Talk:AGDLP

From Wikipedia, the free encyclopedia

this looks to me like its straight out of a text book

Agreed. This page doesn't explain at all why one would use this model (i.e., the global groups represent business roles in the domain, whereas the domain local groups represent permissions or user rights in the domain), and the examples are not completely accurate as a result (e.g., one usually assigns the global groups in the various domains to a universal group and then assigns the universal group to the relevant domain local groups, because the universal groups are replicated to all global catalogs and this simplifies group membership resolution and inter-domain traffic in large forests, if I understand it correctly). Xenophon Fenderson 17:37, 11 July 2007 (UTC)