271_70-292_01.qxd 8/21/03 12:40 PM Page 23Managing Users, Computers, and Groups • Chapter 1 23
Removing Members from Groups
The process for removing a member from a group using the Active Directory Users and
Computer console is simple: highlight the member or members to be removed on the
Group Members tab, seen previously in Figure 1.12, and click the Remove button.You
will be prompted to confirm your actions before they are carried out.
To remove group members from the command line, use the dsmod command.This
time, however, the command being issued would look like:
dsmod group "CN=West Region Sales,DC=corp,DC=mcsaworld,DC=com" -rmmbr "CN=JeffSmith,CN=Users,DC=lab1,DC=corp,DC=mcsaworld,DC=com"Figure 1.14 shows this command in action.
Figure 1.14 Removing Group Members from the Command-Line
Again, a check of the Group Members tab will confirm that the user has in fact been
removed from the group.You will not be prompted to verify your intent to remove a group
member when issuing the command from the command line.
Converting Group Type
If the domain functional level is Windows 2000 native or higher, security groups can be
converted to distribution groups at will, and vice versa. Recall that distribution groups do
not have DACL entries and can only be used for e-mail distribution. Security groups can
be used for e-mail distribution as well, and can also be used to effectively manage user
rights, assignments, and permissions. Converting a group from one type to another can be
easily accomplished from the Active Directory Users and Computers console, as discussed
in Exercise 1.04.
https://traloihay.net
Bạn đang xem 271_ - MCSA MCSE EXAM 70 292 STUDY GUIDE PHẦN 1 PPTX