In the scenario that was described for the use of AGUDLP I don't understand why AGDLP would not work. Couldn't we do the following? 1. Create global groups in each domain and add the respective users for that particular domain 2. Create domain local groups in "west" and "east", and add all three global groups (created in step 1) to the domain local groups 3. Assign permissions to the folder in each domain, to the domain local group created for that respective domain
Whatever you explained will also work, however adding "Universal Group" will improve the latency as Universal Groups are published in the Global Catalog... if we do not use universal group we need to use more group nesting...and a good admin will always avoid too many nesting
Clear and concise explanation! Thank you for making this video. I was confused about the naming of the group scopes but after watching this I understand!
Sir i have a doubt,you have mentioned in domain local scope that only global groups from same domain can be member of DL group, so how in first scenario we have added global group from parent domain to domai local group of child domain.kindly reply
"only global groups from the same domain can be members of DL group"- No, ...The scope of GG is the entire forest, it can be a member of any DL group in any Domain. Please watch the below video on group nesting... ruclips.net/video/QTR86qxogbc/видео.htmlsi=_kdGqfhU9YIlWwH5
This guy is a brilliant teacher, Eastcharmer is good but DCTechNet explains it so much better like an actual lecturer would. Thank you!
Crazy I had to find your video to find a good explanation on scope. Thanks!
Glad it helped!
You have no idea how much I was struggling to understand the different scopes. Thank you for making it easier for me.
Glad to know that it helped you.
My textbook does a terrible job of describing this material. Thanks for making it easy to understand.
Thanks for watching
I was having a difficult time understanding this subject until I watched this. Great job, friend. :)
Dear Geoff - Nice that you liked the video, let me know the topics on which you like more contents, I will try my best
Just loved your video bro!! Everything nicely explained
Nice to see you liked the videos
In the scenario that was described for the use of AGUDLP I don't understand why AGDLP would not work. Couldn't we do the following?
1. Create global groups in each domain and add the respective users for that particular domain
2. Create domain local groups in "west" and "east", and add all three global groups (created in step 1) to the domain local groups
3. Assign permissions to the folder in each domain, to the domain local group created for that respective domain
Whatever you explained will also work, however adding "Universal Group" will improve the latency as Universal Groups are published in the Global Catalog... if we do not use universal group we need to use more group nesting...and a good admin will always avoid too many nesting
Clear and concise explanation! Thank you for making this video. I was confused about the naming of the group scopes but after watching this I understand!
Glad it was helpful!
Thanks for the Great explanation, Please make a video for the Token Bloat issue
To understand the "Token Bloat issue" one must understand how "kerberos token" works...and it;s a huge topic...
Sir i have a doubt,you have mentioned in domain local scope that only global groups from same domain can be member of DL group, so how in first scenario we have added global group from parent domain to domai local group of child domain.kindly reply
"only global groups from the same domain can be members of DL group"- No, ...The scope of GG is the entire forest, it can be a member of any DL group in any Domain.
Please watch the below video on group nesting...
ruclips.net/video/QTR86qxogbc/видео.htmlsi=_kdGqfhU9YIlWwH5
@@dctechnet -- Thank you sir..
Great explanation, thanks. What happens when the connection of from one forest to another. For example: domain1.lan and domain2.lan ?
Request you to drop me an email dcthatte@gmail.com
hi, looking for practical of the theory on servers(domains)
We already have a playlist on Active Directory
thanks for simplifying that.
You're welcome!
legend
Many thanks
🙏