Creating and Administering Groups
After you assess user needs and have a group plan in place, you are ready to create your groups. Once you have created groups, you might find it necessary to carry out various administrative tasks to maintain them. This lesson shows you how to create groups, delete groups, add members to groups, and change the group scope.
Creating a Group
You use the Active Directory Users And Computers console to create groups. With the necessary permissions, you can create groups in any domain in the forest, in an OU, or in a container you have created specifically for groups. The name you select for a group must be unique in the domain where you create the group.
To create a group, complete the following steps:
1.Click Start, point to Administrative Tools, and then click Active Directory Users And Computers.
2.Right-click the appropriate domain, OU, or container, point to New, and click Group.
In the New Object-Group dialog box, shown in , type the name of the group in the Group Name box. Note that an entry automatically appears in the
Group Name (Pre-Windows 2000) box, based on the group name you typed.
Select the group scope in the Group Scope box. Select the group type in the Group Type box. Click OK.
Group scopes allow you to use groups in different ways to assign permissions. The three group scopes are global, domain local, and universal. Global security groups are most often used to organize users who share similar network access requirements. Domain local security groups are most often used to assign permissions to resources. Universal security groups are most often used to assign permissions to related resources in multiple domains.
