Microsoft Windows Server 2003 (70-290) Tutorials
Managing Groups / Strategies for Using Groups
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Learn More
Subtitles of the Movie (Microsoft Windows Server 2003 (70-290) / Managing Groups / Strategies for Using Groups)
As we mentioned earlier there are certain strategies that we use with groups. And what we are going to do now is discuss strategies and then in our next section, we will tie together the use of those strategies when we actually create some groups. So the simplest of strategies for using accounts in a domain is to put the account into global groups, and to put the global groups into a domain local group and give the domain local group the permission. The way to remember that is AGDLP. Notice that the domain local group is the one that gets the permission. We do not assign permissions to global groups or to accounts. We put them into the domain local group first and give the domain local groups permission. Now this is specially important for the test for real life you might take a short cut, it is actually possible to do it with the software. But the correct strategy for the test as well as real life for the long term is to use accounts into global groups, global groups into domain local groups and then assign information to the domain local groups. Now this is assuming we are not using any universal group. So when do we use universal groups? Well, the key to using universal groups is that we have resources that are in multiple domain, and we have users that are in multiple domain that need access to those resources that are in multiple domains. That is where we need a universal group. So if we use a universal group then put the accounts into global groups. We may nest global groups into other global groups. For example if we have an accounting department, and in the accounting department we have accounts receivable and accounts payable. We might nest global groups into global groups but as soon as we are done with our global groups, then we put those global groups into universal groups. We put the universal groups into domain local groups and then we assign the permissions to the domain local group. Notice that still we are assigning the permissions to the domain local groups. Let us talk more about nesting. If we want to nest a global group, say accounts payable into the global group accounting, we would create the accounting global group, then create the accounts payable group. Then make the accounts payable global group, a member of the accounting global group. Of course then we could also make this account receivable global group, a member of the accounting global group. So the accounting global group would have got two members, accounts payable and accounts receivable. And then we can take the accounting global group along with its members and put it into the universal group and may be call that universal accounting. However we want to do that for organization. The key to universal groups for the test the key to, when we need to use universal groups is that we got resources that are multiple domains that need to be assigned to users who are also in multiple domain. So keep an eye on that for the test. And for the real life these are the strategies that we use. It will make more sense in the next section when we actually get into the user interfaces. So let us take look at how we would have actually do this in the active directory tools in our next sections.
Tutorial Information
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 81,350 Video Tutorials (14,200 free)
- Video Available as Flash or QuickTime
- Over 715 Courses
- $30 for One Month Access
- Multi-User Discounts Available
