WEEK 5 - Group Accounts Users - WEEK 5 GROUP ACCOUNTS USERS...

Info iconThis preview shows pages 1–3. Sign up to view the full content.

View Full Document Right Arrow Icon
WEEK 5 – GROUP – ACCOUNTS – USERS IMPLEMENTING + MANAGING GROUPS + COMPUTER ACCOUNTS OBJECTIVES - Understand the purpose of using group accounts to simplify administration. - Create group objects using both graphical and command-line tools. - Manage security groups and distribution groups. - Explain the purpose of the built-in groups created when Active Directory is installed. - Create and manage computer accounts INTRODUCTION TO GROUP ACCOUNTS - A GROUP is a container object: o Used to organise collections of users, computers, contacts, and other groups. o Used to simplify administration. - Similar to ORGANISATIONAL UNITS (OU) except: o OU’s are not security principals; groups are security principals. o OU’s can only contain objects from their parent domain; groups can contain objects from within forest. GROUP TYPES - Security Groups o Defined by Security Identifier (SID) , o Can be assigned permissions for resources, In discretionary access control lists (DACL’s) , o Can be assigned rights to perform different tasks, o Can also be used as email entities, - Distribution Groups o Primarily used as email entities, o Do not have associated SID (Security Identifier), GROUP SCOPE
Background image of page 1

Info iconThis preview has intentionally blurred sections. Sign up to view the full version.

View Full DocumentRight Arrow Icon
- Scope refers to logical boundary of permissions to specific resources, - Both ‘Security and Distribution Groups’ have scopes, - Three Scope Types: o Objects possible within each scope dependant on configured functional level of a domain, o Scope types are global, domain local, and universal, - Three domain functional levels: o Windows 2000 mixed: default configurations supports a combination of Windows NT Server 4.0, Windows 2000 Server, and Windows 2003 Server domain controllers, o Windows 2000 native: supports a combination of Windows 2000 Server and Windows 2003 Server domain controllers, o Windows 2003 Server: supports Windows 2003 Server domain controllers only. GLOBAL GROUPS - Organise groups of users, computers, and groups within the same domain, - Usually represents a geographic location or job function group, - Types of objects in group related to configured functional level of the domain, o Depends on the types of domain controllers in the environment. DOMAIN LOCAL GROUPS
Background image of page 2
Image of page 3
This is the end of the preview. Sign up to access the rest of the document.

Page1 / 15

WEEK 5 - Group Accounts Users - WEEK 5 GROUP ACCOUNTS USERS...

This preview shows document pages 1 - 3. Sign up to view the full document.

View Full Document Right Arrow Icon
Ask a homework question - tutors are online