EXERCISE 1.02.E XERCISE 1.02C REATING G ROUPS WITH A CTIVE D IRECTORYU...

271_70-292_01.qxd 8/21/03 12:40 PM Page 19Managing Users, Computers, and Groups • Chapter 1 19

Table 1.5

dsadd

Switches for Adding a New Group

Switch Function

-samid SAMName Specifies the Security Accounts Manager (SAM)

name to be used for the group—this will become

the pre-Windows 2000 group name. If not specified,

this name is derived from the distinguished name.

-desc Description

Specifies the description of the group being created.

Figure 1.7 demonstrates the usage of the dsadd command to add a new domain local

security group named West Region Sales using the following command:

dsadd group "CN=West Region Sales,DC=corp,DC=mcsaworld,DC=com" -samid WestSales -secgrp yes -scope l -desc "This group contains all members of the Western ResgionSales department"

Figure 1.7 Creating a New Group from the Command-Line

T

EST

D

AY

T

IP

Anytime there are blank spaces in an entry as seen in Figure 1.7 (West Region

Sales), the entire entry must be placed in quotation marks. Thus, the entire distin-

guished name must be placed in quotation marks in order for Windows to properly

parse the command and produce the desired results.

For more information on using the dsadd command, refer to Appendix A.

Adding Members to Group

EXAM