Active Directory Administration Cookbook

Managing Active Directory Groups

In typical Active Directory environments, groups govern access. Groups can be used as distribution lists, and/or in access control lists on file server shares and disks, for delegation in Active Directory itself, and to provide privileged access.

There are several built-in groups, such as the Domain Admins group and the Enterprise Admins group, which are used in many of the recipes throughout this book.

For several recipes in this chapter, multiple ways are shown that produce the same outcome. The Active Directory Users and Computers (dsa.msc) and the Active Directory Administrative Center (dsac.exe) tools provide graphical means to achieve your goals. The Active Directory Administrative Center, however, has ...