| Author | Messages | |
bartvdw
Posts:20
 | | 09/01/2010 5:36 PM |
| Gents,
Question: can you use domain local groups as security group for item level
targeting of GPP's or only global groups?
I see GPP's not being applied when I target them to a domain local group,
which contains a global group (nested). Testing shows that when I target to
a global group to which a user belongs directly, it works perfectly...
Target OS: Windows XP SP3
Thanks
| | | |
| darren
Posts:386
| | 09/01/2010 6:02 PM |
| Bart-
Someone else might be able to verify but if I recall correctly, domain local groups weren't supported by GPP. This may be a function of XP, but not sure Win7 changes anything here. I will see if I can verify with the product team.
Darren
From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Bart Van den Wyngaert
Sent: Wednesday, September 01, 2010 9:35 AM
To: activedir@mail.activedir.org
Subject: [ActiveDir] GPP's and item-level targeting
Gents,
Question: can you use domain local groups as security group for item level targeting of GPP's or only global groups?
I see GPP's not being applied when I target them to a domain local group, which contains a global group (nested). Testing shows that when I target to a global group to which a user belongs directly, it works perfectly...
Target OS: Windows XP SP3
Thanks
| | | |
| bartvdw
Posts:20
| | 09/01/2010 6:08 PM |
| Darren,
That would be great! In the meantime I have found this....
http://technet.microsoft.com/en-us/library/cc772471.aspx
Supported groups
Domain groups:
- Global groups
- Universal groups
Local groups:
- Local groups (including built-in groups)
- Domain local
- Well-known
-Bart
On Wed, Sep 1, 2010 at 7:00 PM, Darren Mar-Elia <darren@sdmsoftware.com>wrote:
> Bart-
>
> Someone else might be able to verify but if I recall correctly, domain
> local groups weren’t supported by GPP. This may be a function of XP, but not
> sure Win7 changes anything here. I will see if I can verify with the product
> team.
>
>
>
> Darren
>
>
>
> *From:* activedir-owner@mail.activedir.org [mailto:
> activedir-owner@mail.activedir.org] *On Behalf Of *Bart Van den Wyngaert
> *Sent:* Wednesday, September 01, 2010 9:35 AM
> *To:* activedir@mail.activedir.org
> *Subject:* [ActiveDir] GPP's and item-level targeting
>
>
>
> Gents,
>
> Question: can you use domain local groups as security group for item level
> targeting of GPP's or only global groups?
>
> I see GPP's not being applied when I target them to a domain local group,
> which contains a global group (nested). Testing shows that when I target to
> a global group to which a user belongs directly, it works perfectly...
>
> Target OS: Windows XP SP3
>
> Thanks
>
| | | |
| bartvdw
Posts:20
| | 09/01/2010 9:50 PM |
| actually this can be kinda strange when you use a lot of domain local groups
which contain nested global groups etc.
I wonder what the logic is behind this...
On Wed, Sep 1, 2010 at 7:07 PM, Bart Van den Wyngaert <
bartvdw.lists@gmail.com> wrote:
> Darren,
>
> That would be great! In the meantime I have found this....
>
> http://technet.microsoft.com/en-us/library/cc772471.aspx
> Supported groups
>
> Domain groups:
>
> - Global groups
>
> - Universal groups
>
>
> Local groups:
>
> - Local groups (including built-in groups)
>
> - Domain local
>
> - Well-known
>
>
> -Bart
>
>
> On Wed, Sep 1, 2010 at 7:00 PM, Darren Mar-Elia <darren@sdmsoftware.com>wrote:
>
>> Bart-
>>
>> Someone else might be able to verify but if I recall correctly, domain
>> local groups weren’t supported by GPP. This may be a function of XP, but not
>> sure Win7 changes anything here. I will see if I can verify with the product
>> team.
>>
>>
>>
>> Darren
>>
>>
>>
>> *From:* activedir-owner@mail.activedir.org [mailto:
>> activedir-owner@mail.activedir.org] *On Behalf Of *Bart Van den Wyngaert
>> *Sent:* Wednesday, September 01, 2010 9:35 AM
>> *To:* activedir@mail.activedir.org
>> *Subject:* [ActiveDir] GPP's and item-level targeting
>>
>>
>>
>> Gents,
>>
>> Question: can you use domain local groups as security group for item level
>> targeting of GPP's or only global groups?
>>
>> I see GPP's not being applied when I target them to a domain local group,
>> which contains a global group (nested). Testing shows that when I target to
>> a global group to which a user belongs directly, it works perfectly...
>>
>> Target OS: Windows XP SP3
>>
>> Thanks
>>
>
>
| | | |
|
|