Yes, that should work

But this is the reason to avoid directly adding groups to resources.

Users -> Authorization Groups (e.g. based on teams, projects etc) -> Resource 
Groups -> Resources

You add the Resource Groups to the ACLs on resources
You add the Authorization Groups to the Resource groups (e.g. Finance Dept 
needs access to "Printer X")

Since all the RGs are already defined, all you need to do in this situation is 
add an appropriate AG to your existing defined RGs.

RGs can be Domain Local
AGs can be Global (or Universal if you want)

There's an excellent set of pages on the Microsoft TechNet website that cover 
this.

Cheers
Ken

From: HELP_PC [mailto:[EMAIL PROTECTED]
Sent: Wednesday, 21 May 2008 3:46 PM
To: NT System Admin Issues
Subject: Adding groups as members of groups


I have a customer with a folder in a fileserver (SBS env transitioned to 
Win2k3) with many different security groups permissions on various subfolder. 
Now I have to add some security groups from a trusted domain.

I want to avoid to visit all the folders and I thought to add the 
trusteddomain\securitygroup as member of originaldomain\securitygroup.

I made all groups in both domains as Universal
Should I have any problem ?

TIA

GuidoElia
HELPPC




~ Upgrade to Next Generation Antispam/Antivirus with Ninja!    ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm>  ~

Reply via email to