Nesting groups inside each other

[stillnumber1]

What advantage does nesting groups inside of each other offer. Instead of the limit of 5000 that Microsoft says is vailable for just using a group. Does anyone know just curious.

 

[markdlane]

The main reason is simplicity and efficiency. Many times you can speed administration by adding one group to another. Example: You set up a domain local group to give permissions for all printers in Building A. You already have groups for the five departments housed in Building A. You just add these groups to the domain local group for the printers and you are done. You similarly assign department groups to any other resources. When does it pay off? Then a new person comes in to the company. You add them to their department group and you do not have to worry about getting them into all the other groups they might possibly need in order to print or access files. Their department group is already nested anywhere it needs to be.

 

[stillnumber1]

Thanks. I can see how this would be benefical. Is this where they came up with the aglp, alp etc. Because essentially this is what you are doing when you first setup the groups with permissions and access to resources