An AD Group aggregates together user and computer accounts into a single unit. Their goal is to simplify administration by applying common permissions to multiple accounts at once.
A group can be local to a particular computer, as described here. However, for a group to be valid over the network, it has to be a directory object within Active Directory. The groups are then known as AD groups.
AD groups can be nested- in other words, one group can be made a member of another group.
A group can be local to a particular computer, as described here. However, for a group to be valid over the network, it has to be a directory object within Active Directory. The groups are then known as AD groups.
AD groups can be nested- in other words, one group can be made a member of another group.
No comments:
Post a Comment