Setting Up Group Accounts

1
Setting Up Group Accounts
2
Overview

• Introduction to Groups
• Planning a Group Strategy
• Creating Local and Global Groups
• Implementing Built-in Groups
• Best Practices

3
Introduction to Groups

• Groups Are Collections of User Accounts
• Group Members Get All Group Permissions and
  Rights
• Local Groups Provide Access to Resources and
  Rights to Perform System Tasks
• Global Groups Organize Users

4
Local and Global Groups Summary
5
Planning a Group Strategy

• Logically Organize Users Based on Common Needs
• Create Global Groups, and then Add User Accounts
• Create Local Groups Based on Resource Access
  Needs
• Assign Permissions to Local Groups
• Add Global Groups to Local Groups

6
Creating Local and Global Groups

• You Must Be a Member of the Administrators or
  Account Operators Group
• You Can Create Local Groups on Any Computer
  Running Windows NT
• You Create Global Groups on a PDC from Any
  Computer Running User Manager for Domains
• Group Names Must Be Unique to the Domain

7
Creating Global Groups
8
Creating Local Groups
9
Deleting Groups

• Deleting a Group
• Permanently removes permissions and rights
  associated with it
• Does not delete the member user accounts

10
Implementing Built-in Groups

• Built-in Local Groups
• Give users rights to perform system tasks
• Built-in Global Groups
• Give administrators a way of controlling domain
  resources
• System Groups
• Organize users for system use
• Membership is automatic and cannot be modified

11
Built-in Groups on All Windows NTBased Computers
12
Built-in Groups on Domain Controllers Only
13
Built-in System Groups

• Reside on All Computers
• Membership Cannot Be Modified
• Users Become Members Automatically During Network
  Activity
• Two Key System Groups
• Everyone
• Creator Owner

14
Best Practices