Today we will talk a bit about the organizational structure in Windows Server. Specifically, about the Active Directory Groups in the Domain. Previously we saw how to create a user in the domain controller. However, today we will go further and see how to create Groups. This allows you to group several users within a single unit. Consequently, it is easier to manage the permissions and rules assigned. For this reason, today we will see how to create Active Directory Groups in Windows Server 2019/2016.
How to create Active Directory Group in Windows Server 2019
For better administration, Windows Server classifies the groups as follows:
- Distribution groups. Used to create e-mail distribution lists
- Security groups. Implemented to assign permissions to shared resources in the domain
As for the scope of location, Windows Server classifies the groups in:
- Universal: Applies to both local and external connections
- Global: Applies to all computers and servers in the domain
- Domain local: This applies only to the local server with Windows Server 2019
Before starting to create the group it is advisable to create an organizational unit, as I show you here. The first thing you have to do is go to the Server Manager. Then, from the Tools menu please select Active Directory Users and Computer:
![Open Active Directory Users and Computers](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group-1024x786.png)
Then right-click on the organizational unit. Then select New>Group
![Creating a new group within the organizational unit](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group2-1024x786.png)
A wizard will immediately be displayed to assign the group name and manage other aspects. Such as the scope and type of the group.
![Setting the parameters of the new group.](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group3.png)
Finally, you can see the successfully created group:
![](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group4-1024x787.png)
How to add members to a group in Windows Server
There are a couple of methods to add users to a group on Windows Server. The first is through the properties of the group itself. To do this, double-click on the group and then click on the Members tab. Then click on Add.
![](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group5.png)
Then enter the name of the user you want to add to the group. It is also necessary to check the name to verify the existence of the user.
![Checking the user's name](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group6-1.png)
Back to the previous screen you can see that the user has been added successfully. Please press OK to save the changes.
![](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group7.png)
The other way to add a user to a group is through the user’s own properties. With this in mind, double-click on it and then select the Member of tab
![Adding the user to a new group](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group8.png)
Once again, add the name of the group and check to verify its existence:
![Check the name of the group.](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group9.png)
Back to the previous window, you can see the new group added. Please click OK to save the changes.
![](http://1081754738.rsc.cdn77.org/wp-content/uploads/2020/09/group10.png)
Conclusion
At the end of the day we have seen how to create Active Directory Groups in Windows Server 2019/2016. Therefore, user management tasks are greatly facilitated. All right, that’s it for now. Stay tuned for more info on Windows Server. See you later!