70-292_01.QXD 8/21/03 12

271_70-292_01.qxd 8/21/03 12:40 PM Page 15Managing Users, Computers, and Groups • Chapter 1 15

Figure 1.2 The Active Directory Users and Computers Console

The most common tasks performed in relation to groups include the following:

■

Creating new groups

■

Adding members to groups

■

Removing members from groups

■

Converting the group type

■

Changing the group scope

■

Deleting groups

■

Modifying group properties

■

Finding groups in which a particular user is a member

■

Assigning user rights and permissions to a group

Before performing any of these administrative tasks, the network administrator should

know how to change the domain functional level of their domain in order to support

Universal groups and scope type changes.

Changing the Domain Functional Level

If a domain contains only Windows 2000 Server and Windows Server 2003 domain con-

trollers, the domain functional level should be raised. Raising the domain functional level

from Windows 2000 mixed to Windows 2000 native or Windows Server 2003 allows the

network administrator to increase the functionality of their domain and their domain con-

trollers.They will be able to create Universal groups and also gain the ability to convert

groups from distribution groups to security groups and vice versa, as well as the ability to

change the group scope. Exercise 1.01 details the process involved in changing the domain

functional level of an Active Directory domain.

https://traloihay.net