The document discusses how to administer groups in Windows Server 2008, covering topics such as creating different types of groups like global, universal, and domain local groups; managing group membership; using groups through nesting and assigning policies; modifying group scope and type; and utilizing default groups that come preconfigured in Active Directory domains. Upon completing this course, administrators will gain skills in strategic group management to simplify user permissions and access control.

1. Groups Administration
70-646 Windows 2008
Administration
Campus-Booster ID : 88606
www.supinfo.com
Copyright © SUPINFO. All rights reserved

2. Groups Administration
Groups Administration
By completing this course, you will:
 Creating Groups
 Managing Group Membership
 Strategies for Using Groups
 Modifying Groups
 Using Default Groups

3. Groups Administration
Course topics
Course’s plan:
 Group Creation
 Use of groups
 Default Groups Use

4. Groups Administration
Group Creation

5. Group Creation
Preview
 What Are Groups?
 What Are Domain Functional
Levels?
 What Are Global Groups?
 What Are Universal Groups?
 What Are Domain Local Groups?
 What Are Local Groups?
 Naming Guidelines and Groups
location.

6. Group Creation
What Are Groups?
 Groups simplify administration by enabling you to assign
permissions for resources
 Groups are characterized by scope and type:
 The group scope determines whether the group
spans multiple domains or is limited to a single
domain
 The three Domain group scopes are Global, Domain
Local, and Universal

7. Group Creation
What Are Domain Functional Levels?
Windows Windows Windows
2000 Server 2003 Server 2008
Windows 2000,
Windows
Domain Windows Only
Server 2003,
controllers Server 2003, Windows
Windows
Supported Windows Server 2008
Server 2008
server 2008
Global,
Global, Global,
Group scopes Domain
Domain local, Domain local,
supported local,
Universal Universal
universal

8. Group Creation
What Are Domain Local Groups?
Domain local group rules
Users account, Global groups and Universal
Members group from whatever the domain and domain
local group from the same domain
Can be a
Domain local groups in the same domain
member of
Scope Visible only in its own domain
Domain to which the domain local group
Permissions
belongs

9. Group Creation
What Are Global Groups?
Global group rules
Users, groups, and computers from its own
Members domain
Can be a
Domain local groups
member of
Visible in its own domain and all trusted
Scope domains
Permissions All domains in the forest

10. Group Creation
What Are Universal Groups?
What Are Universal Groups?
Users account, Global groups and other
Members Universal group from whatever the domain in the
forest
Users account, Global groups and other
Can be a
Universal group from whatever the domain in the
member of forest
Scope Visible in all domains in a forest
Permissions All domains in a forest

11. Group Creation
What Are Local Groups?
Local group rules
Members Local user accounts from the computer
Can be a
None
member of

12. Group Creation
Where to Create Groups
 You can create groups in the root domain of the
forest, any other domain in the forest, or an
organizational unit
 Choose the domain or organizational unit where you
create a group based on the administration
requirements for the group
 For example:
If your directory has multiple organizational units,
each of which has a different administrator, you
can create global groups in those organizational
units

13. Group Creation
Stop-and-think Part 1
Do you have any questions ?

14. Managing Groups
Using Groups

15. Using Groups
Preview
 What Is Group Nesting ?
 Group Policies.
 What Is Modifying the Scope or Type of
a Group ?
 Why Assign a Manager to a Group ?

16. Using Groups
What Is Group Nesting?
 It means adding a group as a member of another group
Group
Group
Group
Group Group Group
Group
Group
 Nest groups to consolidate group management
 Easier way to maintain objects in the infrastructure
 Different group nesting

17. Using Groups
Group Policies
User Global Universal Domain Local
Accounts Groups Groups Groups
Permissions Local Groups Policies
A G P
A G U DL P
A DL P
A G L P
A G DL P

18. Using Groups
What Is Modifying the Scope or Type of a Group?
 Changing group scope
 Global to universal
 Domain local to universal
 Universal to global
 Universal to domain local
 Changing group type
 Security to distribution
 Distribution to security Range acting

19. Using Groups
Why Assign a Manager to a Group?
 To enable you to:
 Track who is responsible for groups
 Delegate to the manager of the group the authority to
add users to and remove users from the group
 To distribute the administrative responsibility of adding
users to groups to the people who request the group

20. Using Groups
Stop-and-think Part 1
Do you have any questions ?

21. Managing Groups
Using Default Groups

22. Using Default Groups
Preview
 Default Groups on Member Servers
 Default Groups in Active Directory
 System Groups

23. Using Default Groups
Default Groups on Member Servers

24. Using Default Groups
Group by default in Active Directory

25. Using Default Groups
System Groups
 System groups represent different users at different
times
 You can grant user rights and permissions to system
groups, but you cannot modify or view the
memberships
 Group scopes do not apply to system groups
 Users are automatically assigned to system groups
whenever they log on or access a particular resource

26. Using Default Groups
Stop-and-think Part 1
Do you have any questions ?

27. Managing Groups
Course summary
Creating
Creating
Groups
Groups
Using Default
Using Default
Using Groups
Using Groups Groups
Groups

28. Managing Groups
For more
If you want to go into these subjects more deeply, …
Publications Courses
70-646 : Windows Server
Administration
http://www.microsoft.com/mspress
Web sites Conferences / Labs
www.laboratoire-microsoft.org Microsoft TechDays
technet.microsoft.com
www.microsoft.com

29. Congratulations
You have successfully completed
the SUPINFO course module
Managing Groups

30. Managing Groups
On the road again