Home

 

Nested groups

 

Windows 2000 and Windows 2003 domain controllers by default are placed in function level 2000 mixed. When using this functional level users cannot add or nest local groups.

We can place Windows 2000 domain controllers in functional level 2000 native, or Windows 2003 domain controllers in functional levels 2000 native or Server 2003. This allows users to add or nest local groups, and also to perform multiple nesting of global and universal groups. The WebSphere MQ security model does not support either nested local groups, or multiple nesting of global and universal groups. This means that local and domain local groups are supported, as are any immediately nested global or universal groups.

 

Parent topic:

Guidelines for Windows 2000 and Windows 2003

fa13420_

 

Home