Forum Discussion

aero2466's avatar
aero2466
Brass Contributor
May 29, 2020
Solved

Active Directory on-premise, basic rules.

Hello everyone! Not sure this is correct place to ask but i didn't found more suitable group. I want to ask a question regarding Active Directory groups basics. Everyone remember the rule: if we have...
AD
groups
Rules
  • aero2466's avatar
    aero2466
    Jun 01, 2020

    aero2466 

    Found the article https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-authsod/d3ca79c3-0386-42f8-979b-4376977dcd5e

    This groups named "nested", and this thing called to simplify AD administration. But not any technical limitations for this.

aliat_IMANAMI's avatar
aliat_IMANAMI
Brass Contributor
Jul 22, 2021

aero2466 

 

Yes, this is more like a best practice for https://www.imanami.com/resource-center/whitepapers/7-best-practices-for-ad-groups/?utm_source=mstechcommunity&utm_medium=qa&utm_campaign=7-best-practices-for-ad-groups%2F .

The limitation is trying to add a User from Forest A into a Group that is in Forest B. Most of the deployments keep users in a Single Domain and Groups in another Domain within the Same Forest of Active Directory. Hope this helps answer the question.

 

 

Resources