group permissions

[Guest]

this might be a stupid question, but I cant figure it out. I am trying to
add a group as a member of another group for permissions reasons. I know you
can do this in Windows 2003 server, but I cant seem to figure it out in
Windows 2000 server, or is it not an option?

Thanks in advance!

Chris

 

[Brian Komar]

this might be a stupid question, but I cant figure it out. I am trying to
add a group as a member of another group for permissions reasons. I know you
can do this in Windows 2003 server, but I cant seem to figure it out in
Windows 2000 server, or is it not an option?

Thanks in advance!

Chris

It is dependent on group scope and the mode the domain is in.
For full group membership options, you must ensure that the domain is in
Native mode, not mixed mode.
Allowed memberships when in Native mode:
Global => Global
Global => Domain Local
Global => Universal
Universal => Universal
Universal => Domain Local
Domain Local => Domain Local

If you are in Mixed mode:
Global => Local
No such thing as universal security groups
No such thing as domain local groups, only local groups
No nesting of same groups types within same group types (global into
global)

HTH,
Brian