How To Create A Group In Domain_6

Cloud Help Desk: Delays for ticket imports:

Home
Windows
Active Directory & GPO

How do I create groups in Active Directory to seperate divisions throughout the company? ex. engineering, sales, accounting, production, customer service, Marketing.

This needs to be done on our domain controller which uses Windows Server 2003 R2 SP2

try a lovely microsoft how to:

http://msdn.microsoft.com/en-us/library/aa545347.aspx

Click Start , point to Programs , point to Administrative Tools , and then click Active Directory Users and Computers .
In Active Directory Users and Computers window, expand < domain name >.com
In the console tree, right-click the folder in which you want to add a new group.
Click New , and then click Group .
Type the name of the new group. Use a name that you can easily associate with the role or service for which you are creating.
In the New Object - Group dialog box, do the following:
1. In Group scope , click Global scope .
2. In Group type , click Security .
Click Finish .
Repeat steps 3 through 7 for all remaining groups.

Popular Topics in Active Directory & GPO

The help desk software for IT. Free.

Track users' IT needs, easily, and with only the features you need.

7 Replies

try a lovely microsoft how to:

http://msdn.microsoft.com/en-us/library/aa545347.aspx

Click Start , point to Programs , point to Administrative Tools , and then click Active Directory Users and Computers .
In Active Directory Users and Computers window, expand < domain name >.com
In the console tree, right-click the folder in which you want to add a new group.
Click New , and then click Group .
Type the name of the new group. Use a name that you can easily associate with the role or service for which you are creating.
In the New Object - Group dialog box, do the following:
1. In Group scope , click Global scope .
2. In Group type , click Security .
Click Finish .
Repeat steps 3 through 7 for all remaining groups.

ok but what would i create them as universal local or global?...This is just to seperate divisions in the company so later on i can give each group/division permissions to what they only need

so it would just be global scope and security then?

Matos Tech, LLC is an IT service provider.

If you only have one domain you can use either one of them?

We may want to get more info on Organization Units ( OU ) as well.

and from here can i define permissions of folders on the server?

Absolutely. You can create a folder(s) or file(s) and restrict them to only be viewable, executable, and modifiable by whatever group you determine. You do this under the 'Security' tab in the folders properties.

I should point out that you want to be careful doing this. It is possible to completely lock yourself out of a folder or file.

Three main Group structures in AD

Organization Units ( OU ) = your structured filing cabinet for assigning GPO not necessary based on the layout of your organization and the Main lock and Key to your organizations security.

Security Groups = the lock and Keys to your organisations network shared folders.

Distribution Groups = the bulk email groups in the Global Address Book (Exchange) use this not the Security Group for emails.

This topic has been locked by an administrator and is no longer open for commenting.

To continue this discussion, please ask a new question.