here: >>>http://lyris.sunbelt-software.com/read/my_forums/ >>>or send an email to [email protected] >>>with the body: unsubscribe ntsysadmin >>> >>> >>~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >>--- >>To manage subscriptions click here: >>http://lyris.sunbelt-software.com/read/my_forums/ >>or send an email to [email protected] >>with the body: unsubscribe ntsysadmin > >~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > >--- >To manage subscriptions click here: >http://lyris.sunbelt-software.com/read/my_forums/ >or send an email to [email protected] >with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
