Active Directory Domain Services 2008 : Add a Group to a Group

11/28/2011 3:07:36 PM

Add a Group to a Group

Scenario/Problem: Your company has a number of universal groups that are used to assign access to resources. You need to add a global group to one of these universal groups.

Solution: Add a group to a group by using the Windows Interface or the command line.

Add a Group to a Group by Using the Windows Interface

To add a group to a group by using the Windows interface, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Active Directory Users and Computers.
3.	In the details pane, right-click the group object you want to add to a group and click Properties.
4.	Click the Member Of tab.
5.	Click Add.
6.	On the Select Groups window, shown in Figure 1, browse to or type the name of the group to which you want to add the group; then click OK. Figure 1. The Select Groups window.

Add a Group to a Group by Using the Command Line

To add a group to a group by using the command line, perform the following steps:

1.	Log on to a domain controller.
2.	Click Start, and click Command Prompt.
3.	In the Command Prompt window, type the following command and press Enter: Dsmod group "CN=GroupA,CN=Users,DC=WS08DOMAIN01,DC=LOCAL" -addmbr "CN=ApplicationA Group,CN=Users,DC=WS08DOMAIN01,DC=LOCAL" (where "CN=ApplicationA Group,CN=Users,DC=WS08DOMAIN01,DC=local" is the distinguished name of the group and "OU=New York,DC=WS08DOMANI01,DC=local" is the location to which you want to move the group).
4.	Verify that the results of the dsmod command entered above returns dsmod succeeded, as shown in Figure 2. Figure 2. Adding a group to a group using the command line.