Active Directory / ADAM Group Name Uniqueness

active-directorygroups

Can I have 2 different groups in Active Directory in different containers that have the same name? For example, can I have an OU=baz that contains a group CN=foo and an OU=bar with a group CN=foo? This is all in the same domain.

Does it make a difference what the group type is? I have been playing around with ADAM, and it seems like this is possible, but I was not sure if a production AD instance might not allow this sort of thing.

Thanks,
Carl

Best Answer

In generic LDAP implementations, you can do this. In Novell NDS, you can do this. In MS DS (AD), you can't reuse names in a single domain, although you could have identical names in different domains (but in the same AD tree or forest.)