Managing Groups

CHAPTER THREE

3

Managing Groups

Objectives

This chapter covers the following Microsoft-specified objectives for the “Managing Users, Computers, and Groups” section of the Managing and Maintaining a Microsoft Windows Server 2003 Environment exam:

Create and manage groups . Create and modify groups by using the Active Directory Users and Computers console. . Identify and modify the scope of a group. . Manage group membership. . Find domain groups in which a user is a member. . Create and modify groups by using automation.

. For simplicity of network administration, we can create group objects and allocate resource access rights to these objects. Then by making user accounts members of the group, we can grant them the access that the group objects have been assigned.

Outline

Introduction Creating and Managing Groups The Four Domain Functional Levels The Three Forest Functional Levels Group Type Group Scope Domain Local Groups Global Groups Universal Groups Default Groups Default Groups in Active Directory System Groups Creating and Modifying Groups by Using the Active Directory Users and Computers Console Identifying and Modifying the Scope of a Group Managing Group Membership Adding Accounts to Groups with Command-Line Tools Finding Domain Groups in Which a User Is a Member Creating and Modifying Groups by Using Automation Assigning Groups 126 126 127 128 129 129 131 132 132 134 136 137 Apply Your Knowledge 153 Chapter Summary Key Terms 153 153

Recommended Sequence of Groups 133 Default Groups on Member Servers 134

138 142 144 146 148 149 151

Study Strategies

. In studying this section, be sure to practice all the activities described. Become very familiar with Active Directory Users and Computers and creating groups. . Examine the use of the default groups. Know their capabilities and limitations. . You will need access to a Windows Server 2003 domain controller. Many of the tools are new, or they differ from those available in Windows...