How do I know whether a AD group is a Distribution Group or Security Group?
Note: I am an ordinary user. I do not have permission to run power shell scripts. Any way to identify using User Interface that does not require admin permissions?
Windows – Identify AD Group Type: Distribution Group or Security Group
active-directoryldapnetwindows
Related Solutions
I have noticed this myself. What happens, is that UAC kicks in because you are using your "local administrators" membership to gain access to the drive, and this is excatly what UAC monitors for.
For file servers, my personal best practice is to never use the "Administrators" group to provide permissions for users.
Try this: Create an AD group called "FileServerAdmins" or whatever, add your user (or domain admin group) to it. Give this group access to the D-drive with the same permissions as the existing Administrators group.
You should notice that even after removing the "Everyone" permission any members of the "FileServerAdmins" group should still have access to the drive, without getting the UAC prompt.
I was a bit shocked myself when I discovered this a while back, it is defenitely a part of UAC that could use some revision...
Related Topic
- Windows – Can’t add domain local security group to local machine admin group – Windows Active Directory
- Can you include an AD distribution group in a security group
- Windows – Distribution Group used for NTFS permissions
- Best practice to use AD security group as distribution group in o365
- Exchange – Using Security Groups in Exchange Distribution Groups
- Active Directory Groups – Best Practices for Distribution vs Security Groups
Best Answer
If you can assign the group permissions to a folder in your home directory using Windows Explorer, it is a security group.