Most RecentMost ViewedMost LikesActive Directory on-premise, basic rules. Hello everyone! Not sure this is correct place to ask but i didn't found more suitable group. I want to ask a question regarding Active Directory groups basics. Everyone remember the rule: if we have two AD domains (in one tree), and we want to add some user from first domain into the group in the second, we need to create a group in the first domain add the user into it and add this group into the group in the other domain. But not the other way: to add a user directly from the first domain into the group in the second domain. I want to ask everyone, is this rule actual in 2020? This rule basically based on the technical limitations or this is just the best practice? SolvedRestrict AD security group additons Hello, I have been looking around for the best way to lock down an AD security group so that help desk users for instance, cannot add users to a specific AD group. So if I had a group called "secure_group" I would like to lock that down to that only domain admins and specific other users can add members to that group and prevent help desk users from adding users to that group. All the searching I have been doing discusses "Restricted Groups" which done through Group Policy, deals with adding domain security groups or specific users to "Local Groups" on servers. But I am looking to lock down AD security groups. Any help is appreciated. Thanks! SolvedFriday Mail Sack: Best Post This Year EditionFirst published on TechNet on Jan 06, 2012 Hi folks, Ned here and welcoming you to 2012 with a new Friday Mail Sack.Friday Mail Sack: Delicious Ranch Dressing EditionFirst published on TechNet on Aug 06, 2010 Hello Earthlings, Ned here again with this week’s interesting conversations within Microsoft DS support.
