• Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint
Share this Page URL
Help

Chapter 4.1. Overview of Managing the Directory > Creating and Managing Groups

Creating and Managing Groups

Group creation and management in Windows 2000 is also usually accomplished through the use of the Active Directory Users and Computers MMC snap-in. As in Windows NT 4.0, with the MMC tool it is possible to both select the group and add members, or to select the user and add group membership. Through the use of ADSI, it is also possible to automate group management as for user accounts.

Windows 2000 expands the types of groups available to manage your environment, providing you with several more options than just simply Global and Local groups. Windows 2000 introduces a new type of group called Universal groups. Universal groups can contain users, Global groups, or other Universal groups from anywhere in your forest. Although Universal groups are very powerful, they exist only if the domain is in Native mode. Universal groups and their memberships are stored in the Global Catalog. Also, the behavior of Domain Local groups has been modified. In Windows 2000, Domain Local groups can contain users and Global groups from anywhere in the forest. However, they can also contain other Domain Local groups within their Domain. Once created, these Domain Local groups can be tied to ACLs or privileges on member servers and workstations within the domain.


PREVIEW

                                                                          

Not a subscriber?

Start A Free Trial


  
  • Creative Edge
  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint