Creating And Administering Groups

By Author: Jasmine
Total Articles: 286
Comment this article

After you assess user needs and have a MCTS group plan in place, you are ready to create your groups. Once you have created groups, you might find it necessary to carry out various administrative tasks to maintain them. This lesson shows you how to create groups, delete groups, add members to groups, and change the group scope.
Creating a Group
You use the Active Directory Users And Computers console to create groups. With the necessary permissions, you can create groups in any domain in the forest, in an OU, or in a container you have created specifically for groups. The name you select for a group must be unique in the domain where you create the group.
To create a group, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
2.Right-click the appropriate domain, OU, or container, point to New, and click Group.
In the New Object-Group dialog box, shown in mcts certification, type the name of the group in the Group Name box. Note ...
... that an entry automatically appears in the
Group Name (Pre-Windows 2000) box, based on the group name you typed.
Select the group scope in the Group Scope box. Select the group type in the Group Type box. Click OK.
Group scopes allow you to use groups in different ways to assign permissions. The three group scopes are global, domain local, and universal. Global security groups are most often used to organize users who share similar network access requirements. Domain local security groups are most often used to assign permissions to resources. Universal security groups are most often used to assign permissions to related resources in multiple domains.

In Windows Server 2003, the Anonymous Logon group is no longer a member of the Everyone group. If anonymous users must be granted access to resources, you must explicitly add the Anonymous Logon security group to the access control list for the resource and provide the required permissions. If anonymous users must always be granted access to free certification resources, you can change the new Windows Server 2003 default security setting for the Everyone group by enabling the group policy Network Access: Let Everyone permissions apply to anonymous users.