Group Scopes Under Security Group in Windows Server 2003

LOCAL GROUP SCOPE

Local group scope in workstation environment



















DOMAIN LOCAL GROUP SCOPE:

Explanation of the Figure: In the figure there is a share folder named “ImpS” which is located on Abc.Mydomain.local child domain. And sales group has got full control or whatever permission applicable for it. According to the definition of “Domain Local Group” “sales” group can have members form “mydomain.local” and “xyz.mydomain.local” also. But “sales” group can be assigned for permission to any share resources in that local domain meaning “abc.mydomain.local. If you try to give any permission using sales group in the other domain like “mydomain.local” or “xyx.mydoamin.loca” you will not going to find the “sales “ group in those domain because the group local for that “abc.mydomain.local” child domain.

N.B.: I wellcome any comments or suggestion on the above. Thank You.