70-646 Windows 2008 Administration Campus-Booster ID : 88606
www.supinfo.com
Copyright © SUPINFO. All rights reserved
Groups Administration
Creating Groups
Managing Group Membership
Strategies for Using Groups
Modifying Groups
Using Default Groups
By completing this course, you will:
Groups AdministrationGroups Administration
Group Creation
Use of groups
Default Groups Use
Course’s plan:
Groups Administration
Course topics
Group Creation
Groups Administration
What Are Groups?
What Are Domain Functional Levels?
What Are Global Groups?
What Are Universal Groups?
What Are Domain Local Groups?
What Are Local Groups?
Naming Guidelines and Groups location.
PreviewGroup Creation
What Are Groups?Group Creation
Groups simplify administration by enabling you to assign permissions for resources
Groups are characterized by scope and type:
The group scope determines whether the group spans multiple domains or is limited to a single domain
The three Domain group scopes are Global, Domain Local, and Universal
What Are Domain Functional Levels?Group Creation
Windows 2000
Windows 2000,
Windows Server 2003,
Windows server 2008
Global, Domain local, universal
Windows Server 2003
Windows Server 2003, Windows Server 2008
Global, Domain local, Universal
Domain controllers Supported
Group scopes supported
Windows Server 2008
Only Windows Server 2008
Global, Domain local, Universal
What Are Domain Local Groups?Group Creation
Domain local group rules
Users account, Global groups and Universal group from whatever the domain and domain local group from the same domain
Members
Domain local groups in the same domain Can be a member of
Visible only in its own domainScope
Domain to which the domain local group belongsPermissions
What Are Global Groups?Group Creation
Global group rules
Users, groups, and computers from its own domain Members
Domain local groupsCan be a member of
Visible in its own domain and all trusted domainsScope
All domains in the forestPermissions
What Are Universal Groups?Group Creation
What Are Universal Groups?
Users account, Global groups and other Universal group from whatever the domain in the forest
Members
Users account, Global groups and other Universal group from whatever the domain in the forest
Can be a member of
Visible in all domains in a forestScope
All domains in a forestPermissions
What Are Local Groups?Group Creation
Local group rules
Local user accounts from the computerMembers
None Can be a member of
Where to Create GroupsGroup Creation
You can create groups in the root domain of the forest, any other domain in the forest, or an organizational unit
Choose the domain or organizational unit where you create a group based on the administration requirements for the group
For example:
If your directory has multiple organizational units, each of which has a different administrator, you can create global groups in those organizational units
Stop-and-think Part 1 Group Creation
Do you have any questions ?
Using Groups
Managing Groups
PreviewUsing Groups
What Is Group Nesting ?
Group Policies.
What Is Modifying the Scope or Type of a Group ?
Why Assign a Manager to a Group ?
GroupGroup
What Is Group Nesting?Using Groups
It means adding a group as a member of another group
Nest groups to consolidate group management
Easier way to maintain objects in the infrastructure
Different group nesting
GroupGroup GroupGroup GroupGroup
Group PoliciesUsing Groups
User Accounts
Global Groups
Universal Groups
Domain Local Groups
Permissions Local Groups Policies
A G P
A DL P
A G DL P
A G U DL P
A G L P
What Is Modifying the Scope or Type of a Group?Using Groups
Changing group scope
Global to universal
Domain local to universal
Universal to global
Universal to domain local
Changing group type
Security to distribution
Distribution to security Range acting
Why Assign a Manager to a Group?Using Groups
To enable you to:
Track who is responsible for groups
Delegate to the manager of the group the authority to add users to and remove users from the group
To distribute the administrative responsibility of adding users to groups to the people who request the group
Stop-and-think Part 1 Using Groups
Do you have any questions ?
Using Default Groups
Managing Groups
Default Groups on Member Servers
Default Groups in Active Directory
System Groups
PreviewUsing Default Groups
Using Default Groups
Default Groups on Member Servers
Using Default Groups
Group by default in Active Directory
Using Default Groups
System Groups
System groups represent different users at different times
You can grant user rights and permissions to system groups, but you cannot modify or view the memberships
Group scopes do not apply to system groups
Users are automatically assigned to system groups whenever they log on or access a particular resource
Stop-and-think Part 1 Using Default Groups
Do you have any questions ?
Using Default Groups
Using Default Groups
Creating Groups
Creating Groups
Using GroupsUsing Groups
Course summaryManaging Groups
For more
CoursesPublications
Web sites
www.microsoft.com
70-646 : Windows Server Administration
Conferences / Labs
If you want to go into these subjects more deeply, …
www.laboratoire-microsoft.org
http://www.microsoft.com/mspress
Managing Groups
technet.microsoft.com
Microsoft TechDays
Congratulations
You have successfully completed the SUPINFO course module
Managing Groups
On the road againManaging Groups