70-646 Windows 2008 Administration Campus-Booster ID : 88606

www.supinfo.com

Copyright © SUPINFO. All rights reserved

Groups Administration

Creating Groups

Managing Group Membership

Strategies for Using Groups

Modifying Groups

Using Default Groups

By completing this course, you will:

Groups AdministrationGroups Administration

Group Creation

Use of groups

Default Groups Use

Course’s plan:

Groups Administration

Course topics

Group Creation

Groups Administration

What Are Groups?

What Are Domain Functional Levels?

What Are Global Groups?

What Are Universal Groups?

What Are Domain Local Groups?

What Are Local Groups?

Naming Guidelines and Groups location.

PreviewGroup Creation

What Are Groups?Group Creation

Groups simplify administration by enabling you to assign permissions for resources

Groups are characterized by scope and type:

The group scope determines whether the group spans multiple domains or is limited to a single domain

The three Domain group scopes are Global, Domain Local, and Universal

What Are Domain Functional Levels?Group Creation

Windows 2000

Windows 2000,

Windows Server 2003,

Windows server 2008

Global, Domain local, universal

Windows Server 2003

Windows Server 2003, Windows Server 2008

Global, Domain local, Universal

Domain controllers Supported

Group scopes supported

Windows Server 2008

Only Windows Server 2008

Global, Domain local, Universal

What Are Domain Local Groups?Group Creation

Domain local group rules

Users account, Global groups and Universal group from whatever the domain and domain local group from the same domain

Members

Domain local groups in the same domain Can be a member of

Visible only in its own domainScope

Domain to which the domain local group belongsPermissions

What Are Global Groups?Group Creation

Global group rules

Users, groups, and computers from its own domain Members

Domain local groupsCan be a member of

Visible in its own domain and all trusted domainsScope

All domains in the forestPermissions

What Are Universal Groups?Group Creation

What Are Universal Groups?

Users account, Global groups and other Universal group from whatever the domain in the forest

Members

Users account, Global groups and other Universal group from whatever the domain in the forest

Can be a member of

Visible in all domains in a forestScope

All domains in a forestPermissions

What Are Local Groups?Group Creation

Local group rules

Local user accounts from the computerMembers

None Can be a member of

Where to Create GroupsGroup Creation

You can create groups in the root domain of the forest, any other domain in the forest, or an organizational unit

Choose the domain or organizational unit where you create a group based on the administration requirements for the group

For example:

If your directory has multiple organizational units, each of which has a different administrator, you can create global groups in those organizational units

Stop-and-think Part 1 Group Creation

Do you have any questions ?

Using Groups

Managing Groups

PreviewUsing Groups

What Is Group Nesting ?

Group Policies.

What Is Modifying the Scope or Type of a Group ?

Why Assign a Manager to a Group ?

GroupGroup

What Is Group Nesting?Using Groups

It means adding a group as a member of another group

Nest groups to consolidate group management

Easier way to maintain objects in the infrastructure

Different group nesting

GroupGroup GroupGroup GroupGroup

Group PoliciesUsing Groups

User Accounts

Global Groups

Universal Groups

Domain Local Groups

Permissions Local Groups Policies

A G P

A DL P

A G DL P

A G U DL P

A G L P

What Is Modifying the Scope or Type of a Group?Using Groups

Changing group scope

Global to universal

Domain local to universal

Universal to global

Universal to domain local

Changing group type

Security to distribution

Distribution to security Range acting

Why Assign a Manager to a Group?Using Groups

To enable you to:

Track who is responsible for groups

Delegate to the manager of the group the authority to add users to and remove users from the group

To distribute the administrative responsibility of adding users to groups to the people who request the group

Stop-and-think Part 1 Using Groups

Do you have any questions ?

Using Default Groups

Managing Groups

Default Groups on Member Servers

Default Groups in Active Directory

System Groups

PreviewUsing Default Groups

Using Default Groups

Default Groups on Member Servers

Using Default Groups

Group by default in Active Directory

Using Default Groups

System Groups

System groups represent different users at different times

You can grant user rights and permissions to system groups, but you cannot modify or view the memberships

Group scopes do not apply to system groups

Users are automatically assigned to system groups whenever they log on or access a particular resource

Stop-and-think Part 1 Using Default Groups

Do you have any questions ?

Using Default Groups

Using Default Groups

Creating Groups

Creating Groups

Using GroupsUsing Groups

Course summaryManaging Groups

For more

CoursesPublications

Web sites

www.microsoft.com

70-646 : Windows Server Administration

Conferences / Labs

If you want to go into these subjects more deeply, …

www.laboratoire-microsoft.org

http://www.microsoft.com/mspress

Managing Groups

technet.microsoft.com

Microsoft TechDays

Congratulations

You have successfully completed the SUPINFO course module

Managing Groups

On the road againManaging Groups