Special Edition Using Microsoft Active Directory

Groups

Groups are designed to make life easier for an administrator. Instead of assigning users permissions on a individual basis, you can create groups and add various user accounts as members. When you create groups, you should create them based on the types of tasks their members will perform. In Windows 2000, groups can contain computer objects, user accounts, contacts, and other groups.

In NT 4, the Backup Operators group can back up, restore, and overwrite files for the purpose of backing up and restoring data. The same concept applies when you create groups in Windows 2000.

For example, I have a group of graphic artists who are working on our company Web site. I could create a group called "Web Artists," add each graphic artist's user ...