Planning Universal Groups

By Author: iris
Total Articles: 286
Comment this article

Use universal groups to grant or deny access to plus benefits resources that are located in more than one domain. As discussed earlier in this lesson, when membership of any universal group changes, the changes must be replicated to every global catalog in the forest unless the Windows Server 2003 forest functional level is used. This action can cause excessive network traffic. Therefore, you should define universal groups with caution. Follow these guidelines to ensure minimal impact on replication traffic:
Add global groups, not users, to universal groups The global groups are the members of the universal group. Keep the number of group members in universal
groups as low as possible and minimize the number of individual users.
Change the membership of universal groups as infrequently as possible By requiring all members of universal groups to be global groups and making individual membership changes in the global CompTIA A+ certification groups, the membership changes you make to the global groups do not affect the universal ...
... groups or replication traffic.
Now that you've completed the worksheet, answer the following questions:
1.Does your network require local groups?No. The scenario presents no need to create local groups, which you can use only on a single computer.
2.Does your network require universal groups?No. The scenario presents no need to create universal groups. Your domain has no groups that need to have access to resources in multiple domains and also need to have members from multiple domains.
3.Sales representatives at the company frequently visit the company headquarters and other divisions. Therefore, you need to give sales representatives with user accounts in other domains the same permissions for resources that sales representatives in your domain have. You also want to make it easy for administrators in other domains to assign permissions to sales representatives in yotir domain. How can you accomplish this?
Create global groups for sales representatives in all other domains. Add these global groups to the appropriate domain local groups in your domain. Tell administrators in other domains about the global group that represents sales representatives in your domain. Have the administrators add the sales representatives group from your domain to the appropriate domain local groups in their domains.
A group is a collection of Network+ certification users, computers, contacts, and other groups. Distribu-tion groups are used only for e-mail. Security groups are used to grant access to resources.