groups in radius policy

[Mat]

Hi,

I am using peap with eap-mschap v2 for wireless authentication. Which type
of groups are advisable to add the users as a member of... like domain local
or global group. or global group inside a domain local group is OK ?

thanks

[S. Pidgorny <MVP>]

The old time mantra is - users to global groups, global groups to local
groups, permissions to local groups.

Domain local groups can include global and universal groups from other
domains so that's very applicable.
--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

Post by Mat
Hi,
I am using peap with eap-mschap v2 for wireless authentication. Which type
of groups are advisable to add the users as a member of... like domain local
or global group. or global group inside a domain local group is OK ?
thanks