This project enables you to create a domain local and global group in Windows Server 200...

This project enables you to create a domain local and global group in Windows Server 2003/Server 2003 R2 or Server 2008/Server 2008 R2. You need access to an account that has Administrator privileges.

To create the groups:

1. Open the Active Directory Users and Computers tool if it is not open (see Step 1 of Hands-On Project 10-1). Make certain the Users folder is open in the tree in the left pane by selecting it.

2. Click Action in the menu bar, point to New, and click Group.

3. In the Group name box, enter DomainMgrs plus your initials, for example DomainMgrsJP.

4. Click Domain local under Group scope, and click Security (if it is not already selected) under Group type (see Figure 10-17).

5. Click OK and then look for the group you just created in the right pane within the Users folder.

6. Click the Create a new group in the current container icon (with two heads) on the button bar.

7. In the Group name box, type GlobalMgrs plus your initials, for example GlobalMgrsJP.

8. Click Global under Group scope, and click Security under Group type if they are not already selected.

9. Click OK and then look for the group you just created in the right pane.

10. Find the domain local group that you created, for example DomainMgrsJP, and doubleclick it.

11. Click the Members tab.

12. What members are shown?

13. Click Add and then click Advanced.

14. Click Find Now.

15. Scroll to find the global group you created, such as GlobalMgrsJP. Click that global group and click OK.

16. Verify that the global group is displayed in the Select Users, Contacts, Computers, Service Accounts, or Groups dialog box, and then click OK. (Note that in Windows Server 2003 R2 the name of the dialog box does not include “Service Accounts.”)

17. Make sure the global group is listed under Name on the Members tab. Click OK.

18. Close the Active Directory Users and Computers tool.