If you have folders like SuperiorFolder and Sub1, Sub2, Sub3, Sub4, Sub5 folders under this.
And you have Group1, Group2, Group3, Group4, Group5 who shall have access to different rights among these folders.
Is the best practice to create Global Groups (Security) for the different categories you find? Like Global Group 1, Global Group2 , Global Group 3, Global Group 4, Global Group 5.
And then you create Domain Local Groups (Security) like Sub1_full, Sub1_read Sub2_full, Sub2_modify, Sub3_full, Sub4_read, Sub5_write etc.
And of course add the different users to the correct Group and add the domain local group to the ACL adjust the NTFS.
And open up the share rights with full and lock down with NTFS.
Is this the best practice for doing this on Domain Server 2003 for giving different rights to different users on catalogs?