UEU-co logo


Previous Page Next Page


Active Directory groups come in two types: security and distribution. Security groups are used to determine the access levels that users (members of the group) have to resources on the network.

Domain group scopes consist of universal, global, and domain local. Universal groups are available only if the domain functional level has been raised to the Windows 2000, Windows Server 2003, or Windows Server 2008 functional level. Groups can be nested within groups. For example, you can nest global and universal groups in domain local groups.

You create groups by using the Active Directory Users and Computer snap-in. You can add users to the group in the Member tab of the group’s Properties dialog box.

Domain functional levels are raised in the Active Directory Domains and Trusts snap-in. By default, the functional level is set to Windows 2000 (when you create the domain). You can raise the level to either Windows Server 2003 or the Windows Server 2008 functional level. After you raise the functional level, however, you cannot reverse the process.

An Organizational Unit (OU) provides a security container that can be used to hold users, groups, computers, and other OUs. OUs can be used to define logical groupings of users or other objects in the Active Directory, specify security settings, and assign policies to the OU.

Active Directory sites define the IP topology of your Windows Server 2008 network. A site can consist of a subnet or subnets. You create sites and associated subnets with the Active Directory Sites and Services snap-in. To link sites, use site links, which determine the replication paths on your network.

Delegation is used to assign an object such as a user or group a certain level of control over an object, such as a Active Directory OU or site. Delegation can be set in the Delegation of Control Wizard.

Previous Page Next Page

Leave a Reply

Time limit is exhausted. Please reload the CAPTCHA.


apply_now Pepperstone Group Limited