In this project, you view the existing global and local groups on a Windows Server 2003/...

In this project, you view the existing global and local groups on a Windows Server 2003/Server 2003 R2 or Server 2008/Server 2008 R2 server. You need access to an account that has Administrator privileges. Also, Active Directory (the Active Directory Domain Services role) should already be installed.

To view the global and local groups:

1. In Windows Server 2003/Server 2003 R2, click Start, point to All programs, point to Administrative tools, and click Active Directory Users and Computers. Or in Windows Server 2008/Server 2008 R2 point to Administrative Tools, and click Active Directory Users and Computers.

2. If necessary, double-click Active Directory Users and Computers, and double-click the domain, such as accounting.com, if the contents under these are not displayed in the tree in the left pane.

3. If necessary, click Users in the tree to view the contents of this folder in the right pane (see Figure 10-16).

4. If necessary, expand the Name column to view the users and groups. How many security groups are already created?

5. Double-click the Domain Admins group. What is the Group scope?

6. Click Cancel.

7. Double-click another group to determine if it is a global or domain local group. Click Cancel.

8. Leave the Active Directory Users and Computers tool open for the next project. (If you do not have time to complete the project right away, close the tool.)