EXERCISE 1.02.E XERCISE 1.02C REATING G ROUPS WITH A CTIVE D IRECTORYU...

271_70-292_01.qxd 8/21/03 12:40 PM Page 23Managing Users, Computers, and Groups • Chapter 1 23

Removing Members from Groups

The process for removing a member from a group using the Active Directory Users and

Computer console is simple: highlight the member or members to be removed on the

Group Members tab, seen previously in Figure 1.12, and click the Remove button.You

will be prompted to confirm your actions before they are carried out.

To remove group members from the command line, use the dsmod command.This

time, however, the command being issued would look like:

dsmod group "CN=West Region Sales,DC=corp,DC=mcsaworld,DC=com" -rmmbr "CN=JeffSmith,CN=Users,DC=lab1,DC=corp,DC=mcsaworld,DC=com"

Figure 1.14 shows this command in action.

Figure 1.14 Removing Group Members from the Command-Line

Again, a check of the Group Members tab will confirm that the user has in fact been

removed from the group.You will not be prompted to verify your intent to remove a group

member when issuing the command from the command line.

Converting Group Type

If the domain functional level is Windows 2000 native or higher, security groups can be

converted to distribution groups at will, and vice versa. Recall that distribution groups do

not have DACL entries and can only be used for e-mail distribution. Security groups can

be used for e-mail distribution as well, and can also be used to effectively manage user

rights, assignments, and permissions. Converting a group from one type to another can be

easily accomplished from the Active Directory Users and Computers console, as discussed

in Exercise 1.04.

https://traloihay.net