Automating Active Directory® Administration with Windows PowerShell® 2.0

Manage Groups

To ease the administrative burden of assigning permissions to resources on a network, an administrator can create group objects that contain one or more AD security principals: users, computers, MSAs, and group objects nested within other groups. In this way, an administrator can assign resource permissions to a group object, and those permissions will be assigned to each security principal in that group, rather than the administrator having to assign permissions to individual security principals one at a time. To provide flexibility across different environments, AD includes a number of different configuration options for group objects, including the type of group (distribution or security) as well as the scope of the group (domain ...