Chp04 - Implementing and Managing Group and Computer Accounts

Chp04 - Implementing and Managing Group and Computer Accounts

Info iconThis preview shows pages 1–11. Sign up to view the full content.

View Full Document Right Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
This is the end of the preview. Sign up to access the rest of the document.

Unformatted text preview: 70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 EnvironmentChapter 4:Implementing and Managing Group and Computer AccountsGuide to MCSE 70-290, Enhanced2ObjectivesUnderstand the purpose of using group accounts to simplify administrationCreate group objects using both graphical and command-line toolsManage security groups and distribution groupsExplain the purpose of the built-in groups created when Active Directory is installedCreate and manage computer accountsGuide to MCSE 70-290, Enhanced3Introduction to Group AccountsA groupis a container objectUsed to organize collections of users, computers, contacts, other groupsUsed to simplify administrationSimilar to Organizational Units exceptOUs are not security principals, groups areOUs can only contain objects from their parent domain, groups can contain objects from within forestGuide to MCSE 70-290, Enhanced4Group TypesSecurity groupsDefined by Security Identifier (SID)Can be assigned permissions for resourcesIn discretionary access control lists (DACLs)Can be assigned rights to perform different tasksCan also be used as e-mail entitiesDistribution groupsPrimarily used as e-mail entitiesDo not have associated SIDGuide to MCSE 70-290, Enhanced5Group ScopesScope refers to logical boundary of permissions to specific resourcesBoth Security and Distribution Groups have scopesThree scopes Objects possible within each scope dependent on configured functional level of a domainScope types are global, domain local, and universal Guide to MCSE 70-290, Enhanced6Group Scopes (continued)Three domain functional levels:Windows 2000 mixed: default configuration, supports a combination of Windows NT Server 4.0, 2000 Server, and Server 2003 domain controllersWindows 2000 native: supports a combination of Windows 2000 Server and Server 2003 domain controllersWindows Server 2003: supports Windows Server 2003 domain controllers onlyGuide to MCSE 70-290, Enhanced7Global GroupsOrganize groups of users, computers, groups within the same domainUsually represents a geographic location or job function groupTypes of objects in group related to configured functional level of the domain Depends on the types of domain controllers in environmentGuide to MCSE 70-290, Enhanced8Domain Local GroupsCreated on domain controllersCan be assigned rights and permissions to any resource within the same domainCan contain groups from other domainsSpecific objects allowed in group related to configured functional level of the domainGuide to MCSE 70-290, Enhanced9Universal GroupsTypically created to aggregate users or groups in different domainsStored on domain controllers configured as global catalog serversCan be assigned rights and permissions for any resource within a forestCan only be created at the Windows 2000 native or Windows Server 2003 domain functional levelGuide to MCSE 70-290, Enhanced10Universal Groups (continued)Guide to MCSE 70-290, Enhanced...
View Full Document

Page1 / 50

Chp04 - Implementing and Managing Group and Computer Accounts

This preview shows document pages 1 - 11. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online