Understanding Groups

1
Understanding Groups
2
Understanding Local Groups

• A collection of user accounts on a local computer
• Assign permissions to resources on that computer
• Created in the local security database

3
Preparing to Use Local Groups

• Do not use local groups on computers that belong
  to a domain.
• You can assign permissions to only the resources
  on that computer.
• You cannot create local groups on domain
  controllers.
• A local group contains local user accounts from
  the local computer.
• A local group cannot be a member of any other
  group.

4
Creating Local Groups
5
Deleting Local Groups

• Use the Computer Management snap-in.
• The groups unique identifier will not be reused.
• You can re-create the group, but doing so will
  not restore access.
• Remove any permissions or rights associated with
  the group.
• Deleting a group does not delete the user
  accounts of group members.

6
Adding Members to a Group
7
Built-In Local Groups

• Built into all stand-alone servers, member
  servers, and computers running Microsoft Windows
  2000 Professional
• Give rights to perform system tasks on a single
  computer
• Placed into the Groups folder in Computer
  Management by Windows 2000

8
Examples of Built-In Local Groups

• Administrators
• Backup Operators
• Guests
• Power Users
• Replicator
• Users

9
Built-In System Groups

• Exist on all computers running Windows 2000
• Do not have specific memberships that you can
  modify
• Membership depends on how a user gains access
• Are not displayed when you administer groups
• Are available when you assign rights and
  permissions to resources

10
Examples of Built-In System Groups

• Everyone
• Authenticated Users
• Creator Owner
• Network
• Interactive
• Anonymous Logon
• Dialup