Microsoft Windows Server 2003 (70-290) Tutorials
Managing Groups / Creating Groups
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Learn More
Subtitles of the Movie (Microsoft Windows Server 2003 (70-290) / Managing Groups / Creating Groups)
We manage groups in the same way that we manage the user accounts and computer accounts. In that we place the groups in the containers in which they are gong to be managed mainly OUs.So we create groups within the OUs in which we are going to manage the groups. Let us go back to Active directory users and computers and let us say that in my management OU, I want to create some groups. And in particular what I want to do is, I want Al Crosskey and Bill black now going to be members of the accounts payable department. I want to them to have access to a color printer so that they can do some very nice presentations for the accounting department. So there is account payable which is part of accounting and I want them to be able to print to this color printer. So, I want to do this using AGDLP accounts in the global groups, global groups in domain local groups and then gives that domain local group the permissions to print. So let us see how to do that. First of all what we are going to do is, we are going to create the accounts payable global group. So right click on the management OU. And I am going to create the global group. Come down to new and then to group and notice that it defaults to global security. That is fine. It is called APG. You should have a naming system within the company. That allow you to determine whether it is a global group or domain local group and what the group does and may be where the group is located. There are multiple places where it could be located. So APG is the name of my global group and going to click on ok. That creates the accounts payable global group. Now it is going to have two members, L Crosskey and Bill Black. So, let us right click on the account payable group and click on properties then click on members. It does not have any members right now. Let us click on Add, and type in L that as L Crosskey, Click on add, type in Bill and that adds Bill black. If we had multiple people with those first names, then we can narrow them down. System will narrow it down and then we click on ok. So now we have done the AG part. We got an account into a global group. Now what we are going to do is we are going to nest that global group into another global group called accounting. We can also have an account receivable global group. In fact let us make one. We are going to right click on management OU, click on new, group ARG, that is the account receivable. We are not going to use it, we are going to use it only for illustrative purposes. So now we got the accounts payable global group and the accounts receivable global group. Now we need another global group to nest these into. We are going to call that Accounting group. Right Click on Management, click on group and an ACCG, that is the accounting global group. click on ok , We are going to click and right click on the accounting global group we are going to properties, members and see if this within starts within A. This is ok here is your options; ok we want account payable, click on it hold down the control key and click in accounts receivable. ARG group we have got APG and ARG are now members of ACCG. Now we need the domain local group. That is end up going having permissions ***. Right click on management, new, group, this time it is going to be a domain local group and the group name is going to be color printer users. And it is going to be a domain local security group so that is fine so click on ok. Now the color printer users is going to have one member, right click on color printer users then properties, then members, click on add, click on ACC,, click on ok, so now the color printer users group has one member the accounting group, click ok. So, now when we create a printer and we want to assign permissions for people who are in the accounts payable global group to have access to that printer. Then we will actually assign those permissions through color printer users. In another words we assign the permissions to the domain local group And we talk more about permissions and more about printers later on But this is the way that we use the groups and the best way to use the accounts, and the global groups in the domain local groups all together. You should know this both for real life and well as for the test. We can also modify the group that we create. In the next section take a look at Modifying Groups and that best practice for using groups. Modifying groups is next.
Tutorial Information
| Course: | Microsoft Windows Server 2003 (70-290) |
| Author: | Bill Ferguson/Certified Instructor |
| SKU: | 33497 |
| ISBN: | 1932072918 |
| Release Date: | 2004-06-03 |
| Duration: | 8.5 hrs / 107 lessons |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 81,350 Video Tutorials (14,200 free)
- Video Available as Flash or QuickTime
- Over 715 Courses
- $30 for One Month Access
- Multi-User Discounts Available
