samba - Jul 2014 - Best practice - local groups - domain groups

Hey guys

I have a generic questions about local / domain groups.

We have 1 Domain and 20 sites. In each site is a domain controller and a 
member server. The user have only access to share on the memberserver on 
their site.

Should a share be accessible for a local group or a domain group?
(replicaton, traffic, failure safety, security)

user -> domain group -> share
or
user -> domain group -> local group -> share


Karl Heinz

Am 22.07.2014 18:25, schrieb Karl Heinz Wichmann:
> I have a generic questions about local / domain groups.
> 
> We have 1 Domain and 20 sites. In each site is a domain controller and a
> member server. The user have only access to share on the memberserver on
> their site.
> 
> user -> domain group -> share
> or
> user -> domain group -> local group -> share

I see no advantage to have a domain group nested in a local group, that
is allowed to enter a share.


> Should a share be accessible for a local group or a domain group?
> (replicaton, traffic, failure safety, security)
Replication traffic is low. Only changes are transfered. I don't see any
failure safety and security advantages. Examples?



Regards,
Marc