«

The Microsoft 70-270 Training Kit 2nd Ed. states (page 7-37) that "Groups
can be members of other groups". But I've found out that I cannot do this by
using the local users and groups snap-in. The only thing that comes close is
that you can add built-in security principals (like interactive, everyone,
network etc) to groups.
Any advice on that please?

My understanding is on a Doman Controller

Domain Functional level Win 2000 Native & Win2003 can have a nested global
group, but you can't have a domain local nested in a domain local no matter
what, I dunno correct me if I'm wrong.
--
Programmer/ Network Support Analyst Student


"Mr Roflcopter" wrote:

> Dr Nova wrote:
> > The Microsoft 70-270 Training Kit 2nd Ed. states (page 7-37) that "Groups
> > can be members of other groups". But I've found out that I cannot do this by
> > using the local users and groups snap-in. The only thing that comes close is
> > that you can add built-in security principals (like interactive, everyone,
> > network etc) to groups.
> > Any advice on that please?
>
> Are they talking about a domain environment? If so, then Domain Local
> and Global groups can be made members of local groups. You can also make
> Global groups members of Domain Local groups.
>
> If the functional level of the domain is 2000 native or above, you can
> also nest Global and Domain Local groups.
>
> Take a look here:
>
> <http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/ServerHelp/b3674c9b-fab9-4c1e-a8f6-787126471271.mspx>
>
>
> --
> Chris M.
>