Mastering Active Directory - Second Edition

Setting up groups

Similar to user accounts, there are several methods we can use to create and manage groups:

• Active Directory Administrative Center (ADAC)
• ADUC MMC
• PowerShell cmdlets

In this section, I am going to use PowerShell cmdlets to set up and manage AD groups.

The New-ADGroup cmdlet can be used to add a new group to an AD environment. We can review the full syntax for the command using this:

Get-Command New-ADGroup -Syntax

As an example, I am going to create a new security group called Sales Team:

New-ADGroup -Name "Sales Team" -GroupCategory Security -GroupScope Global -Path "OU=Users,OU=Europe,DC=rebeladmin,DC=com"

In the preceding command, the following is true:

• -GroupCategory: This defines the type of the group (security or ...