Group accounts can be used to simplify administration by organizing collections of users, computers, and other groups. There are two main types of groups - security groups, which can be assigned permissions, and distribution groups, which are primarily used for email. Groups can be global, domain local, or universal in scope. Global groups organize objects within a domain, domain local groups can contain objects and be assigned permissions within a domain, and universal groups can aggregate objects across domains. Group and computer accounts can be created and managed through Active Directory Users and Computers or command line utilities, and various built-in groups are automatically created during Active Directory installation.

1. Implementing and Managing Group and Computer Accounts Chapter 4

10. Universal Groups (continued)

13. Active Directory Users and Computers…

14. Activity 4-1 Creating and Adding Members to Global Groups

16. Activity 4-1 (continued)

17. Activity 4-2 Creating and Adding Members to Domain Local Groups

19. Activity 4-3 Changing the Functional Level of a Domain and Creating and Adding Members to Universal Groups

21. Activity 4-3 (continued)

23. Activity 4-3 (continued)

25. Activity 4-4 Converting Group Types

27. Activity 4-4 (continued)

28. Activity 4-4 (continued)

30. Activity 4-5 Converting Group Scopes

34. DSADD (continued)

35. Activity 4-6 Creating Groups Using DSADD

38. DSMOD (continued)

39. Activity 4-7 Modifying Groups Using DSMOD

49. The Builtin Container (continued)

51. The Users Container (continued)

53. Activity 4-8 Creating and Managing Computer Accounts

55. Activity 4-8 (continued)