O'Reilly logo

Windows Server 2016 Administration Fundamentals by Bekim Dauti

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Understanding AGDLP and AGUDLP

Both Accounts, Global, Domain Local, Permissions (AGDLP) and Accounts, Global, Universal, Domain Local, Permissions (AGUDLP) are Microsoft's recommendation for effectively using group nesting when assigning permissions. Table 2 presents the flow of assigning permissions with AGDLP and AGUDLP.

Table 2. Assigning permissions with AGDLP and AGUDLP:

AGDLP

AGUDLP

Add the Accounts to Global group

Add the Global group scope to Domain Local group

To Domain Local group assign Permissions

Add the Accounts to Global group

Add the Global group to Universal group

Add Universal group to Domain Local group

To Domain Local group assign Permissions

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required