Active Directory Domain Services 2008 : Create a Group Object

8/4/2011 11:32:49 AM

Create a group by using the Windows interface or the command line.

To create a group object by using the Windows interface, perform the following steps:

1.	Log on to a domain controller or a member computer that has Windows Server 2008 RSAT installed.
2.	Click Start, click Administrative Tools, and then click Active Directory Users and Computers.
3.	In the console tree, right-click the OU or container where you want to store the group object, click New, and click Group.
4.	Type the name of the group in the Group name field, select the group scope, select the group type, as shown in Figure 1, and click OK. Figure 1. Creating a new group object by using the Windows interface.

Tip

The Group name (pre-Windows 2000) field is automatically populated by the wizard. You can modify these fields if required.

To create a group object by using the command line, perform the following steps:

Log on to a domain controller.

Click Start, and click Command Prompt.

In the Command Prompt window, type the following command and press Enter:

dsadd group "CN=GroupA,CN=Users,DC=WS08DOMAIN01,DC=local" -secgrp 
Yes -scope g -samid GroupA

Table 1 lists each parameter used in the previous command.

Table 1. Parameters to Create Group Objects by Using the Command Line
Parameter	Meaning
"CN=GroupA,CN=Users, DC=WS08DOMAIN01,DC=local"	Distinguished name
-secgrp Yes	Group will be a security group
-scope g	Group will be a global
-samid GroupA	The SAMID of the group (pre-Windows 2000 name)