Windows security groups...
-
This built-in group "domainName\Users", has a nested group "Domain Users". Domain Users is a global security group. GSGs and DLGs can be applied to a resource... but I can't even replicate how someone applied the built-in Users group to the DFS share.
Per Microsoft, you should add users to a GSG, add GSGs to a DLG, and the DLG can have access to a resource. I'm trying to copy how the permissions are setup but I can't even apply that group to the resource.
Figured maybe that was an option in the past, but recent update took that ability (to add that group) away. My plan has been to remove that group and apply a proper DLG, a GSG at the very least..
As for the built-in group part not even showing up as an option to add to the ACL, thoughts?
-
Stop using logic, you need to use Microsoft Logic
-
Is this a Windows ADUC panel?
Can powershell be used here?
-
If you are using a Security group for ACLS, it should be a Global or Universal security group. Where are you at in that screen right there? I don't recognize it at all.
-
I'm in Active Directory Administration Center... I can see the same thing in ADUC though.
-
@BBigford said in Windows security groups...:
I'm in Active Directory Administration Center...
People actually use that?
-
@Jason said in Windows security groups...:
@BBigford said in Windows security groups...:
I'm in Active Directory Administration Center...
People actually use that?
I like it for quick day to day stuff. Resetting passwords and checking memberships. Anything more than that and I use ADUC. If Microsoft completely dropped ADAC, I wouldn't be super sad... It's extremely stripped down anyway. About 90% of the reason I use it is I like that you can more easily locate things with the "Locate..." option. I haven't found that in ADUC, but I also haven't really bothered to look deeper...
-
@BBigford said in Windows security groups...:
@Jason said in Windows security groups...:
@BBigford said in Windows security groups...:
I'm in Active Directory Administration Center...
People actually use that?
I like it for quick day to day stuff. Resetting passwords and checking memberships. Anything more than that and I use ADUC. If Microsoft completely dropped ADAC, I wouldn't be super sad... It's extremely stripped down anyway. About 90% of the reason I use it is I like that you can more easily locate things with the "Locate..." option. I haven't found that in ADUC, but I also haven't really bothered to look deeper...
I just use Locate for being able to quickly jump to the OU that the object is located in.
