Windows Server 2019 Administration Fundamentals - Second Edition

Understanding group types

In an AD, a group represents a collection of AD objects. Instead of assigning permissions and rights to each AD object individually, groups are used for a more structured administration. Note that a group is an object too, meaning that it can also be moved to an OU.

Groups (see Figure 5.24) are managed through the Active Directory Users and Computers console. In an AD, there are two types of groups:

• Security groups are explicitly used to assign permissions to shared resources on a network.
• Distribution groups are particularly used to distribute email lists in an organization's network:

Figure 5.24: Group types in ...