Article DirectoryJust another article directory

After you assess user needs and have a MCTS group plan in place, you are ready to create your groups. Once you have created groups, you might find it necessary to carry out various administrative tasks to maintain them. This lesson shows you how to create groups, delete groups, add members to groups, and change the group scope.
Creating a Group
You use the Active Directory Users And Computers console to create groups. With the necessary permissions, you can create groups in any domain in the forest, in an OU, or in a container you have created specifically for groups. The name you select for a group must be unique in the domain where you create the group.
To create a group, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
2.Right-click the appropriate domain, OU, or container, point to New, and click Group.
In the New Object-Group dialog box, shown in mcts certification, type the name of the group in the Group Name box. Note that an entry automatically appears in the
Group Name (Pre-Windows 2000) box, based on the group name you typed.
Select the group scope in the Group Scope box. Select the group type in the Group Type box. Click OK.
Group scopes allow you to use groups in different ways to assign permissions. The three group scopes are global, domain local, and universal. Global security groups are most often used to organize users who share similar network access requirements. Domain local security groups are most often used to assign permissions to resources. Universal security groups are most often used to assign permissions to related resources in multiple domains.

Read more on Creating and Administering Groups…

Defining a Mandatory User Profile You define a mcitp certifications mandatory user profile by selecting the profile template, specifying the path to the folder you created to store the mandatory user profile, and selecting the user or group you want to be able to use the mandatory user profile in the User Profiles tab in the System Properties dialog box.
To define a mandatory user profile, complete the following steps:
1.Locate the System Properties dialog box with the User Profiles tab that you left open when creating the mandatory user profile template.
2.In the LIser Profiles dialog box, shown previously in Figure 7-10, select the user whose profile you want to use as the mandatory user profile, then click Copy To.
The user account should be the same one you created for the mandatory user profile template in the previous procedure.
3.In the Copy To dialog box, shown in Figure 7-11, type the path to the folder you created to store the mandatory user profile in step 1, using the format
mcitp 2008. In the Permitted To Use box, click Change.
4.The Confirm Copy message box appears, stating that the folder you created to store the mandatory user profile in step 1 already exists and that the current contents will be deleted. This message appears because you already created the folder for the profile. Click Yes.
5.In the User Profiles dialog box, click OK. In the System Properties dialog box,click OK.
Assigning a Mandatory User Profile to a User Account You assign a mandatory user profile to a user account by indicating the path to the folder you created to store the mandatory user profile in the Profile tab in the Properties dialog box for the user account.
To assign a mandatory user profile to a user account, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
2.Expand the appropriate domain, and then click the appropriate OU.
3.In the details pane, double-click the user account(s) to which you want to assign the mandatory user profile.
4.In the Properties dialog box for a user account, click the Profile tab.
5.In the Profile tab, shown previously in Figure 7-9, in the Profile Path box, type the path to the folder you created to store the mandatory user profile, using the free certification. Click OK.Close the Active Directory Users And Computers console.
Windows Server 2003 has four categories of default groups: groups in the Builtin folder, groups in the Users folder, special identity groups, and default local groups.

Read more on User Profile Types…