Groups are used to organize users and assign them permission to network resources. It is typically recommended that you assign permissions to groups instead of individual user accounts.

To create a group in Active Directory, right click an OU, point to New and select Group. The New Object - Group window appears. Under the Group name field, type in a descriptive name for the group. Notice again that the pre-Windows 2000 group name is automatically generated. The Group Scope section allows you choose the type of group you want to create. If the Universal group option is unavailable, you need to raise domain mode to either Windows 2000 native mode or Windows Server 2003.

The Group Type section allows you to configure the group as a security or distribution group. If you plan to use the group for assigning permissions, you need to select Security group. Once you have made all your selections, click OK and you will have a new group.

[tags]diana huggins,windows server 2003,group type,new group[/tags]