Blayne said:
I need to copy the local Windows groups and all of the
users in those groups from one server to another. Does
anyone know of a way to do this?
Thats exactly what a running a domain does. Domain controllers provide
continual replication to update the groups and users as you go.
A standalone server's group, whether local or global is not defined by its
name, but rather by its Security Identifier as well as the server's SID. So
user "Joe" on server01 is not the same entity as user "Joe" on server02.
While you can create a group on another server with the same name, the 2
entities are distinct and governed/managed by seperate security providers.
The above is not true of a domain, where a global group or domain user, for
example, is unique throughout the domain. Unlike standalone servers, a
domain user exists everywhere within the security scope of the domain. And
that includes any client participating in the domain.
Add to this the numerous advantages that a domain provides. Single point of
authentication, Central administration, a much tighter security, the ability
to organize and partition departments through OUs (Organisational Units) as
well as modify security based on inheritence and user membership, etc, etc.