Changing security group from global to universal

[melbert09]

Hi all,
Im sure that this is a pretty easy one, but I am looking for the best way of changing a few existing security groups from global to universal. I know the mechanical way of doing it, but my question is the following:

The security groups are members of other global groups. Should I just remove those groups change the settings then add them back in? I know that MS says that you should not change the settings if the group is a member of another group. I am also wondering what effect this might have on the users when I make the change?

Thanks

 

[TechyMcSe2k]

I believe you have the proper way already in mind. Remove groups from groups and then make change, then add it back to the proper groups. Only domain Local groups would effect users access "possibly" if they are changed to Global or Universal.

There was a small concern in Windows 2000; but it should be fine now in 2003

http://support.microsoft.com/kb/268277

________________________________________
Achieving a perception of high intelligence level can only be limited by your manipulation skills of the Google algorithm!