{[ promptMessage ]}

Bookmark it

{[ promptMessage ]}

Windows Server 2003 Environment Chapter 04

Windows Server 2003 Environment Chapter 04 - 70-290 MCSE...

Info iconThis preview shows pages 1–10. Sign up to view the full content.

View Full Document Right Arrow Icon
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
70-290: MCSE Guide to Managing a Microsoft Wi 2 Objectives Understand the purpose of using group accounts to simplify administration Create group objects using both graphical and command-line tools Manage security groups and distribution groups Explain the purpose of the built-in groups created when Active Directory is installed Create and manage computer accounts
Background image of page 2
70-290: MCSE Guide to Managing a Microsoft Wi 3 Introduction to Group Accounts A group is a container object Used to organize collections of users, computers, contacts, other groups Used to simplify administration Similar to Organizational Units except OUs are not security principals, groups are OUs can only contain objects from their parent domain, groups can contain objects from within forest
Background image of page 3

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
70-290: MCSE Guide to Managing a Microsoft Wi 4 Group Types Security groups Defined by Security Identifier (SID) Can be assigned permissions for resources In discretionary access control lists (DACLs) Can be assigned rights to perform different tasks Can also be used as e-mail entities Distribution groups Primarily used as e-mail entities Do not have associated SID
Background image of page 4
70-290: MCSE Guide to Managing a Microsoft Wi 5 Group Scopes Scope refers to logical boundary of permissions to specific resources Both Security and Distribution Groups have scopes Three scopes Objects possible within each scope dependent on configured functional level of a domain Scope types are global, domain local, and universal
Background image of page 5

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
70-290: MCSE Guide to Managing a Microsoft Wi 6 Group Scopes (continued) Three domain functional levels: Windows 2000 mixed: default configuration, supports a combination of Windows NT Server 4.0, 2000 Server, and Server 2003 domain controllers Windows 2000 native: supports a combination of Windows 2000 Server and Server 2003 domain controllers Windows Server 2003: supports Windows Server 2003 domain controllers only
Background image of page 6
70-290: MCSE Guide to Managing a Microsoft Wi 7 Global Groups Organize groups of users, computers, groups within the same domain Usually represents a geographic location or job function group Types of objects in group related to configured functional level of the domain Depends on the types of domain controllers in environment
Background image of page 7

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
70-290: MCSE Guide to Managing a Microsoft Wi 8 Domain Local Groups Created on domain controllers Can be assigned rights and permissions to any resource within the same domain Can contain groups from other domains Specific objects allowed in group related to configured functional level of the domain
Background image of page 8
70-290: MCSE Guide to Managing a Microsoft Wi 9 Universal Groups Typically created to aggregate users or groups in different domains Stored on domain controllers configured as global catalog servers Can be assigned rights and permissions for any
Background image of page 9

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full Document Right Arrow Icon
Image of page 10
This is the end of the preview. Sign up to access the rest of the document.

{[ snackBarMessage ]}