Domain Local / Global / Mail Enabled Groups

[steve]

I am in the process of setting up a new network and am having some
difficulty understanding why I would want to set up the recommended
"Global -> Local -> Permissions" relationship. In my existing network I use
only local groups (most of which are mail enabled) and administration is
easy.

It seems to me that setting up three separate groups (e.g. "DG_Sales"
distribution list, a "GG_Sales" group and a "DL_Sales" group) would create
an administrative headache compared to the benefits it offers?

What do most people do here?

Thanks
steve

 

[Ehren]

A lot of your group strategy will depend on your environment and your AD
structure as different types of groups have different scopes in AD. Do you
use AD at all? If so how many domains do you have? How many forrests?

Let me know that and then I can give you some more valuable info.

/Ehren

"steve" wrote:

> I am in the process of setting up a new network and am having some
> difficulty understanding why I would want to set up the recommended
> "Global -> Local -> Permissions" relationship. In my existing network I use
> only local groups (most of which are mail enabled) and administration is
> easy.
>
> It seems to me that setting up three separate groups (e.g. "DG_Sales"
> distribution list, a "GG_Sales" group and a "DL_Sales" group) would create
> an administrative headache compared to the benefits it offers?
>
> What do most people do here?
>
> Thanks
> steve
>
>
>