Search


Sponsors

How to Nest Users and Groups for Permissions

The use of domain groups is essential for administration of resource access. Knowing which groups are available and the intent of the group is key to designing your group nesting strategy. Microsoft developed the groups within Active Directory such that the administration of all groups could be within Active Directory. However, with the migrations from Windows NT4, it has made it hard to implement the desired group strategy that Active Directory provides.

Knowing the capabilities of each group, as well as the limitations, you can now design a strategy that works best for you. Regardless, make sure that you don’t configure users and groups such that a security issue is created.(continue at source)