Windows Administration Resource Kit: Productivity Solutions for IT Professionals

8-1: Best Practices for Creating Group Objects

Solution overview

Type of solution	Guidance
Features and tools	Group object attributes, protection from deletion, Dsmod, and Dsacls
Solution summary	Configure additional attributes and properties of user objects, and explore scenarios that warrant deviating from conventional group management guidelines.
Benefits	Increased manageability of groups, reduced risk of group deletion, increased total group membership for users.

Introduction

Groups are a fundamental object class in any Active Directory enterprise. Whether you use groups as extensively as envisioned by some of the solutions in this resource kit or use them on a more limited basis, it is important that you manage them efficiently and effectively. In ...