The scope of a group defines two characteristics:
It determines the level of security applying to a group.
It determines which users can be added to a group.
Windows Server 2003 supports the following scopes:
Domain Local: Domain local groups are used to assign permissions to local
resources such as files and printers. Members can come from any domain.
Global: Members of this group can access resources in any domain. Members
can only come from the local domain.
Universal: Members can be added from any domain in the forest. Members can
access resources from any domain. Universal groups are used for managing
the security across domains. Universal groups can also contain global
groups. Universal groups are only available in the domains having
functional level Windows 2000 native or Windows Server 2003.
Re: Child Domain access ...Group Scope... -- Domain Local groups can contain members from ANY domain but can only be ... -- Global groups can only contain members from their OWN domain but can be ... domain and can be a member of domain local or universal groups in any ... (microsoft.public.windows.server.active_directory)
Re: Distribution Lists ... With Group Scope there is domain local, global and universal and with group ... type there is security and distribution.... and global groups from any domain. ...Members can be added only from ... (microsoft.public.exchange.admin)
Re: message submitted to categorizer ... A domain distribution group requires an expansion server in the ... message to a DL with no members; it disappears at the categorizer with no ... The best practice is to make your distribution groups universal groups.... (microsoft.public.exchange2000.admin)
RE: Not all group memberships are migrated ... we recommned you not to migrate members when you ...Universal groups can contain members from any ... During the group migration, please use the following configurations... (microsoft.public.windows.server.migration)
Re: Union nested in structure. ... > specifying the tag scope rules would have been a Bad Thing. ... Or was it that members had their own namespace, ... Or was there only a single namespace for tags,... recall if there were struct definitions within a function/block at all ... (comp.lang.c)
