Hi,
First off let me start by saying i am new to active directories as well as the terminology.
Where I work we have a lot of systems that we are all eventually going to be supporting. To access these files and systems that are on any of the four file/print servers we have, users are put in AD groups and permissions assigned that way.
For us to be able to all support all the systems we all need to have the same permissions because at the moment user1 might be able to access certain folders/files for system 1 where as user 2 wouldn't be in this group because there wasn't a requirement until now.
I'm trying to find the best solution to this as we think making something like a Super-group and putting all of the current AD groups in this super-group would be the best option.
Is this even possible? I already have all the user groups everyone in the team is a member of and can identify the gaps.
Another suggestion was to get all the folders that had the permissions we needed and create the super-group using the list of folders and permissions needed.
After looking into this it became obvious that putting in a request to the people that handle AD groups and asking them to create our super group and to add well over of 100,000 permissions to folders is just not going to happen.
I'm sorry if this doesn't make sense.
Does anyone have any ideas on a solution
Thanks
Gareth