|
|
|
|
Active directory specific groups, with descriptions on what they are and do.
- Domain local groups: Can be used to control access to resources in a domain (e.g., a shared printer). Can contain accounts, global groups, universal groups from any domain, and other domain local groups (from the same domain).
- Global group: A security or distribution group that can contain users, groups, and computers from its own domain as members. Global security groups can be granted rights and permissions on resources in any domain in its forest.
- Universal Groups: Can be used across domains and forests (i.e., sets of directory trees) in the same AD instance to hold other groups. Can contain accounts, global groups, and universal groups from the same forest where the universal group is defined
- Federation: A trust relationship between two or more SIP domains that allows users in separate organizations to communicate in real time across network boundaries as federated partners. Internal users can communicate with external users of a federated partner by using IM, audio/video, or conferencing.
- Federated User: An external user who has valid credentials with a federated partner and who is authenticated on that basis by Office Communications Server 2007 R2.
- For those of you using Win32::OLE via Perl...
Win32::OLE
- ADS_GROUP_TYPE_GLOBAL_GROUP =>
0x00000002,
- ADS_GROUP_TYPE_DOMAIN_LOCAL_GROUP =>
0x00000004,
- ADS_GROUP_TYPE_LOCAL_GROUP =>
0x00000004,
- ADS_GROUP_TYPE_UNIVERSAL_GROUP =>
0x00000008,
- ADS_GROUP_TYPE_SECURITY_ENABLED =>
0x80000000
|
|
|
|
|
|
