Global Groups in Domain Local Group?

BeaverC32

Quick question: is it possible to nest a global group from one domain into a domain local group of a different domain?

I'm finding the topic of group nesting interesting, albeit a little confusing.

sprkymrk

Yes, absolutely.

http://www.techexams.net/technotes/70292/man_groups.shtml

Domain local groups can contain user accounts and global and universal groups from any domain, and other domain local groups from the same domain. The confusing part might be that the Domain Local group can only be used for assigning permissions in the domain in which it was created.

BeaverC32

I thank you, good sir.

I somehow missed these Tech notes, but they are very helpful.

sprkymrk

Yoor welcome. Johan certainly did a great job on all the tech notes.

jasonboche

The diagram on this page may help also:
http://www.netfresco.com/cert/70-292/