In the IU Active Directory, how do I manage groups?

Note: The following information is intended for registered local support providers (LSPs) at Indiana University. If you are an LSP and have questions regarding the information in this document, contact LSP Services at  lsps@iu.edu ; otherwise, contact your campus Support Center.

The proper way to create and maintain groups in an Active Directory environment is through the Active Directory Users and Computers snap-in. For more information on how to create groups, see In the IU Active Directory, how do I create groups? To use this snap-in to manage a group in the Indiana University Active Directory, follow these steps:

1. Add the Active Directory Users and Computers snap-in to the Microsoft Management Console. (For information on how to do this, see In the Microsoft Management Console, how do I add a snap-in? If you're using Windows Vista, see this information from Microsoft.)
   
   
2. In the left pane of the console window, right-click Active Directory Users and Computers. From the menu that appears, select Connect to Domain, and then type ads.iu.edu .
   
   
3. Click OK. If you are prompted to confirm your selection, click Yes.
   
   
4. Double-click Active Directory Users and Computers, and then double-click ads.iu.edu. You will see organizational units (OUs) for each campus. Double-click the OU that corresponds to your campus.
   
   
5. You will see the list of all the departmental OUs. Each has a campus prefix and a four-letter departmental code. Double-click the OU that corresponds to your departmental code.
   
   
6. In the right pane of the Active Directory Users and Computers window, right-click the name of the group you want to manage. Click Properties, and then click the Members tab. You can manage members as follows:
   
   
   • To remove a member of the group, highlight the account you want to remove by clicking it once, and then click the Remove button.
   • To add a member to the group, click the Add button. Click inside the box that says "<< Type names separated by semicolons or choose from list >>". Type the names of the members that you want to add, separated by semicolons, for example: BL-CHEM-ServerUsers;dvader;BL-CHEM-Server5

     When you are finished adding names, click OK, and then click OK again.

Note: For an explanation of group scope, see In Active Directory, what are the differences between universal, global, and domain local groups? For an explanation of group type, see In Microsoft Active Directory, what are security and distribution groups?

Also see:

• In Active Directory, what are the differences between universal, global, and domain local groups?
• In Windows 2000 and XP, what is Active Directory?
• In Microsoft Active Directory, what are security and distribution groups?
• In the IU Active Directory, how do I create groups?
• In ADS at IU, how do I add a Windows 2000, XP Professional, or 2003 computer to my organizational unit?
• At IU, in the ADS Domain, how should I search for users, groups, computers, and other ADS objects?