Network Administration: Windows User Group Scope
As a network administrator who manages Windows user accounts, you will need to know how to create groups of Windows users. Here’s how to create a group:
Log on as an administrator.
You must have administrator privileges to perform this procedure.
From Server Manager, choose Tools→Active Directory Users and Computers.
The Active Directory Users and Computers management console appears.
Right-click the domain to which you want to add the group and then choose New→Group from the contextual menu.
In the New Object – Group dialog box that appears, enter the name for the new group.
Enter the name in both text boxes.
Choose the group scope.
Domain Local: For groups that will be granted access rights to network resources
Global: For groups to which you’ll add users and Domain Local groups
Universal: If you have a large network with multiple domains
Choose the group type.
The choices are Security and Distribution. In most cases, choose Security.
The group is created. However, at this point, it has no members.