Planning Global and Domain Local Groups
To use groups effectively, you must determine how you will use the groups and which types of groups you will use. It is important to have a group strategy in place before you begin creating groups.
Global and domain local groups are listed in the global catalog, but their members are not. This reduces the size of the global catalog and the replication traffic associated with keeping the global catalog up to date. You can improve network performance by using groups with global or domain local scope for directory objects that change frequently. Global and domain local group implementation guidelines are identical to the group strategy recommendations for a Windows NT 4 or earlier domain. Use the following procedure, as portrayed in Figure 8-3, to plan your global and domain local group strategy:
1. Assign users with common job responsibilities to global groups. Identify users with common job responsibilities and add the user accounts to a global group. For example, in an accounting department, add user accounts for all accountants to a global group called Accounting.
2.Create a domain local group for resources to be windows 7 certification shared. Identify the resources or group of resources, such as related files or printers, to which users need access,and then create a domain local group for that resource. For example, if you have a number of color printers in your company, create a domain local group called Color Printers.
3.Add global groups that need access to the resources to the domain local group.Identify all global groups that share the same access needs for resources and make them members of the appropriate domain local group. For example, add the global groups Accounting and Sales to the domain local group Color Printers.
4.Assign resource permissions to the domain local group. Assign the required permissions for the resource to the domain local group. For example, assign the necessary permissions to use color printers to the Color Printers group. Users in the
Accounting and Sales global groups receive the required permissions because their global group is a member of the domain local group Color Printers.
This strategy gives you the most flexibility for growth and reduces permissions assignments.
Placing user accounts in global groups and assigning permissions to the global groups This strategy can complicate administration when you are using
multiple domains. If global groups from certification exam papers multiple domains require the same permissions, you have to assign permissions for each global group.
Processing your request, Please wait....
