Group Scope

brad-

For some reason im having a hard time grasping the scope concept.

Domain Local, Global, Universal. I have read and understand their definitions, but when they get applied to a question, it doesnt make sense. Univeral can be put in Domain local, Global can be put in Domain Local...i guess i just dont understand the relationship totally. I know it revolves around granting rights to users from a different domain...but I'm just not sure when something sould be X group or Y group.

The sybex book I'm reading says a Global Group is simply a container of users. How is that different from an OU?

If anyone has a succint way of describing these or a handy way of remembering, that would be killer.

dynamik

http://technet2.microsoft.com/WindowsServer/en/library/79d93e46-ecab-4165-8001-7adc3c9f804e1033.mspx?mfr=true

That might help. It basically depends on where the users in the group will be from and where the resources they need access to are.

Groups are different from OUs in that groups can be assigned permissions and privileges while OUs are assigned GPOs.

Group scopes really get fun when you start mixing in DFL restrictions.