We’ll consider separately tasks for administering groups in domain and workgroup environments.
Domain local groups, global groups, and universal groups are administered using the Active Directory Users and Computers console. After opening this console, expand the console tree and select the OU in which the group is located or where it will be created. Then proceed with the steps described in the following sections.
Right-click on group → Properties → Members → Add → select domain → select members → Add
When adding members, you can select multiple user accounts by the usual methods (e.g., Shift-click or Ctrl-click). You can also drag and drop.
Right-click on OU → New → Group → specify group name → specify type and scope
Group names must be unique within the domain in which the group resides. By default, when you specify the group name, this also becomes the Pre-Windows 2000 or downlevel group name as well, though these can be different if you desire. Downlevel group names are used in a mixed-mode environment to provide compatibility with NT and earlier computers.
To create groups in a given domain, you must be a member of either the Administrators or the Account Operators built-in groups for that domain. When creating a group, any of the two group types may be combined with any of the three group scopes to give a total of six possible kinds of groups you can create. Note, however, that you can’t create universal ...