Group Scopes: Any easy way to remember?

[Teknoratti]

I'm going through Group Scopes from the 290 M$ Text. It is sort of difficult to remember the Group Scope levels, and what group goes into which, and what functional levels you have to be in order to perform certain tasks. Also domain resources, nesting, etc etc.

Global Groups->Universal Groups->Domain Local Groups

is this right?

 

[REstabrook]

you have it exactly reversed. Local groups Universal Groups and Global groups

 

[Teknoratti]

Correct me if I'm wrong

Domain Local Groups->can contain members from any domain, but only to resources on its own domain.

Global Groups->can contain only members from its own domain, but can be used to grant resources on any domain.

Universal Groups->can contain members from any trusted domain, and be used to grant resources on any domain.
You have to have W2k native or 2003 functional to have universal groups.

Global Groups->Universal Groups, but Global Groups can go inside Universal Groups if it is nested in another Global Group.

 

[NickFerrar]

AGULP is how I was taught to remember.

Accounts -> Global -> Universal -> Domain Local <- Permissions

This is only for a multi-domain environment though (and it's not good practice to use Universal groups unless for specific reasons like to contain global groups from multiple domains). Single domain would just be ALP.

You are correct in your summary of group scope.