Windows Server Note (vi): Active directory Domain Services: groups

Group role: simplifies administration by assigning permissions to shared resources to groups rather than to individual users.

Range of groups:

Local domain groups: Members can come from various domains, but the use of resources can only be the domain;

Global groups: Members can only come from the domain, but can use the resources of each domain;

Universal groups: Members can come from each domain, or they can use the resources of each domain;

(Note: Universal group membership is included in the global catalog, so when the universal group member changes things, it will cause the entire global catalog server replication mechanism, generate a lot of traffic, it is recommended to use cautiously; we can make infrequently-changed objects as universal group members (such as global groups), Then add the user account to the global group, so there is no change, we will not directly change the universal group members.

Type of group:

Security group: Assigning Permissions to shared resources

Distribution groups: E-mail Applications (Exchange) Send e-mail messages to users (mailbox groups)

New group:

1. Open Active directory Users and Computers, right-click the OU where you want to place the group, select New-Group (or right-click the blank address on the right, select New-Group)

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/42/7B/wKiom1PYJKrTjB38AAEDpYsED8c575.png "title=" 01.PNG "alt=" Wkiom1pyjkrtjb38aaedpysed8c575.png "/>

2. Enter the name of the group and select the appropriate scope and group type according to the requirements;

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/42/7B/wKiom1PYJRfAeMzAAAA_jFLdKNE778.png "title=" 02.PNG "alt=" Wkiom1pyjrfaemzaaaa_jfldkne778.png "/>

To add a user to a group:

1. Open Active directory Users and Computers, right-click to add to the group, select Properties;

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/42/7C/wKioL1PYLCKALWQFAACBLWZU2EA502.png "title=" 03.PNG "alt=" Wkiol1pylckalwqfaacblwzu2ea502.png "/>

2, select "Add"; (You can add a user or a group here)

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/42/7C/wKioL1PYLGijU-6CAAAveEZCJFc438.png "title=" 04.PNG "alt=" Wkiol1pylgiju-6caaaveezcjfc438.png "/>

3, enter the name of the group, right-click "Check Name", if the group name is correct, the user name will be more than one underline, select "OK" (if you do not know the group name, you can choose advanced, by searching);

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/42/7C/wKiom1PYK2ThuaMbAABKSZlbzIU878.png "title=" 05.PNG "alt=" Wkiom1pyk2thuambaabkszlbziu878.png "/>

4, select "OK", (if you want to add multiple accounts to this group, as long as you continue to select Add, repeat the above steps, and finally select OK)

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/42/7C/wKiom1PYK8viLMl1AAA4jVXkb80736.png "title=" 06.PNG "alt=" Wkiom1pyk8vilml1aaa4jvxkb80736.png "/>

There are many ways to add users to a group, you can also right-click to add to the group (but this is not easy for multiple accounts to add to a group), I do not show this side;

Delete Group members:

1. Open "Active Directory Users and Computers", right-click the appropriate group, select "Properties"-"Members", select "Delete" and "OK";

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/43/32/wKioL1PZdhCzNqmyAAA1qORY_DU449.png "title=" 12.PNG "alt=" Wkiol1pzdhcznqmyaaa1qory_du449.png "/>

To delete a group:

1. Open Active directory Users and Computers, locate the group you want to delete, right-click, select Delete

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M00/43/2D/wKiom1PZbmrRMDc7AAFzDb1rfM4347.png "title=" 07.PNG "alt=" Wkiom1pzbmrrmdc7aafzdb1rfm4347.png "/>

To rename a group:

1. Open "Active Directory Users and Computers", locate the group you want to delete, right-click, select "Rename", enter a new name, and directly confirm (enter);

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M01/43/2D/wKiom1PZb1TgpjznAAF3xyaCZ30307.png "title=" 08.PNG "alt=" Wkiom1pzb1tgpjznaaf3xyacz30307.png "/>

Move Group:

1. Right click on the group you want to move, right click to select "Move";

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/43/2E/wKiom1PZcG7CxYYXAAF3d0u1_FQ526.png "title=" 09.PNG "alt=" Wkiom1pzcg7cxyyxaaf3d0u1_fq526.png "/>

2. Select the OU you want to move to, select OK;

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/43/2F/wKioL1PZcbiy0CkOAAAv_GfRFzo957.png "title=" 10.PNG "alt=" Wkiol1pzcbiy0ckoaaav_gfrfzo957.png "/>

Or you can use the drag-and-drop method directly: Left click (Press and hold) to move to the OU, in the popup dialog box select "Yes";

650) this.width=650; "src=" Http://s3.51cto.com/wyfs02/M02/43/30/wKioL1PZcniy5hoZAABP0B1Eh38550.png "title=" 11.PNG "alt=" Wkiol1pzcniy5hozaabp0b1eh38550.png "/>

This article is from the "Snow Orchid" blog, please be sure to keep this source http://yupeizhi.blog.51cto.com/3157367/1551392

Windows Server Note (vi): Active directory Domain Services: groups