Free Trial

Safari Books Online is a digital library providing on-demand subscription access to thousands of learning resources.

  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint

Managing Groups

One of the primary functions of a directory service like Active Directory is to provide authorization for access to network resources. Ultimately, all access to network resources is based on the individual user accounts. However, in most cases, you do not want to administer access to resources by using individual user accounts. In a large company, this would result in a great deal of administrative effort. Also, the access control lists (ACLs) on network resources would soon be unmanageable if you assigned permissions using individual user accounts. Because managing access to network resources using individual user accounts is unmanageable, you create group objects to manage large collections of users at one time.

Group Types

Windows Server 2008 provides four different types of groups. Distribution groups and security groups are the group types typically used by administrators. Application basic groups and LDAP query groups are used by Authorization Manager applications. When you create a new group object by using Active Directory Users And Computers, you are given the choice of creating a distribution group or a security group. Figure 10-5 shows the interface.


  

You are currently reading a PREVIEW of this book.

                                                                                                                    

Get instant access to over $1 million worth of books and videos.

  

Start a Free Trial


  
  • Safari Books Online
  • Create BookmarkCreate Bookmark
  • Create Note or TagCreate Note or Tag
  • PrintPrint