0% found this document useful (0 votes)
9 views

creating OU users

This tutorial provides a step-by-step guide on setting up users and groups in Windows 2008-R2 Active Directory. It covers the creation of Organizational Units (OUs) to organize users and groups, as well as the process of creating a domain user and a domain group. The document emphasizes the importance of proper design and organization within the Active Directory environment.

Uploaded by

betong
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
9 views

creating OU users

This tutorial provides a step-by-step guide on setting up users and groups in Windows 2008-R2 Active Directory. It covers the creation of Organizational Units (OUs) to organize users and groups, as well as the process of creating a domain user and a domain group. The document emphasizes the importance of proper design and organization within the Active Directory environment.

Uploaded by

betong
Copyright
© © All Rights Reserved
Available Formats
Download as DOCX, PDF, TXT or read online on Scribd
You are on page 1/ 5

Windows 2008-R2: Active

Directory and how to Setup


Users and Groups
In this tutorial we will do a basic setup of a User and a Groups. This entails the
creation of Organizational Units and the creation of sub Organizational Units in
order to keep things organized. We will create a domain user and then create a
domain group.

1) We first start by going to Run and then by going to Start – Administrative


Tools – Active Directory Users and Computers. This will be the central
place of where you administer your active directory.

2) You will be greeted then with the main panel of the Active Directory Users
and Computers.

3) At this point it will be a good idea to mention Organizational Units


(OUs). You can view these as containers where you can place users, groups and
computers. So for example I view my home computers as my own property and
as such I can create an Organizational Unit called “GM-Computers”. With in
this OU I will create a unique environment. You create a new Organizational
Units (OUs) by right clicking on the root of domain controller which in the case
is called “ACTIVEDIRECTORY.VMHOME” and selecting New – Organizational
Unit. You then will be asked to name your new OU. This is where business
sense kicks in and the proper design needs to be implemented.
Let us use our imagination and assume that “GM-Computers” is an actual
company. A company has employees divided to different departments. You will
have your support department, your programming department, your
engineering department and your financial department and so on. Since GM-
Computers is a unit that represents an actual organization, we have to take
under consideration the aspects of the organization as just mentioned above. So
in this case we will have to further create Organizationa Units in order to
organize in a neat and clean way all the users from all those different
departments. As such we can right click on the GM-Computers organization
unit and select NEW -> Organizational Unit and name it for example
“support” then a another OU named “Programming_department” and so on.
Now each of these OUs are boxes/containers were we can place the appropriate
users/groups/machines.
As you can see above we can now start creating users/groups attaching
computers to which ever group (OU) we wish according to function with in the
organization in terms of being a company in order to respect business rules.

4) At this point we will need to add items and the first item will be to create a
new user under the OU called Main_Users. This now will be a DOMAIN user and
it will belong to the ACTIVEDIRECTORY.VMHOME domain. In order to create
the user right click on your Main_Users OU and select NEW->USER. You can
provide generic information and then you must enter the actual user name. In
my case I am entering the username IronMan. The prompt after the one below
will ask you for your password.
It should be noted that by default each new user is assigned to the domain
group ofUSERS. As such they have limited permissions.
5) Now we will go ahead and create a group. Right click on
yourGM_Computers OU and select “NEW -> Organization Unit” and call
it GROUPS. In the screenshot below you can see the available options. My
group is GM-Group. In order to understand the differences between a Domain
Local, Local and Universaland Security Group Type and Distribution Type please
read the following articles: Group Scopes . For our case we and in general the
default option is Global. TheGM-Computers organizational unit now looks like
this.
You then can right click the GROUP OU and select NEW -> Group and with in
your GROUP OU you will create an actual group. I will call this
group GROUPS. As with a regular group nobody belongs to this group yet. You
can add users by selecting GROUPS and then double clicking
the GM_Group and select the Members tab and press the ADD button and
type in IronMan. You have now just created a Domain account called IronMan.

You might also like