Protect the resources

Hi,

I have been wondering why I Microsoft recommend assigning at domain local
group to e.g. a printer (the resource) and then assigning a global group to
this domain local group. Can somebody explain this to me?



Best Regards

Gert Nielsen

I think the idea is that you can assign multilple domain groups to a single
local group and that you can assign a single domain group to multilple local
groups on different servers.

For example, if you had multiple domains in a forrest, or even an NT domian
and AD domain with users in each, you can create a domain group for "Color
Print Operators" in each, then assign that domain group into a local print
admins group. Or, if you have one domain and 10 print servers, you can create
one domain color printers group and only have to assign the one group to each
print server printer.

Does that make sense?

"Gert Nielsen" wrote:

> Hi,
>
> I have been wondering why I Microsoft recommend assigning at domain local
> group to e.g. a printer (the resource) and then assigning a global group to
> this domain local group. Can somebody explain this to me?
>
>
>
> Best Regards
>
> Gert Nielsen
>
>
>

Hey Jason,
Thanks, it make perfect sense now!

"Jason Carter" <(E-Mail Removed)> skrev i en meddelelse
news:4F0E2209-4935-46A0-BB50-(E-Mail Removed)...
>I think the idea is that you can assign multilple domain groups to a single
> local group and that you can assign a single domain group to multilple
> local
> groups on different servers.
>
> For example, if you had multiple domains in a forrest, or even an NT
> domian
> and AD domain with users in each, you can create a domain group for "Color
> Print Operators" in each, then assign that domain group into a local print
> admins group. Or, if you have one domain and 10 print servers, you can
> create
> one domain color printers group and only have to assign the one group to
> each
> print server printer.
>
> Does that make sense?
>
> "Gert Nielsen" wrote:
>
>> Hi,
>>
>> I have been wondering why I Microsoft recommend assigning at domain local
>> group to e.g. a printer (the resource) and then assigning a global group
>> to
>> this domain local group. Can somebody explain this to me?
>>
>>
>>
>> Best Regards
>>
>> Gert Nielsen
>>
>>
>>