How were access rights to file resources distributed? What types of AD groups exist and how do they differ?

Access to file resources in corporate networks is usually managed through Active Directory (AD) using groups and permissions.

Types of groups in AD and their differences:

• Security Groups

  • Used to assign access rights to resources (files, folders, printers, etc.).
  • Can be local, global, or universal.

• Distribution Groups

  • Used only for email distribution.
  • Cannot be used to assign access rights.

Security Groups are divided by scope:

• Domain Local Groups

  • Used to assign access rights to resources within a single domain.
  • Users and groups from any domain can be added to them.

• Global Groups

  • Contain users from their own domain.
  • Used to organize users with similar roles.

• Universal Groups

  • Can contain users and groups from any domain in the forest.
  • Used to assign access rights across multiple domains.

How access was distributed:

1. Security Groups with the required scope were created.
2. Users were added to the appropriate groups based on roles or departments.
3. Groups were assigned permissions to file resources (read, write, modify).

This approach simplifies access management by allowing centralized control of rights through groups rather than individually for each user.