Adding a group to a group

[Raterus]

Hello,

Basically I have two departmental groups in active directory (they are global), each in their own separate OU, I want to create another group that I can add these two existing groups to, then assign this group permissions to a network share permissions, effectively allowing both departments access to it.

I'm running into problems when it comes to adding a group to another group, I can't seem to do it with a global group (I never have the option to add a group, just users, contacts, or computers) It DOES appear I can add a group to a group when I create a new domain local group. Unfortunately when it comes to assigning the group to the network share, it is not listed (it looks like only global groups are listed). I'm running only one domain!

I believe I'm doing something stupid,any help would be great!
--Michael

 

[Joe Richards [MVP]]

As long as the groups are in the same domain and you are in NATIVE Mode this
shouldn't be an issue. Off the top of my head I will guess you are not in native
mode. You can't do group nesting of the same type of groups unless you are in
native mode.

joe

 

[Mark]

I will expand on what Joe wrote:

If in mixed mode you can add global groups to local. This goes back to the
old AGLP rule, Accouts go into Global groups which you add to Local groups,
then assign the Permissions to resources using the local groups.

In a Native mode domain you are able to "nest" groups as in adding global to
global. Just remember one thing and that would be that the Global groups can
only contain users for that domain, local groups can contain users/groups
from any domain.


--
Mark Ramey [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.





Hello,

Basically I have two departmental groups in active directory (they are
global), each in their own separate OU, I want to create another group that
I can add these two existing groups to, then assign this group permissions
to a network share permissions, effectively allowing both departments access
to it.

I'm running into problems when it comes to adding a group to another group,
I can't seem to do it with a global group (I never have the option to add a
group, just users, contacts, or computers) It DOES appear I can add a group
to a group when I create a new domain local group. Unfortunately when it
comes to assigning the group to the network share, it is not listed (it
looks like only global groups are listed). I'm running only one domain!

I believe I'm doing something stupid,any help would be great!
--Michael