Today we will talk a bit about the organizational structure in Windows Server. Specifically, about the Active Directory Groups in the Domain. Previously we saw how to create a user in the domain controller. However, today we will go further and see how to create Groups. This allows you to group several users within a single unit. Consequently, it is easier to manage the permissions and rules assigned. For this reason, today we will see how to create Active Directory Groups in Windows Server 2019/2016.
How to create Active Directory Group in Windows Server 2019
For better administration, Windows Server classifies the groups as follows:
- Distribution groups. Used to create e-mail distribution lists
- Security groups. Implemented to assign permissions to shared resources in the domain
As for the scope of location, Windows Server classifies the groups in:
- Universal: Applies to both local and external connections
- Global: Applies to all computers and servers in the domain
- Domain local: This applies only to the local server with Windows Server 2019
Before starting to create the group it is advisable to create an organizational unit, as I show you here. The first thing you have to do is go to the Server Manager. Then, from the Tools menu please select Active Directory Users and Computer:
Then right-click on the organizational unit. Then select New>Group
A wizard will immediately be displayed to assign the group name and manage other aspects. Such as the scope and type of the group.
Finally, you can see the successfully created group:
How to add members to a group in Windows Server
There are a couple of methods to add users to a group on Windows Server. The first is through the properties of the group itself. To do this, double-click on the group and then click on the Members tab. Then click on Add.
Then enter the name of the user you want to add to the group. It is also necessary to check the name to verify the existence of the user.
Back to the previous screen you can see that the user has been added successfully. Please press OK to save the changes.
The other way to add a user to a group is through the user’s own properties. With this in mind, double-click on it and then select the Member of tab
Once again, add the name of the group and check to verify its existence:
Back to the previous window, you can see the new group added. Please click OK to save the changes.
At the end of the day we have seen how to create Active Directory Groups in Windows Server 2019/2016. Therefore, user management tasks are greatly facilitated. All right, that’s it for now. Stay tuned for more info on Windows Server. See you later!