Active Directory By the Numbers: Windows Server 2003

Tutorial: Groups

We now have nine users created in our Active Directory domain. The next step is to divide these users into three sets of three and add those sets to three groups named Accounting , Art , and Marketing .

  1. In Active Directory Users and Computers, click once on the guinea.pig entry on the left pane. On the right pane, right-click in an empty space, point to New , and click Group .

  2. The New Object - Group dialog box appears. In the Group name field, type Marketing . Windows Server 2003 automatically completes the field labeled Group name (pre-Windows 2000) , so we may leave that field as-is.

  3. Under Group scope , choose Global .

    Get Info

    When creating a new group, notice that the Universal group scope is ghosted , making it unavailable. This is because our server is running in mixed compatibility mode by default. This facilitates greater compatibility with older server networks prior to Windows 2000 Server and Windows Server 2003. Universal group scope is available only to these newer server systems. For this reason, we use the global group scope. If you wish to use the Universal group scope, you must raise the domain functional level to either Windows 2000 Native or Windows Server 2003 native . This is accomplished by right-clicking the guinea.pig domain in the left column and selecting Raise domain functional level . (Note: don't worry about this now. We discuss domain functional level in greater detail in Chapter 5).

  4. Under Group type, select Security . ( Note: Distribution groups are reserved for email functions only ). Once all the information is entered, you should see something similar to this:

  5. Click OK . (Notice that the group appears in the right column in the same place as the nine users we created earlier). Create two more groups. Name them Art and Accounting .

  6. We now need to divide the nine users and place them into the three groups we just created. Double-click the Marketing group and click the Members tab across the top of the dialog box.

  7. Click the Add button at the bottom of the window. In the Enter the object names to select field, type either the logon name or full name of your first three users, separating each using semicolons. For example, our first three users can be entered using their full names:

    Shirley Knot;Tye D. Knot;Tye Dye

    or their short logon names:

    sknot;tknot;tdye

    Be sure to click the Check Names button to verify you have typed the names correctly.

  8. Click OK . This adds the first three users to our Marketing group:

  9. Click OK . Perform this same procedure for the remaining two groups; i.e., add the second three users to the Art group and the last three users to the Accounting group.

Related

Категории