Professional Documents
Culture Documents
Creating An Organizational Unit: User Groups and Organizational Units Are Two Great Ways of Keeping Your Active
Creating An Organizational Unit: User Groups and Organizational Units Are Two Great Ways of Keeping Your Active
Why would we want to do that? Well, let's say for example that we have this one shared
folder on our network that we want only our Sales Department to have access to.
Without groups in your Active Directory, you would have to go to each individual Sales
Department user account and give that account access to that shared folder. That can
take quite some time if you have, let's say ... 200 users in your Sales Department.
Instead, what we are going to do is, take all the Sales Department user accounts and
put them in a Sales User Group. Now when I want to give access to all of my Sales
Users to that shared folder, I just give the entire Sales Group access to it and voila! All
Sales Users now have access to our shared folder!
That's just so much easier, isn't it? You can then take the Sales User Group and put it in
a Sales Organizational Unit. An Organizational Unit is really just a folder for
organizational purpose, to keep your Active Directory nice and clean. You can add
different groups, computers and other resources to an Organizational Unit.
Enough talk, let me show you how you can accomplish all of this in your Windows
Server 2008 Active Directory.
In this example we are going to name our group OpsUSers. We are also going to leave
the default selections for group scope, which is Global, and group type, which is
Security. When you are ready, click OK.
4. Our new group has been created!
Moving Accounts Into a Group
1. In order to move pre-existing accounts into a group, you need to hold down the
Control key and click on all the User or Computer accounts that you want to move into
that group.
2. Then you need to right-click on any one of those accounts and select Add to a
group.
3. Next, you need to type in the group name and let the machine find it.
Note: Another way of accomplishing this would be to click on an account, hold it, then
drag and drop it into a particular group. Depending on how much you like to use your
mouse and how much time you have this may or may not be your preferred way of
accomplishing this task.
Ready to test your skills in Active Directory? See how they stack up with this
assessment from Smarterer. Start this Active Directory test now.