As mentioned many times before: Users -> Functional groups (Global/Universal) ->resource authorization groups (domain local) -> resource ACLs
This is, in general, the most maintainable, self documenting solution. And it gets around lots of the problems that people have WRT to groups. Cheers Ken From: HELP_PC [mailto:[EMAIL PROTECTED] Sent: Thursday, 29 May 2008 2:32 AM To: NT System Admin Issues Subject: RE: Changing groups scope GuidoElia HELPPC ________________________________ Da: HELP_PC Inviato: mercoledì 28 maggio 2008 18.31 A: 'NT System Admin Issues' Oggetto: R: Changing groups scope No justs user are in groups for now (no nested group, this should be the first) GuidoElia HELPPC ________________________________ Da: René de Haas [mailto:[EMAIL PROTECTED] Inviato: mercoledì 28 maggio 2008 14.52 A: NT System Admin Issues Oggetto: RE: Changing groups scope Is it itself member of other groups? Does it have members that aren't members of the domain? From: HELP_PC [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 28, 2008 11:45 AM To: NT System Admin Issues Subject: Changing groups scope I need to include a universal group from a trusted domain to a universal group of the local domain but this is not allowed. Changing the scope from universal to local on the local domain will do the trick ? Any problem in doing that ? TIA GuidoElia HELPPC ________________________________ *** The information in this e-mail is confidential and intended solely for the individual or entity to whom it is addressed. If you have received this e-mail in error please notify the sender by return e-mail delete this e-mail and refrain from any disclosure or action based on the information. *** ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
