Practice: Creating and Administering Groups
In this practice, you create and administer a global security group.
To complete this practice, you must have successfully completed the practices in Chapter 6, “Implementing an OU Structure,” and Chapter 7, “Administering User Accounts.”
To start an instance of the Windows Server 2003 command prompt as an administrator on the local computer, type:runas /user:localmachinenanie\administrator cnid When prompted, type the administrator password.
To start an instance of the Computer Management snap-in using a domain administrator account called companydomain\domainadmin, type:runas /user:cotnpanydomain\domainadniin “mmc %wmdir%\system32\compmgmt.msc”
When prompted, type the account password.
To start an instance of Microsoft Notepad using a domain administrator account called user in a domain called
practical application When prompted, type the account password.
To start an instance of a command prompt window, saved MMC console, Control Panel item, or program that administers a server in another forest, type:
runas /netonly /user:domain\username “command”
where domain\username must be a user with sufficient permissions to administer the server. When prompted, type the account password.
What is the purpose of using groups?
Use groups to simplify administration by granting rights and assigning permissions once to the group rather than multiple times to each individual member.
2.When should you use security groups rather than distribution groups?
Use security groups to assign permissions. Use distribution groups when the only function of the group is not security related, such as an e-mail distribution list. You cannot use distribution groups to assign permissions.
3.What strategy should you apply when you use domain and local groups?
Place user accounts into global groups, place global groups into domain local groups, and then assign permissions to the domain local group.
4.Why is replication an issue with universal groups?
Universal groups and their members are listed in the global catalog. Therefore, when membership of any universal group changes, the changes must be replicated MCSE exams to every global catalog in the forest, unless the forest functional level is set to Windows Server 2003.
Processing your request, Please wait....
