Dell and Rodney Posted January 21, 2005 Share Posted January 21, 2005 Ive created my Active directory domain. I just wondered what method you guys would use to create a user group and set policiescheers Link to comment Share on other sites More sharing options...
FAT64 Posted January 21, 2005 Share Posted January 21, 2005 You cannot perform Group Policy on Groups - wierd, but true. You can only use Group Policy on Containers, Organizational Units for example.You can put Groups inside Containers. Link to comment Share on other sites More sharing options...
Dell and Rodney Posted January 21, 2005 Author Share Posted January 21, 2005 Thanks FAT64. Is there any where i can read up to create my first group with my group policies? or if someone can give a short guide to point me in the right direction?Thansk Link to comment Share on other sites More sharing options...
valter Posted January 21, 2005 Share Posted January 21, 2005 First you have to understand groups scope to know what group should you use.1. Domain Local Group are used primarily to assign access permissions to global groups for local domain resources. These groups can include members from any domain within the forest, trusted domain in other forists and from trusted down-level domains-2. Global Groups are used primarily to categorize membership in domain local groups3. Universal Groups are used to gran acess to resources in all trusted domainsIf you want just to group users i.e. after department they work in, then just use default "Global Group" and group type "Security" Link to comment Share on other sites More sharing options...
Dell and Rodney Posted January 22, 2005 Author Share Posted January 22, 2005 thanks - although i understand where your coming from what im after is to set up a small group just for testing purposes so i can get a user to logon on with the restrictions that i apply. Im unsure how to do this at the moment so help on what i need to do would be appreciated.Cheers Link to comment Share on other sites More sharing options...
FAT64 Posted January 22, 2005 Share Posted January 22, 2005 Open "Active Directory Users and Computers", right-click your Domain and select "New>Organizational Unit", give it a name. Create or move some Users into that OU, then right-click the OU and select "Properties". Click on the "Group Policy" tab, click "New", give the policy a name, then change/set any policies you see fit in the "Administrative Templates" section, then OK etc......Edit: Click "Start>Run", then type "secedit /refreshpolicy user_policy" (without the quotes!) and click OK. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now