Thank you What I have to do is moving users to the trusted domain but leaving them using their folders in the local domain. so I thought that adding to the various security groups the corrispondent security group in the trusted domain should work. I.e. SG Quality has user1,user2,user3... and \trusteddomain\quality as members As I stated I made all SGs as Universal
________________________________ Da: Ken Schaefer [mailto:[EMAIL PROTECTED] Inviato: mer 21/05/2008 14.05 A: NT System Admin Issues Oggetto: RE: Adding groups as members of groups Yes, that should work But this is the reason to avoid directly adding groups to resources. Users -> Authorization Groups (e.g. based on teams, projects etc) -> Resource Groups -> Resources You add the Resource Groups to the ACLs on resources You add the Authorization Groups to the Resource groups (e.g. Finance Dept needs access to "Printer X") Since all the RGs are already defined, all you need to do in this situation is add an appropriate AG to your existing defined RGs. RGs can be Domain Local AGs can be Global (or Universal if you want) There's an excellent set of pages on the Microsoft TechNet website that cover this. Cheers Ken From: HELP_PC [mailto:[EMAIL PROTECTED] Sent: Wednesday, 21 May 2008 3:46 PM To: NT System Admin Issues Subject: Adding groups as members of groups I have a customer with a folder in a fileserver (SBS env transitioned to Win2k3) with many different security groups permissions on various subfolder. Now I have to add some security groups from a trusted domain. I want to avoid to visit all the folders and I thought to add the trusteddomain\securitygroup as member of originaldomain\securitygroup. I made all groups in both domains as Universal Should I have any problem ? TIA GuidoElia HELPPC ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
