MCITP 70-640: Active Directory different group types available

This video looks at the different group types available in Active Directory. These include Local, Domain Local, Global, and Universal. The video also covers membership requirements which can be used in each of the different groups and converting between different groups. Finally, this video looks at distribution vs security groups.

Demonstration 14:35

Distribution Group
Any group in Active Directory can be created as either a distribution group or a security group. Distribution groups do not have a SID (Security Identifier) associated with them. For this reason distribution groups can't be used for security. That is, a distribution group cannot be used to assign permissions to files or objects. Distribution groups are mainly used with e-mail programs like Exchange to send e-mails to groups of people. Since there is no SID associated with the group, when you make a user a member of a distribution group, this does not affect the size of the security token for that user. A security token is created when the user logs in and contains their SID and any SID's for any security groups of which they are a member.

Security Group
A security group has a SID and thus can be used for assigning permissions to files or objects. A security group can also be used as a distribution group in e-mail software like Exchange. Thus, the difference between a security group and a distribution group is simply that a security group is security enabled whereas a distribution group is not. If you are not sure which group to create, create a security group since it can do everything a distribution group can do and can also be used in security related operations.

Local Group
Local groups exist only on the computer on which they were created. A local group can have as a member any user or computer account as well as any other type of valid group.

Domain Local Group
Domain Local groups can only be used in the domain in which they were created. A Domain Local group allows membership from any other group as well as any user or computer. Domain Local groups from other domains cannot be used as members because they are limited in their use outside of the domain in which they were created. Universal groups can only be used as members when the Universal group exists in the same forest as the Domain Local group.

Global Group
Global groups have the most restrictive membership requirements, only allowing users, computers, and other Global groups from the same domain to be used as members. However, Global groups can be used as members of any other group, including other forest and external domains. This means a Global group has the most restrictive membership requirements of all the groups but is the most flexible when being used as members of other groups.

Universal Group
The Universal group is replicated via the global catalog server. For this reason, it is available to any domain in the forest but not to other forests or external domains. Since the Universal group is available forest wide, it does not allow Domain Local groups to be members even when the Universal group has been created in the same domain as the Domain Local group.

Summary of Groups' Membership
1) Users and computers can go into any group in any domain and any forest or external domain if the group supports it.
2) Local and Domain Local groups allow the same membership requirements.
3) Universal, Domain Local and Local groups have the least strict membership requirements allowing any valid group with appropriate scope to be a member.
4) Global groups can contain only users, computers and other Global groups from the same domain only.
5) Global groups can be used everywhere, any domain, forest or external domain.
6) Universal groups are available only in the same forest since they are replicated using the global catalog. Since they are forest wide, Domain Local groups can't be members since the Domain Local scope is limited to the domain in which they were created.

Description to long for YouTube. Please see the following link for the rest of the description.
http://itfreetraining.com/70-640/grou...

References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory" pg 145-152
"Active Directory Users, Computers, and Groups" http://technet.microsoft.com/en-us/li...

1. domain local vs global, domain localhost, domain local admin, domain local group nesting, domain local ad group, domain local group definition, domain local administrators group, domain local group greyed out, domain local global and universal groups, domain locale, domain local network, domain local global universal nesting, domain local greyed out, domain local universal, domain local groups not showing, domain local group forest trust, domain local to global, universal studios, universal studios hollywood, universal studios hours, universal studios florida, universal studios tickets, universal remote, universal basic income, universal blood type, universal yums, universal life church, universal declaration of human rights, universal studios orlando tickets, universal standard, universal citywalk, universal studios rides, universal music group, universal soldier, universal technical institute, universal studios hotels, universal donor, global groups hubspot, global groups from multiple domains, global groups london, global groups chennai, global groups mumbai, global groups of companies, global groups llc, global groups windows server 2012, global groups hotel, global groups can contain, global groups in telegram, global groups powershell, global groups llc maryland, groupscope global, global terrorist groups, global brand groups, jangkar global groups, global ethnic groups, wolf global groups, moodle global groups, groups of animals, groups on the periodic table, groups synonym, groups and periods, groups io, groups definition, groups of people, groups recover together, groups near me, groups of elements, group spaces, groups in gmail, groups of 4, groups of three, groups roblox, groups of four, groups yahoo, groups of 5, groupsite, groups of nine, active directory users and computers, active directory windows 10, active directory domain services, active directory administrative center, active directory federation services, active directory tutorial, active directory tools, active directory ou, active directory ports, active directory recycle bin, active directory download, active directory certificate services, active directory password policy, active directory certification, active directory forest, active directory lightweight directory services, active directory powershell module, active directory ldap, active directory for dummies, active directory management tools, \u003d -570, 70-640 exam, 70-640 certification, 70-640 pdf, 70-640 study guide pdf, 70-640 exam questions pdf, 70-640 pdf ebook, mcitp systems administrator, mcitp vs mcse, mcitp-ea, mcitp enterprise administrator, mcitp server administrator, mcitp 70-640, mcitp salary, mcitp certification course, mcitp microsoft, mcitp practice test, mcitp jobs, mcitp windows 10, mcitp meaning, mcitp family support network, mcitp logo, mcitp replacement, mcitp certification cost, mcitp mcps, mcitp 2008, mcitp mcse mcts, mcts real time, mcts tracker, mctsib, mcts m card, mctssa, mcts route 15, mcts trip planner, mcts bus, mcts route 76, mcts route 27, mcts green line, mcts route 14, mcts route 30, mcts route 19, mcts gold line, mcts route 67, mcts route 23, mcts app, mcts next, mcts 80, , itfreetraining youtube, itfreetraining active directory, itfreetraining adfs, itfreetraining dns, itfreetraining 70-410, itfreetraining windows server 2016, itfreetraining windows server 2012, itfreetraining vmware, itfreetraining 70-640, itfreetraining powershell, itfreetraining windows 7, itfreetraining windows 10, itfreetraining hyper v, itfreetraining group policy, itfreetraining groups, itfreetraining dfs, itfreetraining sccm, itfreetraining certificate, itfreetraining linux, itfreetraining 70-411

MCITP 70-640: Active Directory different group types available
88,861 views views	followers
398 Likes	398 Dislikes
Education	Upload TimePublished on 13 May 2012