Windows Server 2003 Environment Chapter 04

Windows Server 2003 - 70-290 MCSE Guide to Managing a Microsoft Windows Server 2003 EnvironmentChapter 4:Implementing and Managing Group and

Info iconThis preview shows pages 1–11. Sign up to view the full content.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 EnvironmentChapter 4:Implementing and Managing Group and Computer Accounts70-290: MCSE Guide to Managing a Microsoft Wi2Objectives•Understand the purpose of using group accounts to simplify administration•Create group objects using both graphical and command-line tools•Manage security groups and distribution groups•Explain the purpose of the built-in groups created when Active Directory is installed•Create and manage computer accounts70-290: MCSE Guide to Managing a Microsoft Wi3Introduction to Group Accounts•A groupis a container object•Used to organize collections of users, computers, contacts, other groups•Used to simplify administration•Similar to Organizational Units except•OUs are not security principals, groups are•OUs can only contain objects from their parent domain, groups can contain objects from within forest70-290: MCSE Guide to Managing a Microsoft Wi4Group Types•Security groups•Defined by Security Identifier (SID)•Can be assigned permissions for resources•In discretionary access control lists (DACLs)•Can be assigned rights to perform different tasks•Can also be used as e-mail entities•Distribution groups•Primarily used as e-mail entities•Do not have associated SID70-290: MCSE Guide to Managing a Microsoft Wi5Group Scopes•Scope refers to logical boundary of permissions to specific resources•Both Security and Distribution Groups have scopes•Three scopes •Objects possible within each scope dependent on configured functional level of a domain•Scope types are global, domain local, and universal 70-290: MCSE Guide to Managing a Microsoft Wi6Group Scopes (continued)•Three domain functional levels:•Windows 2000 mixed: default configuration, supports a combination of Windows NT Server 4.0, 2000 Server, and Server 2003 domain controllers•Windows 2000 native: supports a combination of Windows 2000 Server and Server 2003 domain controllers•Windows Server 2003: supports Windows Server 2003 domain controllers only70-290: MCSE Guide to Managing a Microsoft Wi7Global Groups•Organize groups of users, computers, groups within the same domain•Usually represents a geographic location or job function group•Types of objects in group related to configured functional level of the domain •Depends on the types of domain controllers in environment70-290: MCSE Guide to Managing a Microsoft Wi8Domain Local Groups•Created on domain controllers•Can be assigned rights and permissions to any resource within the same domain•Can contain groups from other domains•Specific objects allowed in group related to configured functional level of the domain70-290: MCSE Guide to Managing a Microsoft Wi9Universal Groups•Typically created to aggregate users or groups in different domains•Stored on domain controllers configured as global catalog servers•Can be assigned rights and permissions for any resource within a forest•Can only be created at the Windows 2000 native or Windows Server 2003 domain functional level70-290: MCSE Guide to Managing a Microsoft Wi10Universal Groups (continued)70-290: MCSE Guide to Managing a Microsoft Wi...
View Full Document

This note was uploaded on 01/18/2010 for the course CET 2722 taught by Professor Richarda.matias during the Spring '08 term at Valencia.

Page1 / 50

Windows Server 2003 - 70-290 MCSE Guide to Managing a Microsoft Windows Server 2003 EnvironmentChapter 4:Implementing and Managing Group and

This preview shows document pages 1 - 11. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online