543 Chapter 15: Controlling Windows Server 2008 Security
6. While Users is still selected in the left pane, click the Action menu and click
New | Group. The New Object ??“ Group dialog box opens.
7. Enter a Group name of up to 256 characters. It cannot contain just periods or just
spaces, and leading spaces or periods are dropped. Notice that the pre??“Windows
2000 name is automatically filled in for you. Only the first 20 characters of this
name will be used, so if you want, you can enter your own short group name in
this field.
8. Choose the group scope. Here are the scope choices:
?–? Domain Local Can contain users and global or universal groups from any
Windows Server 2008 or Windows NT domain, but their permissions are
limited to the current domain
?– Global Can contain users and global groups only from the current
domain, but they can be given permissions in any domain
?–? Universal Can contain users and global or universal groups from any
Windows Server 2008 domain, and they can be given permission in any
domain, but they are limited to distribution groups
Figure 15-5. Active Directory provides a number of standard groups that can be used.
544 Microsoft Windows Server 2008: A Beginner??™s Guide
9. Choose a group type. Distribution groups are used for e-mail and fax
distribution, whereas security groups are used to assign permission. Click OK
when you are done.
10. Right-click your new group and click Properties.
Pages:
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601