Active Directory Administration Cookbook

Using command-line tools

Use the following command to change the scope of a group in Active Directory to Global:

dsmod.exe group "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -scope g

Use the following command to change the scope of a group in Active Directory to Universal:

dsmod.exe group "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -scope u

Use the following command to change the scope of a group in Active Directory to Domain Local:

dsmod.exe group "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -scope l

Use the following command to change the type of group in Active Directory from a distribution group to a security group:

dsmod.exe group "CN=Group,OU=Organizational Unit,DC=lucernpub,DC=com" -secgrp yes

Use the following ...