RE: Some domain groups not found by 'mkgroup --domain'

[Rick Rankin <rick_rankin at yahoo dot com>]

I'm not sure exactly how to provide an example -- the situation simply exists.
However, I've been poking around in the MSDN documentation, and I've found some
information that might shed some light on this issue. The link below (sort of)
describes local network groups vs. global network groups and the API functions
associated with managing local network groups. It's definitely something that
exists in both W2K & NT4, because our servers are all NT4, although I have W2K
on my workstation.

http://msdn.microsoft.com/library/psdk/network/ntlmapi_952r.htm

Here's the definition of a local group from the above link:

"A local group can contain user accounts or global group accounts from one or
more domains. (Global groups can contain users from only one domain.) A local
group shares common privileges and rights only within its own domain."

As an example of the difference in the APIs, he function for getting a list of
local groups is "NetLocalGroupEnum", while the function for getting a list of
global groups is "NetGroupEnum".

Does that help any?

Rick Rankin
rick_rankin@yahoo.com

--- Andrej Borsenkow <Andrej.Borsenkow@mow.siemens.ru> wrote:
> 
> 
> > -----Original Message-----
> > From: cygwin-owner@sources.redhat.com
> > [mailto:cygwin-owner@sources.redhat.com]On Behalf Of Rick Rankin
> > Sent: Wednesday, November 08, 2000 8:53 PM
> > To: Larry Hall (RFK Partners, Inc); Cygwin
> > Subject: Re: Some domain groups not found by 'mkgroup --domain'
> >
> >
> > No, these groups are different. They are domain groups, yet there
> > seems to be a
> > distinction between a "global" domain group and a "local" domain
> > group. These
> > "local" domain groups do not show up with either 'mkgroup -d' or
> > 'mkgroup -l'.
> >
> > Sorry, I should have been more specific.
> >
> 
> Can you provide an example? To my best knowledge, such thing simply does not
> exist (in NT4 domain, that is). You have users and groups defined on domain
> controller(s) - they are global, domain-wide. And you have users and groups
> defined on domain member(s) - they are local _for_each_member_.
> 
> If have NT workstation A and B they have different "local" groups (even with
> the same names). May be, you mean these?
> 
> -andrej
> 


__________________________________________________
Do You Yahoo!?
Thousands of Stores.  Millions of Products.  All in one Place.
http://shopping.yahoo.com/

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe@sourceware.cygnus.com