8-1: Best Practices for Creating Group Objects

Solution overview

Type of solution


Features and tools

Group object attributes, protection from deletion, Dsmod, and Dsacls

Solution summary

Configure additional attributes and properties of user objects, and explore scenarios that warrant deviating from conventional group management guidelines.


Increased manageability of groups, reduced risk of group deletion, increased total group membership for users.


Groups are a fundamental object class in any Active Directory enterprise. Whether you use groups as extensively as envisioned by some of the solutions in this resource kit or use them on a more limited basis, it is important that you manage them efficiently and effectively. In ...

Get Windows® Administration Resource Kit: Productivity Solutions for IT Professionals now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.