1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy...

15
Module 4 Setting Up Group Accounts

Transcript of 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy...

Page 1: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

1

Module 4

Setting Up Group Accounts

Page 2: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

2

Overview

Introduction to Groups

Planning a Group Strategy

Creating Local and Global Groups

Implementing Built-in Groups

Best Practices

Page 3: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

3

Introduction to Groups

Groups Are Collections of User Accounts

Group Members Get All Group Permissions and Rights

Local Groups Provide Access to Resources and Rights to Perform System Tasks

Global Groups Organize Users

ResourcesResources Global Group“Sales”

Global Group“Sales”

PermissionsPermissionsPermissionsPermissions

Local Group“Resources”Local Group“Resources”

Page 4: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

4

Local and Global Groups Summary

Local GroupsLocal GroupsLocal GroupsLocal Groups

Provide users with permissions or rightsProvide users with permissions or rights

Can include (from any domain): User accounts Global groups

Can include (from any domain): User accounts Global groups

Cannot include other local groupsCannot include other local groups

Are assigned permissions and rights in the local domainAre assigned permissions and rights in the local domain

On Windows NT Workstation or member server, can only be assigned to local resources

On Windows NT Workstation or member server, can only be assigned to local resources

On a PDC, can be assigned resourceson any domain controller in the domain

On a PDC, can be assigned resourceson any domain controller in the domain

Organize domain users Organize domain users

Global GroupsGlobal GroupsGlobal GroupsGlobal Groups

Can only include user accounts in the domain where it residesCan only include user accounts in the domain where it resides

Cannot contain local or global groupsCannot contain local or global groups

Are added to a local group to give its members rightsAre added to a local group to give its members rights

Are not assigned to local resourcesAre not assigned to local resources

Must be created on a PDC in the domain where the accounts resideMust be created on a PDC in the domain where the accounts reside

Page 5: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

5

Planning a Group Strategy

Logically Organize Users Based on Common Needs Create Global Groups and Add User Accounts Create Local Groups Based on Resource Access Needs Assign Permissions to Local Groups Add Global Groups to Local Groups

Page 6: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

6

Creating Local and Global Groups

You Must Be a Member of Administrators or Account Operators Group

You Can Create Local Groups on Any Windows NT Computer

You Create Global Groups on a PDC from Any Computer Running User Manager for Domains

Group Names Must Be Unique to the Domain

User Manager - DOMAIN1

User View Policies Options HelpUser

New User...

New Global Group...

New Local Group...

Copy... F8Delete DelRename...Properties... EnterSelect Users...

Select Domain

Exit

New Global Group...

Page 7: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

7

Creating Global Groups

New Global Group

QuebecGroup Name:

Description: Quebec domain users

OK

Cancel

HelpMembers:

Eric Blondel Eric

< - Add

Remove - >

Not Members:

Account adminstra AcctmanLinda Kobora LindaSandy Alto SandyRyan Calafato RyanKathryn Yusi KathrynSusan Stevenson SusanRick Wallace RickAdministrator

Account adminstraAcctman

Page 8: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

8

Creating Local GroupsNew Local Group

SalesGroup Name:

Description:

Show Full Names

Add...

Remove

Members:

StefanH

OK

Cancel

Help

Sales Personnel Add Users and Groups

Names:List Names From:

Administrators Members can fully administer the computAccount Operators Members can administer domain user an

CancelOK Help

Backup Operators Members can bypass file security to bacDomain Admins Designated administrators for the domainDomain Guests All domains guests

Everyone All UsersGuests Users granted guest access to the comp

Type of Access:

CLASSROOM\Domain Users

Show UsersAddAdd Members...Members... Search...

Add Names:

CLASSROOM*

Read

Domain Users All domains users

DomainsDomainsDomainsDomains

Page 9: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

9

Deleting Groups

New User...

New Global Group...

New Local Group...

Copy... F8Delete DelRename...Properties... EnterSelect Users...

Select Domain

Exit

Delete Del

User Manager - DOMAIN_A

User View Policies Options HelpUser

Deleting a Group:

Permanently removes permissions and rights associated with it

Does not delete the member user accounts

Page 10: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

10

Implementing Built-in Groups

Built-in Local Groups

Give users rights to perform system tasks

Built-in Global Groups

Give administrators a way of controlling domain resources

System Groups

Organize users for system use

Membership is automatic and cannot be modified

User Rights Policy

Show Advanced User Rights

Computer: User-1

Cancel

OK

Help

Add...

Remove

Grant to:

EveryonePower Users

Administrators

Right: Access this computer from network

Page 11: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

11

Built-in Groups on All Windows NT Computers

UsersUsersUsersUsers

Ordinary usersOrdinary users

AdministratorsAdministratorsAdministratorsAdministrators

AdministratorAdministrator

GuestsGuestsGuestsGuests

GuestGuest

Backup Backup OperatorsOperatorsBackup Backup

OperatorsOperators

No membersNo members

Power UsersPower UsersPower UsersPower Users

No membersNo members

Windows NT ServerDomain Controller

Windows NT ServerDomain Controller

Windows NT ServerMember Server

Windows NT ServerMember Server

Windows NT WorkstationWindows NT Workstation

Page 12: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

12

Built-in Groups on Domain Controllers Only

Domain ControllerDomain Controller

Local GroupsLocal Groups

Account OperatorsAccount

Operators

PrinterOperators

PrinterOperators

ServerOperators

ServerOperators

Global GroupsGlobal Groups

UsersUsersUsersUsers

DomainUsers

AdministratorsAdministratorsAdministratorsAdministrators

DomainAdmins

GuestsGuestsGuestsGuests

DomainGuests

DomainUsers

DomainUsers

DomainGuests

DomainGuests

DomainAdminsDomainAdmins

Page 13: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

13

Built-in System Groups

Reside on All Computers

Membership Cannot Be Modified

Users Become Members Automatically During Network Activity

Two Key System Groups

Everyone

Creator Owner

Page 14: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

14

Best Practices

Add Users to Built-in Groups that Are Most RestrictiveAdd Users to Built-in Groups that Are Most Restrictive

Add Domain Admins from Other Domains to Local Administrators Add Domain Admins from Other Domains to Local Administrators

Assign Rights to Users Only If Built-in Groups Don’t Meet Your NeedsAssign Rights to Users Only If Built-in Groups Don’t Meet Your Needs

Use Domain Users Instead of Everyone (Medium and High Security)Use Domain Users Instead of Everyone (Medium and High Security)

Page 15: 1 Module 4 Setting Up Group Accounts. 2 Overview Introduction to Groups Planning a Group Strategy Creating Local and Global Groups Implementing Built-in.

15

Review

Introduction to Groups

Planning a Group Strategy

Creating Local and Global Groups

Implementing Built-in Groups

Best Practices


Implementing Community Stroke Outreach Using …my.americanheart.org/idc/groups/ahamah-public/@wcm/@sop/@scon/...Implementing Community Stroke Outreach Using ... • Peer-educators

Implementing Community Stroke Outreach Using …my.americanheart.org/idc/groups/ahamah-public/@wcm/@sop/@scon/...Implementing Community Stroke Outreach Using ... • Peer-educators

IMPLEMENTING COLLOCATION GROUPS #1tsm-symposium.oucs.ox.ac.uk/2005/papers/Implementing...IMPLEMENTING COLLOCATION GROUPS #2 About Draper Lab • An independent, not-for-profit corporation

IMPLEMENTING COLLOCATION GROUPS #1tsm-symposium.oucs.ox.ac.uk/2005/papers/Implementing...IMPLEMENTING COLLOCATION GROUPS #2 About Draper Lab • An independent, not-for-profit corporation

Module 7: Implementing Security Using Group Policy.

Module 7: Implementing Security Using Group Policy.

Module 7: Implementing Security Using Group Policies.

Module 7: Implementing Security Using Group Policies.

Symmetry and Groups - DePaul University · Steinberg Groups Suzuki Groups Ree Groups and Tits Group Sporadic Groups Cyclic Groups Symbol Order Alternates The Tits group 2F 4(2)0is

Symmetry and Groups - DePaul University · Steinberg Groups Suzuki Groups Ree Groups and Tits Group Sporadic Groups Cyclic Groups Symbol Order Alternates The Tits group 2F 4(2)0is

Module 3: Managing Groups. Overview Creating Groups Managing Group Membership Strategies for Using Groups Using Default Groups.

Module 3: Managing Groups. Overview Creating Groups Managing Group Membership Strategies for Using Groups Using Default Groups.

Group Processes Lecture 11. Group Processes Groups Destructive Groups (“cults”) Deindividuation Social Facilitation and Social Loafing Group Decision.

Group Processes Lecture 11. Group Processes Groups Destructive Groups (“cults”) Deindividuation Social Facilitation and Social Loafing Group Decision.

Implementing Literacy Groups in the 1st Grade Literacy Groups in the 1st Grade 2/7/06 Kristi McCullough, Western Wayne Elementary School Implementing Literacy ... necessity …

Implementing Literacy Groups in the 1st Grade Literacy Groups in the 1st Grade 2/7/06 Kristi McCullough, Western Wayne Elementary School Implementing Literacy ... necessity …

Implementing Security Compliance using Polocy Groups · 2009. 11. 4. · Policy Groups • Policy Groups • Compliance • Logical Group of Policies •10.2.0.4 –3 Out of Box Groups

Implementing Security Compliance using Polocy Groups · 2009. 11. 4. · Policy Groups • Policy Groups • Compliance • Logical Group of Policies •10.2.0.4 –3 Out of Box Groups

Periodic Table Groups 1. Color-code the following groups on your periodic table: -alkali group -alkaline group - transitional group -halogen group -noble.

Periodic Table Groups 1. Color-code the following groups on your periodic table: -alkali group -alkaline group - transitional group -halogen group -noble.

Social Groups & Group Behaviour

Social Groups & Group Behaviour

Social network analysis of stakeholder groups implementing ...

Social network analysis of stakeholder groups implementing ...

Group Theory Permutation Groups - Magma · Group Theory Permutation Groups 20Bxx [1]Edith Adan-Bante and Helena Verrill, Symmetric groups and conjugacy classes, J. Group Theory 11

Group Theory Permutation Groups - Magma · Group Theory Permutation Groups 20Bxx [1]Edith Adan-Bante and Helena Verrill, Symmetric groups and conjugacy classes, J. Group Theory 11

Implementing EMC SRDF/Star Protected Composite Groups on Open Systems

Implementing EMC SRDF/Star Protected Composite Groups on Open Systems

Implementing EMC SRDF/Star Protected Composite Groups on

Implementing EMC SRDF/Star Protected Composite Groups on

Groups: Groups and group structure - Alison Howard

Groups: Groups and group structure - Alison Howard

Group Theory Permutation Groups - Magma

Group Theory Permutation Groups - Magma

Ethnic Groups Religion Ethnic Group Religious Group.

Ethnic Groups Religion Ethnic Group Religious Group.

Chemicals Substitution in Textile Industry: Implementing ... · PDF fileTextile Industry: Implementing Chemical Policies Into the Textile ... used in dyes and auxiliaries. ... groups

Chemicals Substitution in Textile Industry: Implementing ... · PDF fileTextile Industry: Implementing Chemical Policies Into the Textile ... used in dyes and auxiliaries. ... groups

Implementing Curve25519/X25519: A Tutorial on Elliptic Curve ...Implementing Curve25519/X25519: A Tutorial on Elliptic Curve Cryptography 3 2.2 Groups An abelian group is a set E together

Implementing Curve25519/X25519: A Tutorial on Elliptic Curve ...Implementing Curve25519/X25519: A Tutorial on Elliptic Curve Cryptography 3 2.2 Groups An abelian group is a set E together