Setting up group accounts
Download
1 / 14

Setting Up Group Accounts 3 - PowerPoint PPT Presentation


  • 302 Views
  • Updated On :

Setting Up Group Accounts Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in Groups Best Practices Permissions Global Group “Sales” Local Group “Resources” Resources 3 Introduction to Groups

loader
I am the owner, or an agent authorized to act on behalf of the owner, of the copyrighted work described.
capcha
Download Presentation

PowerPoint Slideshow about 'Setting Up Group Accounts 3' - jaden


An Image/Link below is provided (as is) to download presentation

Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author.While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server.


- - - - - - - - - - - - - - - - - - - - - - - - - - E N D - - - - - - - - - - - - - - - - - - - - - - - - - -
Presentation Transcript

Overview l.jpg
Overview

  • Introduction to Groups

  • Planning a Group Strategy

  • Creating Local and Global Groups

  • Implementing Built-in Groups

  • Best Practices


Introduction to groups l.jpg

Permissions

Global Group

“Sales”

Local Group

“Resources”

Resources

3

Introduction to Groups

  • Groups Are Collections of User Accounts

  • Group Members Get All Group Permissions and Rights

  • Local Groups Provide Access to Resources and Rights to Perform System Tasks

  • Global Groups Organize Users


Local and global groups summary l.jpg

Local Groups

Global Groups

Provide users with permissions or rights

Organize domain users

  • Can include (from any domain):

    • User accounts

    • Global groups

Can only include user accounts in the domain where it resides

Cannot include other local groups

Cannot contain local or global groups

Are assigned permissions and rights in the local domain

Are added to a local group to give its members rights

On a computer running Windows NT Workstation or a member server, can only be assigned to local resources

Are not assigned to local resources

On a PDC, can be assigned resourceson any domain controller in the domain

Must be created on a PDC in the domain where the accounts reside

Local and Global Groups Summary


Planning a group strategy l.jpg
Planning a Group Strategy

  • Logically Organize Users Based on Common Needs

  • Create Global Groups, and then Add User Accounts

  • Create Local Groups Based on Resource Access Needs

  • Assign Permissions to Local Groups

  • Add Global Groups to Local Groups


Creating local and global groups l.jpg

User Manager - DOMAIN1

User View Policies Options Help

User

New User...

New Global Group...

New Local Group...

Copy... F8

Delete Del

Rename...

Properties... Enter

Select Users...

Select Domain

Exit

New Global Group...

Creating Local and Global Groups

  • You Must Be a Member of the Administrators or Account Operators Group

  • You Can Create Local Groups on Any Computer Running Windows NT

  • You Create Global Groups on a PDC from Any Computer Running User Manager for Domains

  • Group Names Must Be Unique to the Domain


Creating global groups l.jpg

New Global Group

OK

Quebec

Group Name:

Cancel

Quebec domain users

Description:

Help

Members:

Not Members:

Account adminstra Acctman

Linda Kobora Linda

Sandy Alto Sandy

Ryan Calafato Ryan

Kathryn Yusi Kathryn

Susan Stevenson Susan

Rick Wallace Rick

Administrator

Eric Blondel Eric

Account admin... Acctman

< - Add

Remove - >

3

Creating Global Groups


Creating local groups l.jpg

New Local Group

Sales

OK

Group Name:

Add Users and Groups

Sales Personnel

Description:

Domains

List Names From:

CLASSROOM*

Members:

Names:

StefanH

Account Operators Members can administer domain user an

Administrators Members can fully administer the comput

Backup Operators Members can bypass file security to bac

Domain Admins Designated administrators for the domain

Domain Guests All domains guests

Domain Users All domains users

Everyone All Users

Guests Users granted guest access to the comp

Add

Show Users

Members...

Search...

Add Names:

CLASSROOM\Domain Users

Type of Access:

Read

3

OK

Cancel

Help

Creating Local Groups


Deleting groups l.jpg

User Manager - DOMAIN_A

User View Policies Options Help

User

New User...

New Global Group...

New Local Group...

Copy... F8

Delete Del

Rename...

Properties... Enter

Select Users...

Select Domain

Exit

Delete Del

Deleting Groups

  • Deleting a Group:

    • Permanently removes permissions and rights associated with it

    • Does not delete the member user accounts


Implementing built in groups l.jpg

User Rights Policy

Computer: User-1

OK

Right:

Access this computer from network

Cancel

Help

Grant to:

Everyone

Power Users

Administrators

Add...

Remove

Show Advanced User Rights

Implementing Built-in Groups

  • Built-in Local Groups

    • Give users rights to perform system tasks

  • Built-in Global Groups

    • Give administrators a way of controlling domain resources

  • System Groups

    • Organize users for system use

    • Membership is automatic and cannot be modified


Built in groups on all windows nt based computers l.jpg

Users

Ordinary users

Administrators

Windows NT Server

Domain Controller

Administrator

Guests

Guest

Power Users

Windows NT Server

Member Server

No members

Backup

Operators

No members

3

Windows NT Workstation

Built-in Groups on All Windows NT–Based Computers


Built in groups on domain controllers only l.jpg

Local Groups

Global Groups

Users

Account

Operators

Server

Operators

Domain

Users

Domain

Users

Printer

Operators

Administrators

Domain

Admins

Domain

Admins

Guests

Domain

Guests

Domain

Guests

Domain Controller

Built-in Groups on Domain Controllers Only


Built in system groups l.jpg
Built-in System Groups

  • Reside on All Computers

  • Membership Cannot Be Modified

  • Users Become Members Automatically During Network Activity

  • Two Key System Groups

    • Everyone

    • Creator Owner


Best practices l.jpg

Use Domain Users Instead of Everyone (Medium and High Security)

Add Domain Admins from Other Domains to Local Administrators

Assign Rights to Users Only If Built-in Groups Don’t Meet Your Needs

Add Users to Built-in Groups that Are Most Restrictive

3

Best Practices


ad