Can you give me some guidelines for using Windows NT 4.0 user groups to set up access controls on file-server resources?

NT administrators must give a universe of users access to a universe of resources. You can individually set permissions for users to file-server resources, but groups make your job easier by letting you set permissions only once for an entire group of user accounts. Use these fundamental rules to deal with groups:

  • Use global groups to group users.
  • Use local groups to set permissions on resources.
  • Put global groups into local groups to apply authorization settings.