How's everyone setup a Local and Global group name?

[Sara]

Hi,

In order to implement file sharing across the domains, the
Account-Global-Local-Permission method will need to be used. Unfortunately,
in AD's Users and Computers, you can not differentiate between a local
security, global security, global distribution, etc. group by the icon.
There is a column that tells what kind of group it is. For example, If I
want to set up a folder called " App" but then I also want to setup a local
and Global group for this folder. What would u guys do? Would anyone do it
like this way

lsGroupName or LSGroupName or LS_GroupName

LGapp for local group in this case, GGapp for a Global group name in this
case?

or

LG_APP and GG_APP??

Thank you.

 

[Eric Chamberlain, CISSP]

Sara,

We use prefixes and suffixes to organize our users and groups. Take a look
at our naming standard
http://calnetad.berkeley.edu/documentation/naming_policy.html

--
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu

 

[Marin Marinov]

<snip>
Hi Sara,
Keep in mind several things:
* It's a good approach to start the name with the group scope,e.g. G for
Global, U - Universal, DL - Domain Local. This way you can easily
distinguish between and sort groups in permissions dialogs and it leaves
space for less errors. Some companies prefer two-letter abbreviations
since this way names get a more strict form.
* Depending on the group scope, you should include various info in the
name. Since DL groups are used for controlling access to resources it's
a good idea to incorporate the type or name of the resource and perhaps
the maximum permissions the group should have. For example, DL
Accounting Full Control. Global groups, on the other hand, are mostly
used for "compacting" users for easier "transportation" and
administration so their name should reflect the membership of the group.
For example, G Accounting. Universal groups have pretty much the same
goal as Globals though they "generalize" membership even more so the
naming guidelines are the same - reflect who is in this group.
* If you have more than one domain you could also include the domain
name (or an abbreviation) after the scope of DL and Global groups for
easier pinpointing.
* Keep names informative but concise - try to keep them up to ~20 chars
so you see the whole names in all the dialogs.

That about wraps up the matter. From here on it's your choice to select
the most suitable variation that will best fit your specific
administrative needs.

HTH
--
Cheers,
Marin Marinov
MCT, MCSE 2003/2000/NT4.0,
MCSE:Security 2003/2000, MCP+I
-
This posting is provided "AS IS" with no warranties, and confers no
rights.