Changing the Group Scope

When creating a new group, by default, the new group is configured as a security group with global scope regardless of the current domain functional level. Although changing a group scope is not allowed in domains with a domain functional level set to microsoft exams Windows 2000 mixed, the following scope changes are allowed in domains with a domain functional level set to Windows 2000 native or Windows Server 2003.

•Global to universal, as long as the group is not a member of another group having global scope
•Domain local to universal, as long as the group being converted does not have another group with a domain local scope as its member
•Universal to global, as long as the group being converted does not have another universal group as its member
•Universal to domain local To change the scope of a group, complete the following steps:

1. Start the Active Directory Users And Computers console and expand the domain,OU, or free exam questions container in which the group is contained.
2. Right-click the appropriate group, and then click Properties.
3. Change the group scope in the General tab of the Properties dialog box for the
group. Click OK.
Practice: Creating and Administering Groups In this practice, you create and administer a global security group.

Note To complete this practice, you must have successfully completed MCSA Certification the practices in Chapter 6, "Implementing an OU Structure," and Chapter 7, "Administering User Accounts."
Exercise 1: Creating a Global Group and Adding Members
In this exercise, you create a global security group and add members to the group.

To create a global group and add members
1. Log on to Server 1 as Administrator.
2. On Server 1, use the procedure provided earlier in this lesson to create a global security group in the Chicago OU. Name the global group Sales.
3. Use the procedure provided earlier in this lesson to add User One and User Five as members of the Sales global group.
Exercise 2: Creating a Domain Local Group and Adding Members

In this exercise, you create a domain local group that you use to assign permissions to gain access to sales reports. Because you use the group to assign permissions, you make it a domain local group. You then add members to the group by adding the security global group yoti created in Exercise 1.