I frequently get asked which group type can be member of which group. For this reason I decided to explain the nesting of AD groups in this article with the help of some graphical illustrations.
During an AD domain migration in a customer environment I faced the problem that group permissions for file shares did not work any more. This is why.
In almost every Active Directory migration project the following question comes up at one point or another: Are the Domain Local Groups (DLG) migrated or not?
- Nesting groups in Active Directory
- Create home directory and grant permissions with PowerShell
- Creating an individual random password with PowerShell
- Retrieve Active Directory subnets with PowerShell
- Editing users of other domains – with PowerShell
- Azure Basics: Connecting with Azure (PowerShell)
- PowerShell Custom Objects
- Logon Script does not start on Windows Server 2012 R2 domain
- IsMember – Check group membership in Active Directory
- Dynamic OU Groups – Assign Permissions to OUs