Windows 2000 Administration in a Nutshell

Name

group

Synopsis

Add members to, create, delete, find, modify properties, move, rename, or send mail to a group.

Procedures

Domain local groups, global groups, and universal groups are administered using the Active Directory Users and Computers console (see Chapter 5). After opening this console, expand the console tree and select the organization unit (OU) in which the group is located or where it is to be created. Then proceed with the steps described in the following sections.

By default, two different types of built-in groups are created when Windows 2000 Server is installed, and these two types of groups are stored in two locations in Active Directory:

• Built-in domain local groups such as Administrators, Backup Operators, and Users are located in the Builtin OU.

• Built-in global groups such as Domain Admins, Domain Guests, and Domain Users are located in the Users OU.

When you create new groups, you can create them in the Users OU or create your own new OUs to contain these accounts. For example, you could:

• Create a single, new OU called Groups and locate all new groups you create within this OU. This is the simplest solution and is preferred unless there is a compelling reason to locate groups in more than one OU.

• Create one new OU for new domain local groups you create, another for new global groups you create, and one more for new universal groups you create.

For more information see OU in this chapter and in Chapter 4.

Add Members to a Group

Right-click on group → Properties ...