Member Server Group Advice

[nevets2001uk]

I'm currently working on a new AD environment. We have AD installed in two servers and I've connected two current member servers to the domain.

We wish to share a couple of folders on one of the member servers and I'm trying to work out the correct (recommended) setup for the groups. I'm using a A-G-DL-P structure on the AD server shared folders. Users are put into Global Groups based on organisational structure and then I grant permission to DL Groups and link the groups together.

On a member server should I...

1) Create a local group on the server, assign permissions and then make the domain Global Group a member
or 2)Create a DL group on the AD server and then assign folder permissions on the member server to that domain group. Then make the domain Global group a member of the DL group.

Steve G (MCSE / MCSA:Messaging)

 

[GrimR]

I'm thinking 2 is the better/correct solution and easier to administer, if you adding multiple groups to the share.
This way admin is in AD and not on the share.
e.g Add DL Group to Folder A And give it the permission.
Now in AD all you need to do is add Users, Local Groups or Global Groups to the DL group instead of having to add each group or user to the specific share.

 

[nevets2001uk]

Thanks for that. I'll do it that way then.

Steve G (MCSE / MCSA:Messaging)