Switching Global Group to Domain Local Group

[gliao]

Can I turn a existing Global Group to Domain Local Group?
The AD is in native mode so I know I can create Domain
local group. If I can switch, would it cause any problem
down the line?

 

[Matjaz Ladava [MVP]]

As you are in native mode yes, but not directly and it depends on how your
groups are composed, because of different group scopes. Generaly you must
first make group Universal and then from Universal to Domain local group,
but as I said it depends. Cany ou describe you forest (multiple domains ?),
groups configuration (nesting and stuff).

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), Windows MVP
(e-mail address removed)
http://ladava.com

 

[gliao]

Thanks for the info. I did a switch from global group to
universal group. But when I try to switch again to Domain
Local Group it tell me I am not on the Global Catalog
server and won't let me switch.

We have to forest tree with two way trust. each forest
has parent and 2 child domains.

 

[Matjaz Ladava [MVP]]

Universal group membership is stored in a DC that is also a Global Catalog.
In AD users and computers connect to a DC that is a global catalog server.

--
Regards

Matjaz Ladava, MCSE (NT4 & 2000), Windows MVP
(e-mail address removed)
http://ladava.com