Pos 421 Memo

Active Directory User Group Proposal

POS 421

March 8, 2010

This paper will further detail the Active Directory implementation for Riordan Manufacturing. This paper will summarize how to organize users into groups using the scopes available in Windows.

There will be 7 groups implemented. Each one will have special permissions to access network information. The groups will be executive, professional, managers, administration, technician and sales. Access will be granted on a need to know basis only. Each group will be placed according to scope. Admin will have the most access and be in charge of granting access. All others will have a password and logon to gain access to the network.

There are three scopes available in Windows. Universal, global and domain local are the scopes that are available in Windows. Everyone will have access to read the company directory but only admins will have access to change it. Anyone other than an admin will only be able to change their own information. A manager will also be named for each group to assist the IT dept in granting access to information. Nesting certain groups will help eliminate replication across the network. Some employees can be members of different groups, so they will be nested across a few groups and may have different permissions.

There will be separate groups for each facility. Each facility will have their own admins. Each facility will have their own set of computers and printers. A location map is in the work to map out where users and computers are located across the network.