5.5. Planning for Groups

To make sure your network properly supports the stringent requirements of the enterprise, before you begin to make groups you will need to administer in the future, it is extremely advisable to devise a plan for how your groups will be used at all levels—domain local, global, and universal.

5.5.1. Planning Domain Local and Global Accounts

The first thing to remember about both domain local and global accounts is that they are both listed in the global catalog; however, their members are not listed. One of the main reasons for this is security; another is bandwidth. If all members of groups were broadcast throughout the entire infrastructure, there would be a significant replication overhead. Therefore, you have to make ...

Get MCITP: Windows Server® 2008 Enterprise Administrator, Study Guide now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.