Creating a Security Group in Active Directory

Introduction:

Security groups in Active Directory (AD) are essential for managing access to shared resources, such as files, folders, or applications. This guide provides step-by-step instructions to help system administrators create and configure a security group in AD to streamline permissions and improve security.

Process Description:

This process involves creating a new security group in Active Directory, assigning appropriate group properties, and optionally adding members and setting access permissions. Properly configured security groups simplify user management and ensure secure access to organizational resources.

Prerequisites:

Before beginning, ensure the following prerequisites are met:

• You have administrative rights to the domain controller.
• The Active Directory Users and Computers (ADUC) tool is installed and accessible.
• You know the appropriate Organizational Unit (OU) for group placement.
• You have a naming convention or structure in place for consistency.

Gathering Materials/Resources:

• Access to a domain controller (e.g., WTVWDCPROD1 or WTVWDCPROD2)
• List of users or groups to add to the security group
• Defined purpose and scope for the group (e.g., department access, project access)
• Naming convention documentation (if applicable)

Step-by-Step Instructions:

1. Open Active Directory Users and Computers (ADUC)

• Log in to the domain controller.
• Launch Active Directory Users and Computers from the Start menu or Administrative Tools.

2. Navigate to the Desired Organizational Unit (OU)

• In the left pane, expand your domain (e.g., cprsonline.com).
• Locate and click on the appropriate OU, such as CPRS-SecurityGroups.

3. Create a New Group

• Right-click the OU > Select New > Click Group.
• The New Object – Group dialog box will open.

4. Configure Group Information

• Group name: Enter a descriptive name (e.g., Finance_Department, Project_X_Access). Use underscores instead of spaces; avoid special characters.
• Group name (pre-Windows 2000): Auto-fills but can be edited.
• Group scope:
  • Domain Local: For resources within the same domain.
  • Global: For use across multiple domains in a forest.
  • Universal: For use across different forests.
• Group type: Select Security (default).

5. Complete the Wizard

• Review group details and click OK to create the group.

6. Add Members to the Group

• Right-click the new group > Select Properties.
• Go to the Members tab > Click Add.
• In the dialog box:
  • Type usernames or group names.
  • Click Check Names to verify.
  • Click OK to confirm.

7. Assign Permissions (Optional)

• Navigate to the resource (e.g., folder or application).
• Right-click > Select Properties > Go to the Security tab.
• Click Edit > Add > Enter the group name > Check Names.
• Assign appropriate permissions (e.g., Read, Modify, Full Control).
• Click OK to save changes.

8. Verify Configuration

• Confirm the group appears in the correct OU.
• Verify group membership and assigned permissions to ensure accuracy.

Tips and Best Practices:

• Use standardized naming conventions for easier management.
• Group users based on roles or departments for simpler permission control.
• Review group memberships regularly to remove outdated entries.

Next Steps:

• Notify team members of their new access rights.

Additional Information:

• References: Zendesk Ticket.

Disclaimer

This guide is intended for use by IT administrators familiar with Active Directory and Microsoft 365.