Group as a member of a group

Discussion in 'Windows Server' started by SherryM, Dec 28, 2005.

  1. SherryM

    SherryM Guest

    Hi,

    I set up a group policy to not allow internet access (execution of browsers)
    using a global security group called Students-NoInternetAccess. It lets me
    add individual users and works wonderfully. However I was wanting to add a
    group I created (ie a whole class, Students-BCIS (global security) as to not
    allow the class internet browser capabilities) but it will not allow me to
    browse and find this group(or other created groups but shows the default
    groups) to add it to the Students-NoIntnernetAccess. I am running Win Server
    2003. Both groups are global security and in the same domain (students).
    Students domain is a child domain. Any ideas why it does not allow me to
    choose this "create" group?

    Thanks,
    Sherry
    Northeast Christian Academy
     
    SherryM, Dec 28, 2005
    #1
    1. Advertisements

  2. Sherry-

    Where are you trying to add the group? In active directory users and
    computers or somewhere else?

    Ensure the target is "entire directory" rather than the machine your console
    is pointed at.

    Also another way to do it would be to open your "Students-BCIS" group and
    make it a member of your "Students-NoInternetAccess" group.

    Regards,
    Erik
     
    Erik Szewczyk [MVP], Dec 28, 2005
    #2
    1. Advertisements

  3. SherryM

    Todd J Heron Guest

    To add, global groups cannot be nested unless running Windows 2000 native
    mode or above.
     
    Todd J Heron, Dec 29, 2005
    #3
  4. SherryM

    SherryM Guest

    I am adding the group in active directory. I have tried to add it to both
    ways and also change the target, but it will not show the groups I created
    only the default groups. Is it possible it has something to do with what OU
    they are stored in? I also thought about recreating the No_internet access
    group in the parent domain and seeing if it would allow me to add the global
    group in the child domain. Any other ideas would be greatly appreciated.
     
    SherryM, Dec 29, 2005
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.