Network Administration: Windows User Group Scope - dummies

Network Administration: Windows User Group Scope

By Doug Lowe

As a network administrator who manages Windows user accounts, you will need to know how to create groups of Windows users. Here’s how to create a group:

  1. Log on as an administrator.

    You must have administrator privileges to perform this procedure.

  2. From Server Manager, choose Tools→Active Directory Users and Computers.

    The Active Directory Users and Computers management console appears.

  3. Right-click the domain to which you want to add the group and then choose New→Group from the contextual menu.

  4. In the New Object – Group dialog box that appears, enter the name for the new group.

    Enter the name in both text boxes.


  5. Choose the group scope.

    • Domain Local: For groups that will be granted access rights to network resources

    • Global: For groups to which you’ll add users and Domain Local groups

    • Universal: If you have a large network with multiple domains

  6. Choose the group type.

    The choices are Security and Distribution. In most cases, choose Security.

  7. Click OK.

    The group is created. However, at this point, it has no members.