Windows Server® 2008 Bible

Chapter 23. Managing Users and Groups

IN THIS CHAPTER

• Understanding groups

• Creating user accounts

• Creating groups

• Managing users and groups

If you are passionate about being a network or domain administrator, managing users and groups can give you a lot of satisfaction... it can be a very powerful position in a company. On the other hand, unless you understand the fundamentals, manage the processes sensibly, and learn the tools and resources, the task can become an extremely frustrating responsibility. Our administration mantra is to use your common sense and learn to do it right before you take up the task. This chapter helps you get the best out of the Windows Server 2008 user and group-management philosophy and tools.

User and group management has become a lot more complex in Windows Server 2008. The complexity has a lot to do with the User and Group objects and their support in Active Directory. Combined with the burden of integrating Windows NT 4.0 and earlier networks, the administrative task is not easy.

However, with open interfaces and access to programmatic objects in Active Directory, administrators are developing tools for Active Directory that automate the repetitive stuff and enhance the experience of working with Active Directory (and we touch on that in this chapter). In that the directory is open and supports a widely available API (ADSI) and access protocol (LDAP), you can, for example, extend the User and Group objects to suit your enterprise requirements or custom applications. ...