Active Directory User Groups Implementation
Jackie Shipley
POS 427
Brian Richards, Facilitator
June 13, 2005
Active Directory User Groups Implementation
Synopsis of Proposal Subsequent to the Active Directory (AD) implementation discussion, this proposal addresses possible user accounts and group organizations for Riordan Manufacturing. This document discusses user and group accounts available through AD, and addresses possible implementation plans for the parent domain of riordanmanufacturing.com. These plans could also be implemented in the child domains for the four Riordan facilities, though addressing the actual implementations for those sites falls beyond the scope of this document.
Users and Groups AD recognizes several types of accounts. User accounts refer to individual system users. Groups refer to user groupings based on function, need, department, or any number of criteria set by the company and/or the system administrator. User accounts fall into two categories: domain user accounts and local user accounts. Local user accounts define users to local computers with resource access restricted to resources associated with that local computer. Local user accounts cannot access any other resources within the domain. Domain user accounts contain information that defines users to the domain, AD stores this information, and the information is replicated to the domain controller. User groups further set and assign permissions for security and access to domain resources. Local groups represent a collection of local users on a single server or computer, with permissions assigned only to resources associated with that single server or computer. Domain local groups represent a collection of domain user accounts or groups specific to the local domain, with permissions to access resources specific to the local domain. Global groups also contain user accounts or groups from the local domain, but these groups ' permission can define access to all domains within the AD tree. Universal groups
POS 427
Brian Richards, Facilitator
June 13, 2005
Active Directory User Groups Implementation
Synopsis of Proposal Subsequent to the Active Directory (AD) implementation discussion, this proposal addresses possible user accounts and group organizations for Riordan Manufacturing. This document discusses user and group accounts available through AD, and addresses possible implementation plans for the parent domain of riordanmanufacturing.com. These plans could also be implemented in the child domains for the four Riordan facilities, though addressing the actual implementations for those sites falls beyond the scope of this document.
Users and Groups AD recognizes several types of accounts. User accounts refer to individual system users. Groups refer to user groupings based on function, need, department, or any number of criteria set by the company and/or the system administrator. User accounts fall into two categories: domain user accounts and local user accounts. Local user accounts define users to local computers with resource access restricted to resources associated with that local computer. Local user accounts cannot access any other resources within the domain. Domain user accounts contain information that defines users to the domain, AD stores this information, and the information is replicated to the domain controller. User groups further set and assign permissions for security and access to domain resources. Local groups represent a collection of local users on a single server or computer, with permissions assigned only to resources associated with that single server or computer. Domain local groups represent a collection of domain user accounts or groups specific to the local domain, with permissions to access resources specific to the local domain. Global groups also contain user accounts or groups from the local domain, but these groups ' permission can define access to all domains within the AD tree. Universal groups
References: Microsoft. (2002). Windows 2000 Domain Architecture: Design Alternatives. Retrieved June 3, 2005, from the World Wide Web: http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies /activedirectory/plan/w2kdomar.mspx#EHAA. NetG. (2005). MS Win 2000 Administration, Part 2. Reinstein, Robert. (2000). Microsoft Windows 2000 Server. Que publishing.