Chapter Summary

This chapter was a continuation of Chapter 2 because we discussed more of the important skills that you will use every day as a network administrator.

Here you learned about Windows Server 2003 group accounts. You discovered the two types of groupssecurity and distributionand the three possible scopes a group account in a domain can have: domain local, Global, and Universal. Again, you started with Active Directory Users and Computers and progressed to the command-line tools. Then you learned about using ldifde to create groups.

In addition, you learned about the default groups in Windows Server 2003, and how and when they are used. Finally, you learned how to delegate some of the management of groups to an end user.

Key Terms

• AGDLP

• AGUDLP

• Domain functionality level

• Group accounts

• Group scopedomain local, Global, Universal

• Group typesdistribution and security

• Nesting groups